Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File:                     kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier:          /ES7qxPWl8byaMjUW4ktmFFIXQXfLoUkqXUiMRsL/MA=
Subject key identifier:   9E:12:12:36:80:69:65:C1:F3:AE:D6:8E:FD:14:AB:FE:5B:AA:23:25
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer:       /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial:       019D9AE294311436CF0752E28A703A1DB8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 10:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:33 +0000
Files and hashes:         1: H6Y3_w5a1_i-L1M075HehP8YsoI.roa (hash: uNroeOFalDlUw3uGgFmeF8VXUs3UXidLQdLtm01sWMc=)
                          2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: OiglLBQs4tRTEWv5jl11KMRd9GyOwiYDq1GSvJctD/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:94:31:14:36:cf:07:52:e2:8a:70:3a:1d:b8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
        Validity
            Not Before: Apr 17 10:00:33 2026 GMT
            Not After : Apr 18 10:00:33 2026 GMT
        Subject: CN=9e121236806965c1f3aed68efd14abfe5baa2325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:4a:d0:3d:fe:f1:73:28:eb:d7:97:81:bb:
                    d2:c1:3a:f0:e8:e7:55:79:05:d3:aa:23:09:f6:91:
                    b4:5c:05:d6:1d:3f:b9:ee:2f:25:b0:25:9e:9a:e8:
                    e3:e3:e8:0e:2b:68:6d:9c:8e:07:32:2d:6f:01:8c:
                    e2:27:f3:5b:bd:19:4f:88:37:9a:40:a0:67:3d:58:
                    7b:d3:97:62:6f:f8:02:33:c9:c7:5a:ff:a1:91:22:
                    19:c8:a3:b9:0f:97:54:89:e0:0a:43:b9:98:8e:a0:
                    23:70:41:27:09:ac:d3:6a:71:50:88:93:de:b9:ec:
                    9a:1a:57:c8:e4:74:e1:9b:aa:13:67:f6:e9:09:9e:
                    d5:8b:00:b4:27:ad:f0:9f:17:7d:53:9b:a0:42:18:
                    e2:10:9c:e9:41:18:06:96:f3:63:c0:37:d5:06:65:
                    f4:cd:84:7e:12:f6:a1:de:44:12:ee:8f:49:e3:03:
                    cf:2c:75:23:43:85:0d:69:ea:90:fd:ed:67:c8:09:
                    f5:1d:4e:1e:17:6f:0d:a3:04:fc:72:b1:d0:91:01:
                    0e:ba:56:ab:64:07:6f:ad:8a:39:65:90:12:05:a5:
                    ab:1c:05:c6:26:00:69:1f:c0:01:00:0a:e8:63:7a:
                    be:33:23:ba:ed:c9:0b:e2:bb:e9:51:e1:dd:4c:66:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:12:36:80:69:65:C1:F3:AE:D6:8E:FD:14:AB:FE:5B:AA:23:25
            X509v3 Authority Key Identifier:
                keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:46:32:9e:72:ce:3f:06:96:13:89:36:fc:4c:79:7b:b9:
         b0:77:d4:4f:a3:49:64:a7:b8:bd:39:26:04:de:63:0b:c3:54:
         cc:9e:c6:8c:a8:63:fa:be:f5:55:81:a8:5f:7b:71:4a:be:7d:
         dd:6f:9f:93:75:24:42:f1:8f:83:b2:ff:2c:0f:78:ec:8d:70:
         bf:33:32:57:51:e7:3f:b0:b0:91:11:60:a0:ce:2d:48:3e:6d:
         1e:77:aa:e8:43:c7:09:c8:20:fb:96:63:ab:fb:39:c9:d9:6b:
         a0:71:f6:5c:59:3f:c2:cd:53:bd:fc:94:4b:c9:3b:c6:92:09:
         4c:52:aa:7d:1a:65:7b:f5:d1:d9:d0:eb:e3:f5:f5:94:2d:d9:
         4f:7d:fe:ef:81:98:43:05:50:16:ad:d2:07:30:0e:c1:10:9d:
         fb:8c:78:ab:49:1e:ea:79:1d:22:33:a2:68:5c:5a:56:a0:86:
         69:76:b7:bc:e4:3c:71:e3:0a:f9:a2:0d:28:c2:4c:37:d6:81:
         aa:3c:86:df:88:55:42:ef:0e:98:35:e5:35:f1:78:c7:07:4a:
         5b:d8:5b:fa:4c:39:ed:d4:7b:eb:c9:4e:5f:61:72:be:00:8d:
         d5:26:e3:48:32:b9:2b:5a:fa:49:a2:d2:fe:45:cc:ad:5a:75:
         6e:cc:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:42 2026 by rpki-client