Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          lyWUfdgSlHs5CUOxOYv+nhb3GJJu/rIsTDJr+ZqUQMA=
Subject key identifier:   45:A8:82:18:A4:5E:A4:F5:09:ED:29:84:EA:07:74:EA:4B:10:84:66
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       019D9BF54E7B880E2D16A6E6C1C2F69A2E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 15:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:38 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: IQtjHKTlWTF5prgMaK1dclgeE8xf33FkoqbTLSgu2Yg=)
                          2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:4e:7b:88:0e:2d:16:a6:e6:c1:c2:f6:9a:2e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Apr 17 15:00:38 2026 GMT
            Not After : Apr 18 15:00:38 2026 GMT
        Subject: CN=45a88218a45ea4f509ed2984ea0774ea4b108466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:d2:c8:d5:9e:79:ed:69:fa:3e:28:ad:a9:
                    2c:60:b9:73:44:12:24:68:6e:97:d5:b7:de:8b:8a:
                    05:33:ea:f0:48:cb:ca:1d:22:5e:3c:b6:a4:21:23:
                    95:5e:9b:fd:3d:06:07:54:37:6b:89:6d:54:4a:8b:
                    9c:b4:27:3e:35:a0:25:72:22:da:6a:32:75:15:b1:
                    6f:6f:e5:97:00:31:79:2e:7a:32:cd:3e:46:e6:95:
                    96:64:08:53:05:28:7e:b4:0e:b3:61:52:99:e3:9a:
                    f7:93:53:b3:e9:1b:4c:36:25:13:29:9f:70:39:a8:
                    bf:c4:98:55:16:0a:cd:8f:b6:7e:38:d7:c1:8d:ad:
                    dd:4a:d9:63:72:13:d7:b7:86:13:67:66:75:1e:45:
                    4b:b9:15:4c:b2:7c:98:4f:17:ac:dc:12:70:47:12:
                    15:15:1a:78:1e:d2:3a:0b:ff:3b:f1:56:23:26:fd:
                    60:61:40:e1:09:b2:87:6d:3b:e9:84:b7:14:e0:82:
                    8a:38:7e:9e:7a:08:73:4e:d3:01:ac:10:3f:c3:ba:
                    ca:25:46:87:a6:5f:fd:9c:fe:b5:c3:82:e6:58:d4:
                    f0:da:6f:44:1b:3f:72:b2:d6:c4:58:b0:a4:aa:83:
                    18:6a:73:cb:99:86:84:5e:e2:8e:d3:76:a7:c0:66:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:82:18:A4:5E:A4:F5:09:ED:29:84:EA:07:74:EA:4B:10:84:66
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:35:f9:ef:e2:48:b5:f9:5d:30:2a:db:3d:4f:e1:44:e1:
         20:ac:5a:24:a2:0f:9f:73:25:92:3c:26:80:08:55:86:e8:60:
         d1:4e:9a:a2:37:67:18:63:b3:77:93:1b:c5:45:bf:ca:a4:e6:
         2b:66:01:f2:1d:c8:b6:88:e3:19:00:39:37:02:8c:19:80:d6:
         30:b6:fe:ee:45:06:52:ff:00:a8:e2:18:5d:4d:3b:00:36:97:
         63:d9:a5:95:7d:a7:80:80:d9:f8:c7:4d:3d:f6:83:6a:d7:aa:
         01:30:29:2a:df:ea:e3:86:18:40:8b:a6:3f:0e:26:00:8c:6c:
         9a:67:a8:b7:25:ae:88:f3:e3:bc:93:d3:80:08:98:42:e5:eb:
         e8:06:f9:63:7d:ed:5f:a1:21:94:87:5b:ef:5b:27:dc:0c:a9:
         f2:52:45:0b:d9:05:4f:c5:49:60:70:5c:41:dd:cb:ce:ba:34:
         ab:d1:09:14:91:8b:d5:68:15:38:87:fe:ec:28:06:32:95:9f:
         a6:8c:01:28:7d:0d:24:e3:eb:c4:54:1f:d3:2c:ce:9f:08:b2:
         12:2a:26:ad:53:53:cc:d9:6d:5c:54:3a:e3:c6:2e:14:1b:6a:
         0e:81:92:69:ae:7e:c2:9a:60:f0:d3:1a:ef:8e:85:7a:bc:0a:
         31:54:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:28 2026 by rpki-client