Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File:                     mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier:          3DxaZp7H+254e7fB/27dL/s/tolx1FrCclgU/3KWt6I=
Subject key identifier:   18:0D:E4:8B:64:9F:C9:34:AB:D8:2A:31:38:23:A1:10:C2:FC:7A:37
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer:       /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial:       019D99CFBD7865AAF32932661C744628E054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:21 +0000
Files and hashes:         1: Yi0Mal9l3vA4jYf7tOGmoQFT5oE.roa (hash: 4x5zhxj70POTXOMtZe2mwH2fh1I+fIXiCO3CRw0mGhc=)
                          2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: Uu0yxSHq0WrE3bLOCMPEIFyztpG0Exj1PITjuFKGJX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:bd:78:65:aa:f3:29:32:66:1c:74:46:28:e0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
        Validity
            Not Before: Apr 17 05:00:21 2026 GMT
            Not After : Apr 18 05:00:21 2026 GMT
        Subject: CN=180de48b649fc934abd82a313823a110c2fc7a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:5b:0d:7b:88:26:ba:e2:93:36:14:3c:f3:
                    bd:0d:e9:71:7d:af:3d:7f:cf:ae:93:fe:75:74:d3:
                    a8:48:36:58:83:86:6e:36:46:49:45:9c:7e:ee:37:
                    0c:18:ff:d6:c8:7a:39:d8:b6:ff:97:06:aa:60:d4:
                    6d:95:5a:af:18:f9:a7:6f:c9:d8:32:b0:e3:85:2b:
                    85:2f:47:95:62:bd:61:3c:6a:0a:b2:ed:04:b4:8a:
                    de:dd:37:a0:0d:32:83:40:fc:65:e7:9d:1e:54:b3:
                    c1:47:22:da:42:a5:38:93:94:b9:b2:00:1e:4d:d9:
                    20:01:d3:88:9d:59:8b:69:20:e1:a0:d3:cf:98:9c:
                    69:37:9e:7f:19:35:12:c8:60:54:0e:d7:d1:6e:41:
                    f5:15:7f:8b:41:b3:44:d9:a8:53:0d:70:2e:f9:6e:
                    83:3b:48:81:a3:16:4b:74:b1:7e:9e:33:7d:22:4a:
                    0c:36:04:3c:fd:fd:51:93:d0:76:45:8f:7f:df:c1:
                    fd:a1:da:11:31:36:23:37:2f:2a:de:bb:be:74:fe:
                    32:cc:24:89:eb:f1:2b:63:a1:88:64:99:8b:50:bd:
                    ff:d9:7d:6a:bd:20:7a:2d:1f:26:14:29:cf:30:2a:
                    e3:ab:e2:eb:20:1b:19:07:95:cc:bb:ef:d6:ba:71:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:E4:8B:64:9F:C9:34:AB:D8:2A:31:38:23:A1:10:C2:FC:7A:37
            X509v3 Authority Key Identifier:
                keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:20:3d:43:73:bf:ce:e8:4b:e3:4f:cd:4e:ef:97:d8:7a:
         81:c6:32:ca:7a:3c:0c:af:0b:66:14:db:00:b4:e2:a6:af:74:
         95:b8:7f:57:39:08:4b:f2:4e:f2:74:31:83:65:20:f3:a5:a6:
         31:03:b7:f6:a8:b6:09:1f:b8:c3:7c:bd:e9:d4:fb:bc:ee:e7:
         71:38:7e:04:63:d2:8c:41:cc:7b:7a:bb:9d:55:54:5a:37:f4:
         d4:06:e1:4f:c4:33:72:23:d5:d1:73:9b:42:f8:a6:8a:b7:eb:
         09:44:1b:47:e7:e8:da:1a:45:68:f8:85:35:86:a5:bb:e7:fb:
         3f:3e:89:dc:fb:64:7c:68:6e:94:ee:5a:c0:09:d2:37:fc:5c:
         40:db:3c:b8:48:77:a2:3c:66:9a:36:b3:ee:54:c6:24:f2:c7:
         bf:11:03:9e:52:bb:b3:20:8b:2a:3e:99:2a:b8:cd:41:76:9b:
         70:93:12:40:09:83:20:52:98:26:34:4a:d9:bb:c8:19:90:f9:
         62:05:b4:fc:a6:a9:30:19:9e:ee:e6:0b:52:78:f9:81:76:50:
         d0:ab:cc:b6:31:db:d1:96:ae:2d:02:a4:6a:1f:cf:e4:48:eb:
         9f:69:3e:34:0c:2c:d5:6c:9d:b2:d2:59:06:53:cc:09:50:bb:
         94:7c:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:54 2026 by rpki-client