Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          2QSrGEwWUI+YUdOLmCecgk2ckV+lk+o5AkprvHoAnJA=
Subject key identifier:   66:B5:AB:56:02:45:F4:B3:D8:A4:97:D9:AE:BD:B2:83:D0:76:36:F6
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       019DA41C86E6A33873EEA945983306223A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 05:00:26 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:26 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:26 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: AUcVGafr9XwfknFk6ChXZYHb6HAqilbjBi3IcduGIkA=)
                          2: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (hash: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:86:e6:a3:38:73:ee:a9:45:98:33:06:22:3a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Apr 19 05:00:26 2026 GMT
            Not After : Apr 20 05:00:26 2026 GMT
        Subject: CN=66b5ab560245f4b3d8a497d9aebdb283d07636f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:2c:f1:8e:a0:00:57:d2:69:c6:bb:92:00:
                    27:df:0b:0a:66:57:78:cf:27:af:42:23:93:69:c8:
                    42:13:c1:a2:eb:ef:b2:71:ee:19:50:a8:2e:72:1a:
                    83:c0:de:4e:9f:7a:04:b8:ce:80:36:12:a1:45:52:
                    fa:f2:80:1f:de:85:a3:ec:7b:61:e3:27:7e:fa:fe:
                    88:5f:97:18:e3:f8:1f:89:8d:c7:74:f6:f9:d4:23:
                    e7:ce:75:fa:36:c0:87:52:03:69:44:67:70:5f:0f:
                    b4:03:e0:a5:16:27:2e:60:47:b6:50:b0:24:bf:4a:
                    ef:71:08:2f:f4:76:97:ef:1c:30:f2:b9:6a:d4:58:
                    cd:76:5b:18:c4:62:26:b9:75:7e:36:9a:cf:c7:b6:
                    c9:02:46:55:a3:f6:33:b1:c0:84:4c:41:9c:8f:18:
                    b2:b6:1e:72:2b:ef:2b:fe:5b:47:a8:01:36:49:ec:
                    71:bc:32:44:1f:2e:01:71:40:58:f8:e8:a5:0a:a4:
                    11:71:9e:dc:01:01:f1:86:6b:ec:e3:6c:8d:b9:7e:
                    2b:01:d1:bb:18:af:05:b6:86:61:ec:a3:75:15:0e:
                    f3:25:27:bb:6b:c5:77:1c:91:ac:3e:8f:f4:93:d4:
                    cb:bd:b4:63:4b:eb:af:5d:a0:61:24:66:e2:fc:5c:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B5:AB:56:02:45:F4:B3:D8:A4:97:D9:AE:BD:B2:83:D0:76:36:F6
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:7b:18:e9:7a:a1:25:66:56:57:51:99:9f:c8:3c:a6:a6:
         55:7e:32:29:6a:ce:2a:eb:b4:c3:e5:97:4f:51:e2:9f:71:11:
         2d:7e:4c:92:fb:14:2c:cb:8d:a6:01:8b:e2:ae:99:b7:4e:9d:
         fa:be:47:6d:50:ba:88:e6:27:40:6f:f3:dc:35:44:c5:18:1c:
         67:30:ef:bd:68:fa:69:4a:23:5b:9f:3d:fc:d7:b4:29:a3:99:
         2e:e2:39:c0:43:59:69:f6:93:40:40:d2:b2:f5:ad:97:46:52:
         d7:36:5a:db:1b:47:80:5d:30:c2:13:2b:f1:13:3f:c5:22:76:
         51:1f:7c:9c:97:d1:f3:c2:dd:62:09:1c:28:30:4c:90:b3:a9:
         69:da:67:0e:5b:80:b5:50:6d:ca:fa:63:0f:e0:74:f9:ca:94:
         e5:82:a1:60:10:03:1e:d0:eb:49:6e:97:9b:5a:40:84:1c:97:
         f4:48:bc:c9:2b:dd:34:94:0d:7b:43:fb:55:50:88:f5:22:01:
         09:8d:91:88:a2:55:7d:67:39:0d:d6:d9:60:77:45:50:98:aa:
         c9:c1:0b:db:77:82:ab:26:cf:69:0d:2b:55:c0:17:09:79:37:
         7a:b7:95:f8:16:e7:43:05:9e:07:88:d7:26:a5:4f:dc:1d:36:
         f0:c7:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:10 2026 by rpki-client