Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          tyIKIrbsjXQOqO7dhthGTznuwqvewod59BOrZluSlVs=
Subject key identifier:   12:1E:0F:9E:43:8B:A9:12:3E:6C:7A:4A:B0:D7:78:3B:D0:4D:F9:F1
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019DB20FA34A5C9E2207C79D6168DC7E3D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          18D0
Signing time:             Tue 21 Apr 2026 22:01:02 +0000
Manifest this update:     Tue 21 Apr 2026 22:01:02 +0000
Manifest next update:     Wed 22 Apr 2026 22:01:02 +0000
Files and hashes:         1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
                          2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: xwwUqy/MnU6vSMnUQklXUetI4ZbUfLzgdFJJ48O5Lk0=)
                          3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
                          4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
                          5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:0f:a3:4a:5c:9e:22:07:c7:9d:61:68:dc:7e:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Apr 21 22:01:02 2026 GMT
            Not After : Apr 22 22:01:02 2026 GMT
        Subject: CN=121e0f9e438ba9123e6c7a4ab0d7783bd04df9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:f3:5f:2d:94:40:64:6c:35:7c:19:b1:a6:
                    96:55:e9:3f:d1:d7:09:79:cf:f6:95:90:fe:d2:9a:
                    63:14:33:e0:b5:14:9d:3f:23:f7:ad:89:e6:1a:e0:
                    b5:a7:57:4a:ea:bc:85:82:ad:67:ef:22:74:85:9b:
                    0d:bc:3a:66:63:c5:ce:35:e9:66:33:16:dd:ae:6f:
                    c6:6c:9d:8a:ec:35:ff:bf:d4:59:1b:20:8e:88:ac:
                    07:4c:cc:40:02:75:4b:1b:25:ff:85:f3:f0:2b:77:
                    86:75:86:2c:b1:8b:d2:b6:34:34:d0:d5:63:84:08:
                    5e:51:4a:fb:48:b6:cd:5d:f6:8e:f6:da:2d:e1:30:
                    38:52:72:1a:8b:92:61:15:7f:5e:53:aa:0d:3f:65:
                    41:9b:f5:61:d9:81:1e:94:75:02:6f:d4:37:29:60:
                    6a:52:e6:cd:e1:6e:49:fc:0b:21:7e:90:9c:c2:66:
                    aa:54:60:d5:61:e1:52:71:0c:76:ad:ec:c7:d2:47:
                    8f:cb:12:35:0b:d5:ff:50:42:2b:0e:61:71:9e:c3:
                    c0:03:37:b5:7c:4d:50:e3:56:b8:45:d8:37:6b:73:
                    5c:05:17:6f:b9:86:0f:04:bb:02:40:21:c9:5b:7a:
                    5a:a6:a5:33:d5:83:4a:0f:4d:47:ac:d0:60:a1:5f:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1E:0F:9E:43:8B:A9:12:3E:6C:7A:4A:B0:D7:78:3B:D0:4D:F9:F1
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:ef:bc:fe:5e:aa:2e:b6:85:2f:41:7e:b0:7f:0a:96:e0:
         7c:2c:be:8b:27:12:cd:71:c2:1d:53:8d:b5:c4:c9:c1:3b:81:
         0f:95:a2:32:8d:8e:df:48:29:d7:d4:bf:72:fe:71:c7:c5:96:
         9d:87:05:3a:0f:a2:0b:2a:0a:bc:ae:3b:84:07:ed:0b:f6:00:
         07:ff:fa:1a:b6:24:04:60:97:82:ce:3b:35:cd:37:22:32:cd:
         88:48:7f:7c:ef:e0:82:aa:9d:30:d6:92:88:43:6a:4b:cc:67:
         0b:f9:da:40:c4:b3:94:8d:ce:f3:51:c6:c3:43:58:f4:ce:d2:
         7a:d1:24:20:60:10:ea:43:3f:c0:b6:aa:94:39:58:5e:a8:14:
         29:4f:95:7f:9e:85:1e:2b:45:00:08:03:ad:67:1d:79:dc:7d:
         a6:24:53:fc:31:06:40:03:68:8c:f7:31:a4:80:20:94:6f:8f:
         07:2f:e3:98:f3:50:70:48:3b:b0:d4:24:5f:d7:0f:bf:b4:b7:
         b0:19:47:0a:45:cb:17:da:f8:9c:e3:e6:87:48:3d:36:e9:24:
         0f:a7:80:48:d2:26:8b:8d:c5:e9:78:3c:98:60:b2:88:92:e0:
         48:bf:c3:d3:7b:2b:69:12:2f:0d:44:2e:97:5c:08:f2:a8:e5:
         5d:4e:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:20:10 2026 by rpki-client