Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          a7updq749ECnAE5CGjvGMX4Wg2Pt8o721lSCbNR+pF8=
Subject key identifier:   18:79:B7:94:97:05:39:71:FD:C8:84:EE:B2:4A:80:F8:43:EE:E3:DD
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       019DCDF4FEF5216A8ADC313570968F827074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          18DD
Signing time:             Mon 27 Apr 2026 08:01:18 +0000
Manifest this update:     Mon 27 Apr 2026 08:01:18 +0000
Manifest next update:     Tue 28 Apr 2026 08:01:18 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: qUo+WG2pKh7GIRnTNkHbtlLBlYmK4HsbSCZIJyXxv0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:f4:fe:f5:21:6a:8a:dc:31:35:70:96:8f:82:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Apr 27 08:01:18 2026 GMT
            Not After : Apr 28 08:01:18 2026 GMT
        Subject: CN=1879b79497053971fdc884eeb24a80f843eee3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:66:8e:e9:d5:6e:54:24:a3:bd:f7:b6:2b:d5:
                    08:d4:d1:50:2f:f8:51:7f:a5:3d:a1:96:6c:6f:8b:
                    16:c4:db:8f:69:98:0d:4b:d2:6e:57:56:ec:9e:2c:
                    32:54:76:da:7e:82:4a:dd:d8:7b:8f:b8:00:f9:c0:
                    57:d8:f6:f2:a5:6c:4c:e4:4a:b9:3a:d1:b0:15:86:
                    3d:db:36:e1:7e:03:20:08:84:a5:94:8e:39:8f:a9:
                    f7:49:75:bd:cd:dd:90:a6:0a:d7:bd:85:c9:a6:f4:
                    d8:eb:fc:f1:93:80:0b:ef:86:eb:28:b4:9e:78:59:
                    2d:81:3d:23:f5:92:35:a6:e8:e4:d0:95:71:5a:8e:
                    a7:1f:e8:8c:92:a6:0e:95:ae:f1:12:69:a8:c1:86:
                    50:33:ad:b6:8a:dc:3d:cc:d2:15:a2:23:8a:ac:9b:
                    38:f0:b8:9a:48:de:c0:8b:11:4e:f7:63:1a:e3:93:
                    13:7a:15:74:7e:ff:ca:bd:b5:f3:7e:96:b4:a2:3d:
                    50:38:d6:0e:ec:39:22:c4:44:a0:31:f2:a8:07:2c:
                    99:cb:34:22:1f:68:8c:23:28:2d:ca:be:c5:cf:a9:
                    52:64:f0:3b:cf:a3:85:cf:00:87:2b:f1:2d:cd:03:
                    26:e5:c3:7b:38:f1:0e:47:a7:ac:0c:6f:b8:f8:cc:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:B7:94:97:05:39:71:FD:C8:84:EE:B2:4A:80:F8:43:EE:E3:DD
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d1:eb:46:36:d7:0b:4a:04:62:ee:c1:9c:cf:c9:49:bb:d5:
         99:92:60:7b:75:fb:37:ec:0e:fd:c8:04:66:86:a8:19:66:38:
         e7:f3:3f:33:68:5e:71:b9:0e:97:95:cf:22:cc:ed:7a:52:a4:
         f2:eb:7f:cd:6a:5c:6d:f3:b8:a1:b2:b4:56:76:c3:21:4d:e5:
         7d:48:fd:3e:e8:0b:b2:70:c3:ec:58:60:3c:b7:88:5e:dc:43:
         b0:ac:b0:1f:2a:90:2a:0a:44:60:f3:95:9e:0a:a6:a8:0d:a8:
         34:c7:e1:fa:55:82:eb:02:79:ff:b7:1e:c8:38:b1:8f:b4:a4:
         39:a8:42:9d:c2:5e:51:2f:8c:4a:19:4b:3e:a0:06:70:31:17:
         23:2a:95:c4:e3:d9:f1:30:37:65:d8:bd:f9:c0:84:17:b2:1b:
         d3:5e:a5:df:8b:ee:b3:f8:62:41:e7:1d:a1:e4:b3:7f:bd:1d:
         59:ba:15:6e:56:94:c4:8d:cd:2b:57:2d:48:83:ed:5f:f2:67:
         75:28:f7:b5:d9:cb:78:ad:4b:a2:ce:ee:e8:f9:4c:14:f3:06:
         0a:87:37:3b:73:62:50:76:c4:bc:ac:26:a5:40:21:84:16:7b:
         1c:9b:f0:78:66:23:69:09:75:f6:ac:83:34:d0:fe:d2:7e:22:
         86:64:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:46:41 2026 by rpki-client