Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File:                     _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier:          ZYqMDk1+tTEBe3D+l/1i0CQucmc8Y8FyCTQhosLExM4=
Subject key identifier:   62:BC:AA:43:80:6F:67:DC:33:3B:2D:9F:1E:F4:2E:DD:FD:03:BF:55
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer:       /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial:       019DD2083F73F7C3F81855CEDE45D164BE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number:          18E3
Signing time:             Tue 28 Apr 2026 03:00:49 +0000
Manifest this update:     Tue 28 Apr 2026 03:00:49 +0000
Manifest next update:     Wed 29 Apr 2026 03:00:49 +0000
Files and hashes:         1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
                          2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
                          3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: hAM/3K7qSi8+g9KNEO7zN/DKgOIPLAloX9ROwv1TcTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d2:08:3f:73:f7:c3:f8:18:55:ce:de:45:d1:64:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
        Validity
            Not Before: Apr 28 03:00:49 2026 GMT
            Not After : Apr 29 03:00:49 2026 GMT
        Subject: CN=62bcaa43806f67dc333b2d9f1ef42eddfd03bf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:4c:26:2a:ef:b7:9d:96:a8:07:5f:1c:e5:
                    ac:2c:c3:0a:b8:27:c1:e3:db:ce:c2:48:97:a3:f4:
                    83:e2:be:c9:46:0c:10:07:79:a6:c2:ee:6d:e0:2d:
                    d9:1f:89:8b:48:fc:19:db:e4:9d:55:d9:90:de:50:
                    cb:6d:11:d7:ca:27:88:14:02:46:b7:d4:f8:de:e9:
                    36:56:06:3e:07:9a:97:15:61:b7:69:52:fe:cf:45:
                    6c:de:13:ec:71:3b:84:55:68:b4:f8:0d:dd:5d:7f:
                    9b:c0:6f:a7:5a:b7:63:d0:ac:cf:7b:2f:84:ed:7c:
                    44:9e:c4:cb:2b:40:4e:aa:48:61:52:d5:fd:65:6f:
                    8d:4d:60:cd:1e:8b:c7:94:20:11:ac:e7:9c:ea:3d:
                    29:a6:94:5b:f3:3f:c8:eb:d6:fd:bd:a0:b1:4d:1d:
                    ff:f1:9e:d0:2d:d8:17:1a:7f:c0:92:b3:20:e2:ae:
                    c5:c5:09:bf:24:76:fe:9b:2e:2f:34:5a:3f:c2:f3:
                    c4:bc:ab:3b:5b:af:74:45:86:75:60:6d:b5:95:4e:
                    2b:30:46:cc:c6:6f:92:e4:97:9c:69:ad:0f:1d:a3:
                    c8:e7:0f:57:9e:e0:d8:af:c7:3d:c9:69:67:d0:d0:
                    32:99:d6:c1:d1:a9:ca:19:22:6c:71:ed:25:c6:24:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:AA:43:80:6F:67:DC:33:3B:2D:9F:1E:F4:2E:DD:FD:03:BF:55
            X509v3 Authority Key Identifier:
                keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:1b:33:1c:bb:61:a5:a5:2a:ef:18:94:03:88:f9:0a:6a:
         b3:0a:10:17:b4:c3:47:78:a9:73:5c:8f:c6:f5:37:32:8f:ed:
         26:7c:cf:0c:9a:ea:26:c9:60:d4:14:92:ad:02:5f:5f:4d:d4:
         b6:b1:34:a7:cc:1c:83:86:1d:18:13:68:19:d9:ef:0c:a9:22:
         27:47:79:ce:15:60:b9:b2:3d:22:51:58:8a:ac:18:2a:bf:e8:
         79:dc:71:85:ec:88:a7:80:0b:70:7f:c3:71:5c:f6:60:4e:46:
         79:79:fc:8d:ae:ad:9a:f7:11:66:d3:cc:6b:4b:d7:ae:dd:79:
         43:e4:40:fb:b4:a4:bc:88:1c:f7:4d:88:ec:86:6e:61:bf:a1:
         60:91:c8:2f:b6:20:76:b8:df:9c:58:82:31:e7:e4:38:21:ad:
         77:77:ac:52:8c:da:8e:e3:e1:93:71:30:04:25:ac:f2:55:62:
         cf:c4:39:e6:ab:38:0b:78:a7:6f:42:83:cd:04:36:cc:cd:d9:
         03:4e:43:41:e5:66:58:8e:47:be:05:c7:58:a2:f1:ee:13:86:
         c6:b1:91:ac:e9:08:43:d4:99:a2:ae:cc:b6:73:a2:c1:30:40:
         ca:25:52:11:fd:b0:5b:46:f0:34:4f:1e:26:5a:92:ec:9f:c2:
         8d:08:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:45:59 2026 by rpki-client