Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          zG8XKbGYsXtWcH994WiSl0rnnscTNAVB73g0jS4Q2dk=
Subject key identifier:   CB:8C:B9:1C:F9:23:08:3F:C1:B1:39:03:DF:91:C6:51:21:5D:CA:E2
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       019DDA9E24E3169426C93D22C59450474D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          18E3
Signing time:             Wed 29 Apr 2026 19:01:30 +0000
Manifest this update:     Wed 29 Apr 2026 19:01:30 +0000
Manifest next update:     Thu 30 Apr 2026 19:01:30 +0000
Files and hashes:         1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: QWuJRoYxxnw2tH3WDUlI1fCXmZbpEsFaHRBsex1hKyI=)
                          2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:da:9e:24:e3:16:94:26:c9:3d:22:c5:94:50:47:4d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: Apr 29 19:01:30 2026 GMT
            Not After : Apr 30 19:01:30 2026 GMT
        Subject: CN=cb8cb91cf923083fc1b13903df91c651215dcae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:34:62:90:e7:84:fd:0f:d2:4f:ee:61:35:
                    08:71:ec:3a:52:89:6a:b0:90:fb:1b:57:dc:a4:46:
                    a9:cf:e4:d2:36:1d:c5:33:b9:85:7b:39:d5:a1:c2:
                    65:59:63:2f:7a:25:29:aa:76:22:fa:97:c7:40:62:
                    2e:1e:49:44:3e:9a:90:32:3a:fb:69:8e:09:d3:f8:
                    c0:48:8e:2e:c3:c1:21:1e:7a:f7:57:c9:69:17:c9:
                    74:eb:f1:39:09:89:07:6e:67:6e:3b:93:0a:cc:f7:
                    b3:ea:42:79:16:8f:06:4b:28:57:25:36:47:e3:b5:
                    98:39:85:88:a9:90:79:84:a7:96:85:f1:b0:38:26:
                    98:b1:8e:e3:af:1b:b1:14:b9:66:8c:17:f6:6e:a6:
                    c6:a3:18:2f:2a:2f:cd:70:b2:fa:38:79:4b:35:45:
                    b0:ce:40:a3:a5:fe:24:84:12:10:70:a4:ce:17:39:
                    d0:d2:44:a8:b7:cf:7d:f6:8c:5c:f0:6e:dd:83:8a:
                    39:88:2c:d5:c6:ab:44:16:98:b2:df:e7:c6:d8:67:
                    dc:61:72:c1:7d:48:d1:c0:3d:c0:4b:ac:88:90:0f:
                    fe:46:88:4c:07:9f:f8:f7:c4:eb:49:89:31:c0:43:
                    e0:d9:45:51:3f:32:f4:7d:3a:5a:d5:7e:9e:44:e9:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8C:B9:1C:F9:23:08:3F:C1:B1:39:03:DF:91:C6:51:21:5D:CA:E2
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:8b:35:7c:78:79:f7:70:2b:07:e0:f8:cd:02:d9:3f:4f:
         09:8c:ed:7d:07:d4:0a:22:da:09:13:ba:03:09:a8:ad:e2:cf:
         c3:30:ba:2f:c5:1c:55:50:4f:1d:e2:f2:0f:b1:7a:a1:12:20:
         69:52:30:83:de:e2:91:1e:78:9a:24:1b:ce:9a:ab:3d:96:40:
         e7:d9:15:e4:4d:b9:47:fb:83:53:fa:c7:96:32:f8:1d:48:0f:
         9e:59:e2:94:7c:78:94:f4:bd:fb:34:e1:3f:07:87:3f:58:dc:
         50:30:10:06:ff:e2:2d:fd:84:f7:b8:b3:2f:b7:91:aa:d1:0a:
         ec:88:1d:ec:8f:7a:21:40:04:35:55:57:b8:a6:2b:21:ee:4f:
         4e:5a:2d:ae:35:d2:52:83:d5:09:fd:e3:23:9b:f1:58:e9:72:
         7f:29:70:ef:06:3f:e6:32:9d:31:88:9f:8d:b6:e1:bf:4c:5f:
         a6:b9:a9:82:fe:1a:98:00:40:ca:cd:64:1a:c1:50:88:e6:16:
         e1:cc:b3:56:2e:2c:9b:94:1c:0c:97:69:cf:e2:78:0b:e5:ba:
         98:37:ac:12:f1:0c:69:9d:61:ae:65:c4:f7:96:d5:75:10:84:
         db:f2:f7:cf:7d:9c:dc:fd:cb:95:fa:17:d2:cd:90:03:fb:ef:
         d4:18:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:23:05 2026 by rpki-client