Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          en3cE0zJbd+KPCZUaxkCc2hoVgVT4NJfz6At+ZafbTs=
Subject key identifier:   E9:30:32:BB:DD:22:C8:46:60:10:9D:37:1F:FD:9B:D6:14:7E:B8:13
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       019DCED00E30854D76F9A3A537A3B0472346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          18DC
Signing time:             Mon 27 Apr 2026 12:00:34 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:34 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:34 +0000
Files and hashes:         1: 4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa (hash: QUBmzyJjWkqAkNmxTIkOKj9TlJBpwjA6voy4B8LR2j0=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: 5bTvOxF8MIuhgd+Y//n0HdMNX86hWs31ZmlS3MWnprw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:0e:30:85:4d:76:f9:a3:a5:37:a3:b0:47:23:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Apr 27 12:00:34 2026 GMT
            Not After : Apr 28 12:00:34 2026 GMT
        Subject: CN=e93032bbdd22c84660109d371ffd9bd6147eb813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:9e:92:5b:73:0e:59:0b:6f:f7:f1:27:29:
                    7c:32:06:7b:18:28:ba:6c:c0:bb:e7:d6:67:70:22:
                    79:fa:bb:66:fe:67:ed:a2:b5:59:ed:bb:ba:0c:22:
                    06:87:fd:e8:ba:1f:df:c7:27:ed:d4:ec:ec:cc:24:
                    ef:8a:78:3c:77:e9:b8:39:71:e7:e6:a1:40:09:7b:
                    2d:18:14:f8:1c:46:a2:50:9a:c8:41:61:94:6a:6b:
                    70:2f:28:96:3c:00:77:52:8c:22:ca:28:e9:fc:a1:
                    37:e3:f5:51:82:d1:1d:27:59:81:b6:89:32:d5:8f:
                    ee:8d:93:83:41:b7:74:22:5c:4b:4a:96:19:cf:40:
                    1c:ed:85:eb:d1:e2:48:df:0b:ec:b9:d8:26:bf:04:
                    fc:be:3a:27:b0:ec:fe:65:6f:12:81:b7:a0:23:21:
                    05:99:f3:ff:eb:e6:49:fe:af:ce:8a:36:07:30:64:
                    a0:ca:ad:31:af:09:73:24:71:47:90:e5:91:e0:ae:
                    9e:ad:34:2e:3d:cd:71:6e:8c:39:c6:aa:2d:d1:83:
                    44:1e:a6:46:03:52:7e:60:f8:9c:06:b0:de:c2:71:
                    b2:b5:ba:dc:d5:02:1e:2d:81:4e:b2:c3:c1:52:d8:
                    65:97:42:30:8f:97:a0:10:10:92:6b:2d:70:b5:b6:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:32:BB:DD:22:C8:46:60:10:9D:37:1F:FD:9B:D6:14:7E:B8:13
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:0a:b2:28:45:e7:e6:62:24:be:f1:04:0a:df:b7:e1:d2:
         d7:0d:f9:b2:c9:96:9d:fd:ce:89:34:95:47:11:13:bf:26:ba:
         52:7a:f6:e0:4c:b6:1b:49:7e:34:e3:8b:ca:5a:00:be:ac:a3:
         69:3b:18:61:5f:30:5f:d8:f4:be:c2:aa:9f:ff:1f:99:e2:11:
         fa:e1:43:89:44:2c:04:99:fc:87:34:5e:c4:f2:2c:a2:13:99:
         e3:f4:74:38:bb:58:c9:b6:34:6f:22:20:8c:db:78:ad:10:a6:
         35:40:91:97:70:99:78:ae:00:2e:b8:06:05:b5:af:34:08:97:
         97:da:bb:d8:29:09:dd:4b:56:11:0a:c2:9f:78:56:fa:05:ca:
         90:88:3a:aa:9a:02:e7:95:29:5a:d4:cf:d5:6f:fa:a3:16:6f:
         0a:99:2d:61:c9:f3:aa:5b:67:15:17:33:64:df:eb:0c:f9:43:
         34:d7:ad:27:fc:d1:77:b6:f8:78:d6:e4:05:b6:41:90:bd:56:
         fe:c2:8c:de:79:3f:45:a9:10:85:71:99:5f:d9:2a:a7:91:cd:
         5f:0c:cb:63:5b:dd:9b:6b:27:5e:e9:a7:45:5d:1c:d3:8c:1e:
         56:e4:da:be:f7:02:ca:11:11:de:e9:ae:21:28:1b:6b:c5:08:
         09:aa:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:36 2026 by rpki-client