Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File:                     XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier:          DdJ59Hklcaj5+M/Wvw9L0U/T+4YffZN1wXvObxUUYwI=
Subject key identifier:   44:45:23:8F:23:9F:5B:76:57:50:57:99:F3:77:68:CF:BC:5E:13:77
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer:       /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial:       019DE445A4066620C1BAB605997F44E53D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number:          18EB
Signing time:             Fri 01 May 2026 16:01:02 +0000
Manifest this update:     Fri 01 May 2026 16:01:02 +0000
Manifest next update:     Sat 02 May 2026 16:01:02 +0000
Files and hashes:         1: 0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa (hash: +q6McyBv6XD45sefW820BUSULPS6zrmqGUIvxYOPOus=)
                          2: OADJfv4sJk1hBJpusL11pl6fFtI.roa (hash: CYKU8NdxaFNmdeaAWm70OIx6aPv3u8b/dlSWiMUH5iU=)
                          3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: nJRc27hEXty0LoDCKxXWA+nvi6DzCFkMakSEBqirdI4=)
                          4: l0x0gNUieNkYXNEIZ0HnbvxPCtI.roa (hash: LOiTnDzO1qKX4OsX911ZfvLi+m4Ieb87SaoClzu9V+A=)
                          5: x8LHw7zDa42zMdIg9zthvEzV2kE.roa (hash: 4t3LBnliu+TFNqK0uHC8bitBdGAkSxERgzaOQAy67TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e4:45:a4:06:66:20:c1:ba:b6:05:99:7f:44:e5:3d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
        Validity
            Not Before: May  1 16:01:02 2026 GMT
            Not After : May  2 16:01:02 2026 GMT
        Subject: CN=4445238f239f5b7657505799f37768cfbc5e1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:ad:03:a6:2b:b0:4a:21:67:db:e1:85:22:
                    f5:89:c8:dd:82:79:9a:ff:af:fb:70:c9:3e:b5:63:
                    9c:7d:b5:3a:e8:b1:35:cb:63:d2:bf:6b:44:40:7e:
                    7f:18:65:8f:7f:70:43:1f:14:14:82:02:55:e1:c1:
                    a5:34:83:ec:6c:ce:bd:36:19:d5:f2:ce:5d:e8:4e:
                    69:c0:a6:30:0a:17:90:47:ac:9e:01:a8:2c:2d:7f:
                    df:44:bb:0a:88:23:99:00:33:41:0e:2d:ee:a2:85:
                    c7:dd:fc:66:ce:88:a6:17:34:91:5a:12:79:5c:47:
                    05:0f:60:e7:90:9e:d0:ac:d1:d3:b4:79:4a:35:2b:
                    b8:a5:e4:88:57:4e:2e:90:3c:20:46:16:9b:9c:23:
                    f5:a8:ca:f7:11:67:54:13:88:83:af:69:86:2f:00:
                    3f:76:a7:da:5d:b3:7b:1e:b0:31:9f:25:6c:48:9c:
                    63:4f:b3:f5:8a:1b:aa:3d:8c:a5:b2:9e:07:db:2b:
                    0c:1e:d3:88:3d:08:56:9b:59:04:02:68:41:a4:9a:
                    5d:18:42:ae:8d:d5:51:38:99:c5:51:c7:da:2c:92:
                    28:a3:39:36:ac:df:d0:d9:7b:c0:65:9d:99:0c:90:
                    38:c7:da:60:3d:f9:9f:ac:21:32:03:eb:7b:18:16:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:23:8F:23:9F:5B:76:57:50:57:99:F3:77:68:CF:BC:5E:13:77
            X509v3 Authority Key Identifier:
                keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:c7:ba:04:7e:8c:68:ba:ff:e0:21:63:f1:54:0a:27:fa:
         0b:f5:c3:bb:ca:d8:14:f9:09:7a:a9:79:b8:97:e3:cf:a7:b0:
         b9:6c:a9:2d:30:e7:b5:a1:5d:59:cc:a3:f6:02:c5:4a:54:69:
         32:d3:69:d4:d6:07:b6:d0:e0:de:6d:a6:52:8d:85:57:32:81:
         af:cd:4b:12:e2:e6:07:89:86:9c:1e:9a:a0:15:9e:5c:dc:bf:
         60:1a:e4:0e:5b:c2:db:c4:24:3d:62:a5:eb:c5:52:a1:f3:a8:
         61:b5:09:88:a8:f6:62:aa:03:98:e3:2d:a8:dd:a4:1b:24:31:
         fc:e9:ee:97:92:b8:fc:b0:5f:02:81:45:16:4a:f7:63:e9:63:
         70:ee:9e:43:0a:95:23:0a:15:c3:54:5a:30:ba:4a:db:88:a8:
         ba:58:c3:a7:10:b0:3a:af:28:21:bc:a1:a7:fc:bd:b3:e4:75:
         27:b5:bb:95:bd:33:46:01:e2:1a:cb:42:9f:cc:cf:91:3b:13:
         8f:3e:c7:eb:ef:c3:99:31:7a:c6:df:e9:cf:1b:03:db:fa:b0:
         52:0a:68:d2:d8:bb:81:42:d4:db:63:4d:d4:bb:d0:71:45:36:
         86:7a:9e:c4:81:04:ba:ea:7d:63:d8:f4:8a:6c:60:cb:b8:fd:
         f4:d2:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 23:00:38 2026 by rpki-client