Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          AfH7xFjhPmFPHlQYOVqjTzliyohN3eHu5oJu3vznF2w=
Subject key identifier:   00:65:15:88:9D:60:9B:D3:BE:1A:DB:7F:C9:B0:D5:F4:44:1E:48:6D
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019DD163F97218A589D2DA4811CDDFFA1442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          18EE
Signing time:             Tue 28 Apr 2026 00:01:23 +0000
Manifest this update:     Tue 28 Apr 2026 00:01:23 +0000
Manifest next update:     Wed 29 Apr 2026 00:01:23 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: cU8YmVUcQszzrPcVHn0UK3sfJzIagIWUr9lvK2Wr8OQ=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:63:f9:72:18:a5:89:d2:da:48:11:cd:df:fa:14:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Apr 28 00:01:23 2026 GMT
            Not After : Apr 29 00:01:23 2026 GMT
        Subject: CN=006515889d609bd3be1adb7fc9b0d5f4441e486d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:aa:11:e8:3a:51:5f:d6:48:94:2b:eb:11:
                    ca:bd:86:cf:f1:9d:46:9a:a2:e8:f3:ab:c6:5a:f6:
                    bf:1b:b4:c0:23:36:f1:c4:3e:4d:c4:b7:73:9e:a1:
                    31:d3:d2:85:de:46:83:1d:62:99:4d:c7:c9:0c:97:
                    95:f3:48:9c:58:2b:8a:d4:81:ee:44:3c:f6:f7:cc:
                    e9:95:fb:e8:ee:38:cd:bd:f9:a2:5a:40:c9:5f:4a:
                    b1:2d:bf:02:38:c0:c1:09:94:5b:04:75:f8:8c:0f:
                    64:9e:c2:90:3f:c2:5c:26:48:45:a1:61:30:bf:b6:
                    e7:cc:31:df:a8:fd:a8:cf:f3:50:ab:68:2d:e1:bc:
                    6f:8f:cb:97:5f:bb:36:8a:83:97:ba:c8:3e:9b:87:
                    71:d8:4f:40:2e:18:40:79:2d:ac:2f:cb:77:1a:97:
                    3c:69:19:c0:6d:57:6a:43:63:a9:e1:57:16:73:89:
                    20:9f:5d:1e:0c:78:3e:e4:3f:2f:74:08:62:ab:79:
                    f7:4b:a7:2a:3a:5b:5e:11:07:e1:12:3a:9b:3f:89:
                    d1:ed:1a:84:3f:e8:4e:29:d2:67:05:a6:7e:99:85:
                    fe:ff:f4:ed:67:a0:65:c4:bc:60:bd:22:ea:73:44:
                    af:15:21:3d:ef:5a:fa:bf:9a:e8:58:de:13:3d:e5:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:15:88:9D:60:9B:D3:BE:1A:DB:7F:C9:B0:D5:F4:44:1E:48:6D
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:41:50:04:82:20:31:4b:98:fd:15:b2:f3:96:66:a7:66:d9:
         fc:0f:9c:d2:96:20:c8:49:5c:35:39:77:42:08:0e:4a:da:79:
         a5:a5:19:b4:be:0f:01:47:55:02:2b:72:ed:c1:ae:9d:f1:18:
         f8:41:23:03:cf:05:81:98:ab:11:64:5a:b6:f4:b1:d7:e8:46:
         37:ca:19:97:d9:09:58:fc:a0:80:62:3f:44:21:4b:52:da:d6:
         40:59:56:b0:cd:21:07:f4:ef:6b:ce:50:1e:a8:24:5d:e3:af:
         0f:31:58:ab:ae:b1:bb:73:68:ca:3a:63:63:89:06:d9:6b:eb:
         66:09:d2:ad:c3:2c:71:66:69:02:d7:c6:b0:1d:e9:e0:ba:8c:
         2b:42:1c:8b:5b:99:7b:2f:51:ba:e3:96:57:e3:84:b8:cd:00:
         50:09:9c:6e:c4:1e:8a:10:3f:85:76:60:82:aa:e3:30:e3:a5:
         4a:e6:01:19:51:5b:f8:e9:21:69:97:cf:5a:c2:cc:3e:aa:aa:
         aa:1c:95:08:60:ca:37:ee:48:9d:c4:61:86:24:6f:ff:1a:15:
         3b:c3:25:e4:d8:8d:da:b6:5b:a6:c1:8f:f6:bb:55:4a:9a:48:
         48:8c:f8:f5:a2:ec:d8:98:24:50:0c:52:90:13:a8:19:64:ac:
         e0:a3:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 09:54:43 2026 by rpki-client