Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          Df1HK3xrI0chvMWmmsEzp/foFZ/LIGltOITGaZHjURI=
Subject key identifier:   1A:F3:30:35:A4:EA:40:03:77:51:13:6B:9A:F0:8F:6E:FC:88:2F:E0
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019DCD4FD64B14BED33639F3EDBB10AD366E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          18E6
Signing time:             Mon 27 Apr 2026 05:00:54 +0000
Manifest this update:     Mon 27 Apr 2026 05:00:54 +0000
Manifest next update:     Tue 28 Apr 2026 05:00:54 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: A5ePNQA3iUg0Kdifb8yvTUaSfC7ILdmXxfcAh1oSJE4=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
                          6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:4f:d6:4b:14:be:d3:36:39:f3:ed:bb:10:ad:36:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Apr 27 05:00:54 2026 GMT
            Not After : Apr 28 05:00:54 2026 GMT
        Subject: CN=1af33035a4ea40037751136b9af08f6efc882fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:a9:e6:8e:f5:99:77:07:a9:d0:7e:a9:4d:
                    2f:0b:aa:52:d7:a8:74:5e:ae:e1:85:01:5a:ca:3a:
                    7e:b0:a0:90:cc:4a:27:d7:55:ca:0e:d0:f3:bd:bc:
                    6d:44:72:ee:4e:7c:ce:e8:cd:60:ad:d2:07:b0:cb:
                    31:49:bb:6d:30:23:a5:ae:62:f5:f8:59:10:48:10:
                    e8:24:a9:c2:59:61:c3:65:62:29:e5:52:04:86:19:
                    1d:8c:b0:11:4d:26:21:dc:ac:08:8a:70:a2:e0:85:
                    8f:cf:d2:e2:8f:ea:8e:c0:78:45:9f:a2:02:d1:5f:
                    95:84:fe:c7:ee:68:7e:cd:01:d9:36:4e:0d:76:47:
                    37:fb:44:84:73:35:fa:26:3a:3a:b5:92:3f:85:ce:
                    87:dc:ea:9a:85:e0:72:4a:d4:8d:17:3c:ce:70:b8:
                    73:f2:22:af:e1:af:0f:43:5e:48:86:bf:89:da:fb:
                    8e:a3:dc:3d:c0:a8:e5:28:93:ac:b0:b6:62:5c:87:
                    a8:42:fd:da:35:97:3b:fb:13:3e:73:f4:54:ba:fb:
                    57:f6:8f:29:51:4b:00:10:2d:d6:6e:4d:30:3c:f6:
                    4c:8d:cb:ef:ea:cc:1a:e2:5f:12:7a:bb:41:1e:0b:
                    6e:f1:77:67:aa:6b:e0:ab:3c:53:c6:77:d7:78:ee:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F3:30:35:A4:EA:40:03:77:51:13:6B:9A:F0:8F:6E:FC:88:2F:E0
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:06:80:11:1a:2d:05:a1:16:64:cc:a3:ac:3e:f8:05:3b:ea:
         6f:5d:99:9c:cb:e8:30:ed:70:13:78:f7:5d:4d:5c:08:73:fb:
         8c:1c:23:8c:85:b3:88:70:fd:db:8f:8e:7a:fb:10:7e:9a:c0:
         de:14:e3:c5:54:01:59:d8:47:78:1c:19:65:12:be:bb:04:e1:
         cd:00:f9:6f:e3:a8:f7:80:cf:8f:97:d6:ed:21:34:74:30:89:
         82:eb:51:9c:44:21:ae:ab:d3:a2:a6:15:8d:af:d3:31:4d:9c:
         38:dd:23:0b:3f:5d:62:9b:5e:2a:63:94:e3:5e:4b:f2:29:8e:
         1d:cb:99:88:a6:22:fb:01:42:58:a4:f7:a5:66:c3:45:d4:ec:
         4b:bf:33:18:3b:5b:29:d9:99:03:40:63:15:91:9b:ea:a0:68:
         a1:36:9e:90:43:24:fb:73:93:c3:19:f2:6a:45:03:90:b5:e9:
         68:c9:67:6c:df:94:ac:59:6c:76:70:6f:a3:c0:40:73:0a:cc:
         d5:19:7e:64:8a:1a:d3:03:86:f0:1d:27:2f:79:9f:cd:20:17:
         5d:7d:41:a8:1c:a0:97:e7:f6:a0:fc:ce:17:86:17:08:13:b0:
         7e:a6:96:db:e4:ac:07:1d:1d:5d:2e:2f:22:90:b9:bf:96:65:
         b0:9a:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:02:15 2026 by rpki-client