Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          mSIH9CFVrK95Ol8EzcGuUkHL300FSmDIMjSNheFxc1M=
Subject key identifier:   92:C0:5C:3D:23:0F:19:0D:AC:90:A7:81:9D:A0:3D:4E:E1:6C:07:D1
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       019DECA4A954A1758A5BA5DF9791E9BE0FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          18F3
Signing time:             Sun 03 May 2026 07:01:47 +0000
Manifest this update:     Sun 03 May 2026 07:01:47 +0000
Manifest next update:     Mon 04 May 2026 07:01:47 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: m2e4mCxT98lobtyt9LYlAHKYRL1BARLFZujY3S0HqAg=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:a4:a9:54:a1:75:8a:5b:a5:df:97:91:e9:be:0f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: May  3 07:01:47 2026 GMT
            Not After : May  4 07:01:47 2026 GMT
        Subject: CN=92c05c3d230f190dac90a7819da03d4ee16c07d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:87:70:53:35:c7:ba:c4:4d:42:b0:d2:cb:
                    d8:c4:be:07:a9:d7:8f:47:82:99:ff:44:d8:a5:6d:
                    2f:f4:82:30:fa:c2:a6:a3:34:ab:75:a0:cb:3c:26:
                    8a:91:5f:26:41:07:6b:1e:09:7c:e7:98:e1:26:47:
                    76:ed:58:b5:80:21:18:1c:ce:df:4e:0f:b5:f5:13:
                    ea:a9:42:f7:45:6e:ce:d8:d8:a2:bf:4b:03:3b:aa:
                    fb:5d:a8:9a:a0:5a:4a:ef:a2:53:e2:41:50:f1:13:
                    a4:f7:b6:74:3f:20:a7:4f:73:34:e2:3c:00:2b:bb:
                    4d:c8:19:7d:86:10:ce:24:26:42:7f:ba:78:c9:1b:
                    fe:eb:72:82:c7:a8:60:e9:48:3b:4c:04:7f:eb:0f:
                    ec:45:22:7d:7f:6c:67:1d:5d:fc:9d:84:ea:2e:62:
                    5f:65:92:fa:56:4a:6b:76:91:f4:4b:9f:ab:43:38:
                    0a:72:da:c0:77:5b:3c:e5:37:93:8f:3d:1f:ec:54:
                    d4:9a:ab:9e:74:f0:38:9e:ec:72:8a:07:78:af:81:
                    00:62:36:60:97:37:c5:49:aa:52:61:d8:89:1d:f0:
                    36:6b:2b:13:ee:28:de:8e:62:1b:c9:4f:96:15:a0:
                    1d:50:e2:34:79:20:6a:c0:a6:56:69:26:40:4e:e0:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:5C:3D:23:0F:19:0D:AC:90:A7:81:9D:A0:3D:4E:E1:6C:07:D1
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:38:81:33:e7:b5:47:8f:2b:c1:be:15:28:f7:0e:ab:c5:
         1d:71:39:22:f4:f6:cd:07:6f:22:f2:f1:51:82:99:b9:4f:c5:
         6f:42:79:06:8e:9b:17:5d:fe:93:97:f3:5a:28:4f:75:43:e6:
         b6:c7:71:60:c4:a3:f0:96:b3:db:3c:b1:66:68:3a:1a:6b:23:
         78:f0:10:2d:39:72:f5:76:bc:67:3d:1d:5d:b1:0e:a7:cb:c5:
         cc:f1:23:65:63:21:e6:8e:92:b0:74:d4:34:31:0a:02:77:5e:
         90:36:a3:11:b0:53:f8:86:6e:8d:4c:a0:23:bd:61:c9:d7:25:
         80:85:bb:9c:02:9e:11:f1:5a:ba:90:c5:76:0b:61:ae:22:50:
         16:41:14:a6:d8:d8:10:be:02:f8:09:c8:a8:9e:61:4b:fa:d9:
         1b:83:91:bc:70:66:cc:c7:ef:b2:cc:7d:42:3c:85:c9:92:79:
         05:93:07:21:54:36:40:0f:9c:0c:d5:d4:d2:49:36:34:46:3a:
         c0:d7:30:c3:8b:53:2f:c2:df:54:01:d5:0c:4b:a8:f7:a1:cf:
         97:e7:e1:b1:9f:68:ae:81:8c:80:05:5f:60:b2:e2:b6:f2:36:
         f8:44:75:b2:b0:6c:d1:e5:82:a0:76:06:a7:9c:ce:81:11:ed:
         7b:c5:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:16 2026 by rpki-client