Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          naCPPyaauODxeOfE9xHWRJKdlDIplTk+J0h3sv665Ns=
Subject key identifier:   B7:5A:85:36:92:75:89:E2:EA:17:1F:FE:14:94:61:E3:01:E7:10:46
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       019DDE0CA14C81ECF127C65AF9FD12FC3BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          18E6
Signing time:             Thu 30 Apr 2026 11:01:02 +0000
Manifest this update:     Thu 30 Apr 2026 11:01:02 +0000
Manifest next update:     Fri 01 May 2026 11:01:02 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: rspxec7MRzg6z9tUbmoSx+WWL0CmrW4Dgx5SiPXjlTI=)
                          2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
                          3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
                          4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:0c:a1:4c:81:ec:f1:27:c6:5a:f9:fd:12:fc:3b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: Apr 30 11:01:02 2026 GMT
            Not After : May  1 11:01:02 2026 GMT
        Subject: CN=b75a8536927589e2ea171ffe149461e301e71046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:81:be:ab:20:f2:2f:32:bb:14:e8:a8:08:
                    6e:d0:7b:90:96:9e:db:93:52:21:7a:66:da:b3:dd:
                    4a:14:73:5e:bf:78:f6:a7:f2:6e:c1:c2:01:e6:5c:
                    b8:28:b4:a3:4b:12:31:8f:55:0d:c9:81:a9:6b:9b:
                    5b:ca:b7:30:c7:4f:30:cd:5c:27:28:21:74:53:55:
                    bb:e6:3c:a4:68:a7:71:4a:af:02:1a:ac:50:1b:8e:
                    fd:9d:55:58:d2:50:9d:b5:92:ae:31:5a:ee:b2:28:
                    41:dd:2e:6a:71:94:31:a1:3e:c2:63:9c:cf:31:33:
                    a4:ea:89:4a:d7:1e:43:cd:4b:90:7d:9f:88:6f:e6:
                    8d:78:59:99:d4:fe:d9:cf:8f:d2:17:7c:6a:13:17:
                    2f:82:dc:53:df:21:dc:bc:dc:95:55:b3:b0:17:69:
                    b0:26:6c:f6:e2:ac:74:8c:48:ff:35:c5:fb:04:d4:
                    4b:48:a7:59:54:c9:9d:91:0b:a0:90:7e:1a:54:a6:
                    15:c4:bc:c6:d3:db:d4:f6:84:de:b5:d7:42:1c:17:
                    2b:ab:8d:12:19:ec:62:24:5c:cb:6e:27:00:45:19:
                    4d:a3:e4:c0:5a:c9:31:9d:0d:6c:6c:84:7b:5f:79:
                    c3:11:d7:74:03:77:70:c2:82:23:96:86:d2:34:86:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:85:36:92:75:89:E2:EA:17:1F:FE:14:94:61:E3:01:E7:10:46
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:51:6a:e5:a2:a0:1b:98:e8:9e:aa:6a:03:d7:49:dc:19:9a:
         7f:00:f7:3d:67:e6:62:f4:14:27:66:52:27:fa:ba:89:cc:5f:
         4c:5b:fd:6d:45:33:bc:65:63:f8:5e:11:c0:c0:0e:02:42:ba:
         b7:62:d3:d0:37:1f:88:e9:bd:89:cd:ea:49:b7:75:6b:11:87:
         c8:4c:a0:cf:6e:b8:3c:4c:a7:2f:e2:2c:81:02:20:89:26:5c:
         3f:37:c3:63:d5:59:70:c3:42:fa:11:71:59:b8:32:8c:f4:3f:
         1e:26:e5:f5:24:2a:1c:16:f5:08:d2:88:8b:1e:56:5a:1d:c6:
         7e:9b:f8:bf:04:d7:7b:5d:ce:63:3c:7f:c8:2b:50:a4:6a:28:
         ca:ab:4f:ab:06:73:2d:ec:83:a7:6a:32:13:dc:f7:cf:b1:0b:
         26:ad:b9:e9:6d:02:88:5e:d2:5b:a4:4b:ce:fd:b5:06:c6:3c:
         4a:e1:65:66:f2:a5:08:3c:84:ea:1c:71:e6:ea:ee:f7:aa:c4:
         e2:f7:2c:1b:9d:a7:e8:cf:95:0a:17:7c:0e:ed:2c:60:78:2e:
         c9:c6:d1:eb:ca:b0:52:a0:2c:0e:39:18:45:cf:b6:58:5d:a3:
         35:f8:5a:3b:a7:65:50:74:82:bd:38:f5:50:63:a5:15:96:9e:
         96:2c:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:41 2026 by rpki-client