Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          9cEVUy+gf5djQ9nG0TUKvQrLHzcrmSxYdzGTUlg30dw=
Subject key identifier:   AC:8A:EF:9A:0B:9C:9F:6F:42:C1:35:17:52:C0:4C:CA:B7:D2:13:BD
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       019DA1C0D7D164156A7717CD147408D2566E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          191D
Signing time:             Sat 18 Apr 2026 18:01:02 +0000
Manifest this update:     Sat 18 Apr 2026 18:01:02 +0000
Manifest next update:     Sun 19 Apr 2026 18:01:02 +0000
Files and hashes:         1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
                          2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
                          3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
                          4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
                          5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
                          6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
                          7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
                          8: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
                          9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: k2jlUgX/ijIMWn/JmZ90qE2xYL87cPyECUAp90ZH8ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:c0:d7:d1:64:15:6a:77:17:cd:14:74:08:d2:56:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Apr 18 18:01:02 2026 GMT
            Not After : Apr 19 18:01:02 2026 GMT
        Subject: CN=ac8aef9a0b9c9f6f42c1351752c04ccab7d213bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:dd:a0:86:8e:f6:f2:2d:da:d8:c0:3b:28:
                    3a:9c:df:88:7e:59:85:9d:3d:91:b7:7d:62:69:15:
                    f2:3d:67:fb:ed:8e:39:a4:3e:48:b4:21:c7:de:bb:
                    9f:dd:13:e0:5a:58:42:2e:96:e9:03:47:ee:4a:59:
                    48:22:3c:f7:35:c3:b3:12:80:44:7f:25:13:14:91:
                    99:f7:5d:53:8f:49:11:e1:4b:bd:ab:f7:d3:44:6e:
                    f9:b7:a8:52:43:d1:17:e0:ab:d9:cd:d0:17:24:e0:
                    52:2f:00:9b:9b:7f:4c:4d:dd:83:b2:07:91:10:86:
                    7f:ee:0c:d3:8d:1b:5d:7e:eb:ed:fd:d7:80:bd:8a:
                    5b:83:27:15:1b:27:0c:c7:cb:d5:1d:23:3e:d2:5c:
                    71:14:16:bb:43:d7:d3:87:da:e6:25:12:ff:5c:20:
                    74:47:6b:8a:3a:92:d3:fa:9e:36:5f:fb:a4:60:ed:
                    cf:1b:36:f7:a9:2a:36:a6:67:1b:8b:92:92:36:19:
                    ac:e3:e8:50:b6:9f:5b:73:0b:ae:0c:99:a1:d8:05:
                    01:6d:42:82:f2:0c:6b:e2:79:28:29:8d:54:97:b7:
                    6a:3d:b2:00:12:94:c7:4a:d3:6f:d6:ba:c3:7a:6a:
                    09:86:32:d8:4d:46:1c:20:fb:30:f4:a3:6f:4a:39:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8A:EF:9A:0B:9C:9F:6F:42:C1:35:17:52:C0:4C:CA:B7:D2:13:BD
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:df:a4:8a:4a:7e:4f:db:0d:28:ca:3a:39:7d:12:a7:6d:aa:
         62:c0:e0:38:e3:38:f4:81:31:58:f7:93:ea:38:d7:e7:14:c8:
         bd:03:76:18:57:98:b2:7c:18:0f:bb:3b:57:16:f8:5c:a9:34:
         7d:44:bd:a5:6f:28:19:3c:ef:38:a5:84:e7:bf:15:a7:9f:b4:
         c2:f3:a3:c9:bc:00:ab:8d:f3:24:24:f6:e8:cd:88:c2:6a:41:
         3b:45:95:6f:ed:f6:4c:54:7f:19:39:e5:42:3e:54:64:e6:22:
         68:de:d5:e3:d6:7a:a6:f3:70:b9:bd:37:94:9f:cd:7c:cb:1e:
         c5:a5:f0:a8:66:c0:e1:58:85:12:44:20:18:dd:6d:f0:13:7e:
         58:6c:9b:4b:9c:99:94:a7:a2:6e:00:61:62:ee:82:f9:4f:e0:
         82:ef:47:49:c6:9c:45:98:f1:5c:98:f2:ae:54:79:5a:93:40:
         4a:7f:38:80:14:1c:f3:ba:c8:90:19:6a:9f:1e:d1:65:ca:93:
         ec:e7:9f:79:f9:ac:44:70:70:ca:6d:3d:32:44:59:08:34:80:
         a7:e4:68:7b:af:ba:bb:ec:55:ce:e3:fb:aa:25:eb:88:38:93:
         ff:0f:04:73:1f:74:83:b7:98:b1:b4:bf:e3:10:c2:e2:65:a0:
         8b:74:36:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:05:26 2026 by rpki-client