Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          evzdv61ka4MU2LocAb9xcZv1kZsaEqzdA7/WeniE+6M=
Subject key identifier:   33:23:0D:56:54:95:E8:3B:86:8C:7A:DB:BF:1D:86:59:0D:6A:27:53
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       019DD05164DC64F2BEEFECAD35EEDAAEDDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          18E0
Signing time:             Mon 27 Apr 2026 19:01:28 +0000
Manifest this update:     Mon 27 Apr 2026 19:01:28 +0000
Manifest next update:     Tue 28 Apr 2026 19:01:28 +0000
Files and hashes:         1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 8Ntfy35y81712v05AlzaV8ZYBWnFOhZ+/NyViUS6q4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:51:64:dc:64:f2:be:ef:ec:ad:35:ee:da:ae:dd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: Apr 27 19:01:28 2026 GMT
            Not After : Apr 28 19:01:28 2026 GMT
        Subject: CN=33230d565495e83b868c7adbbf1d86590d6a2753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:aa:21:40:c9:28:18:f2:fa:69:c4:e9:28:
                    4b:c5:8f:8f:cb:8e:5f:30:24:60:f6:c5:a2:17:53:
                    cd:2f:4d:03:d8:bc:a0:e5:f3:81:08:8b:87:cf:da:
                    a9:d2:ef:59:d9:18:e6:68:8e:e0:64:98:ee:87:a6:
                    d7:3f:db:2a:00:ef:c6:0f:55:f2:ae:46:f4:04:be:
                    c5:c6:84:6d:cb:48:38:74:45:7f:5a:9c:76:8c:18:
                    3b:c1:3c:84:c2:ec:55:a4:be:47:a1:8e:ab:8f:d6:
                    a4:36:7f:72:4b:16:cd:00:d6:44:f1:af:46:46:69:
                    81:e2:ef:a9:4a:bc:69:02:0f:97:d9:14:78:6c:b8:
                    23:14:b8:0c:00:de:eb:b2:23:15:0b:31:ae:76:b7:
                    8a:c0:2e:96:72:0d:90:1a:2c:34:3f:94:9b:5d:e6:
                    3f:01:a9:1f:e7:d3:7d:0e:f2:fa:20:a1:d3:c8:1d:
                    11:2e:77:e8:7b:d1:2e:9b:a5:f7:5b:59:dd:d8:a3:
                    43:f7:96:44:48:ef:f9:78:c1:69:79:1e:db:d0:06:
                    2d:ce:1d:4f:4c:c3:21:46:ca:f8:ac:8e:79:08:53:
                    97:b2:d7:25:1e:30:b8:9b:de:e3:23:bc:51:27:88:
                    4a:63:af:3d:9d:e4:36:d2:9e:41:03:89:54:65:0d:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:0D:56:54:95:E8:3B:86:8C:7A:DB:BF:1D:86:59:0D:6A:27:53
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:36:ce:02:ef:65:b8:81:f1:5b:c2:8c:b0:ef:2e:d5:a9:f9:
         b1:43:c8:80:af:1c:3e:f9:4f:92:5e:b3:c8:13:bc:93:f9:e7:
         bb:ce:0d:e0:cd:39:8c:73:cb:0d:6a:c1:9f:f1:e2:98:2e:a3:
         de:e7:e1:9a:24:b8:89:9d:7b:f5:fa:33:fd:44:4f:b2:28:08:
         9b:d2:78:25:b0:9a:d6:ac:e8:9e:3d:86:3c:57:a3:bf:08:a4:
         b4:46:b9:e3:a7:03:76:b4:50:41:09:22:30:2e:e8:b5:d7:5b:
         14:9f:df:80:14:c0:09:30:c7:37:c2:89:4f:c3:1b:5f:84:66:
         fa:99:18:9e:3e:4c:94:bb:77:9e:9e:db:6e:42:ac:d7:68:be:
         5f:dd:6f:95:76:a4:17:45:63:71:14:5d:38:7d:5f:84:77:91:
         07:38:b6:a3:86:e4:ea:8c:c1:04:ba:aa:63:5a:28:11:ec:f5:
         f0:44:ab:c9:8f:cb:72:fa:8d:cb:7f:09:bc:b6:ec:6e:f3:eb:
         30:fe:4a:66:00:bb:36:06:e8:76:38:60:ad:3a:21:97:ea:f6:
         fc:83:67:cb:6c:bd:78:fa:77:d4:fb:e7:d2:c5:92:a6:f6:59:
         d9:a7:5a:37:e6:bb:67:b8:39:52:54:43:58:a1:ce:99:96:73:
         6d:52:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:24:48 2026 by rpki-client