Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          tSzvS88CfkzU9bEBj7jEFqcRKloKcqOooFta0ts/VP0=
Subject key identifier:   D7:BC:86:E9:66:FC:74:E9:40:E1:33:07:E4:02:49:0B:3D:69:C2:63
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       019D99624F092708206E9C1246F6EE4597F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:49 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: P+Z8LQg02ql5L5cyk8Yvthp73iN28r4eE+ki6tEfVW8=)
                          2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:4f:09:27:08:20:6e:9c:12:46:f6:ee:45:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Apr 17 03:00:49 2026 GMT
            Not After : Apr 18 03:00:49 2026 GMT
        Subject: CN=d7bc86e966fc74e940e13307e402490b3d69c263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:1c:38:c0:cd:48:9d:7d:88:8e:0a:a0:71:
                    c6:7a:87:dc:70:0b:0f:cf:20:8f:82:8d:6a:88:75:
                    98:37:ac:f4:d3:bd:c6:05:aa:d3:f9:e0:75:73:3e:
                    8c:87:e9:1f:08:7f:da:2e:17:a8:79:62:d3:be:88:
                    3a:2c:d8:e3:7b:bb:51:7f:84:2d:02:67:35:ff:3d:
                    0f:86:c3:17:2c:5a:0e:78:5c:3d:33:c1:3e:0f:f6:
                    78:33:27:f0:37:53:b2:6c:f6:fa:53:2c:ee:c8:9d:
                    09:41:a5:4a:1c:d9:f9:63:fe:44:e8:fd:6d:68:c2:
                    dc:15:2b:98:d9:26:59:ee:94:b5:25:8a:32:f4:b3:
                    8f:41:4e:49:b7:47:19:9e:9d:11:73:6f:5c:4c:14:
                    45:83:d4:b5:28:d7:73:fd:8e:6a:7a:73:b0:b2:05:
                    4e:d0:e2:05:b1:a6:6a:eb:17:3b:d5:27:07:3e:e0:
                    c5:75:99:7a:15:42:70:4b:19:8e:88:d0:97:bb:9e:
                    d9:db:2c:31:44:2e:83:01:75:c0:7e:b1:4c:8a:62:
                    5b:5c:a6:5d:63:ee:7c:40:f2:b1:47:6e:31:68:1d:
                    a5:da:6f:0c:38:dd:ac:d1:a4:a7:12:12:de:03:71:
                    29:d0:94:6b:3f:45:41:ec:8f:fc:3e:83:66:43:39:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:86:E9:66:FC:74:E9:40:E1:33:07:E4:02:49:0B:3D:69:C2:63
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:f1:cf:b7:30:78:52:33:41:73:57:d7:db:57:7c:c5:69:
         d8:af:cc:ee:f5:ff:63:bb:0c:25:97:b8:2d:53:df:74:7d:88:
         ad:37:f8:45:40:ca:0c:f8:6b:43:24:fb:d8:9b:67:dc:2f:11:
         84:98:23:cf:2b:39:1d:3f:18:a8:24:a1:cf:49:ef:e1:8f:08:
         f8:b6:10:b8:01:43:e5:55:a2:cf:2d:bf:70:1b:3d:e6:79:e8:
         81:24:e5:37:25:a9:08:83:c0:be:b7:5b:19:c6:28:24:dd:6e:
         8c:76:98:28:29:f7:df:f5:db:b7:e6:8d:50:a4:89:64:ec:44:
         38:0d:6e:a2:09:7a:ed:d7:bb:bb:ce:79:90:b6:a1:1d:b1:1e:
         7a:f3:52:4e:fb:1b:f3:f7:f9:8f:c7:b5:c0:e9:7d:51:0b:81:
         c6:b2:e0:72:e5:b8:e5:2f:d6:aa:52:12:74:d1:ea:5d:ae:de:
         60:8f:c6:a1:f4:ba:38:38:ca:1b:76:6a:04:5a:d7:d5:a4:64:
         6d:c4:88:2d:43:2c:91:89:b0:33:21:d9:2f:92:d2:23:ea:e4:
         d8:82:ae:13:df:8e:d6:91:9b:5f:eb:46:6b:5c:b7:e3:63:57:
         11:4a:4b:27:03:ce:d1:17:7c:9d:ab:1b:20:63:e1:14:3c:a7:
         4f:0c:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:45 2026 by rpki-client