Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          zlDR068Lzx0rnjF6NTC6FGlVVP5c2wjQXkscg4T5kzc=
Subject key identifier:   18:BB:34:A2:97:46:46:DD:AB:38:E3:58:11:26:1E:FA:9A:61:A9:88
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       019DA29CAD2E089D6493BBFB8442CD0C42A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          13D0
Signing time:             Sat 18 Apr 2026 22:01:09 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:09 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:09 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: q3jAZDJgRCp3RmX2Kga2XF6yGv2jJa0a5WZ2CxD2hRc=)
                          2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:ad:2e:08:9d:64:93:bb:fb:84:42:cd:0c:42:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Apr 18 22:01:09 2026 GMT
            Not After : Apr 19 22:01:09 2026 GMT
        Subject: CN=18bb34a2974646ddab38e35811261efa9a61a988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:f9:e4:ad:1b:1b:da:99:65:43:7e:a0:d5:
                    8a:39:05:a9:13:2e:70:e6:02:c7:03:ca:df:e7:05:
                    73:e3:8f:7c:1f:2f:b5:84:14:05:05:b5:8c:d5:a2:
                    10:f9:55:65:ea:a6:7a:9c:00:99:ce:15:83:a4:83:
                    cf:f6:c0:24:8d:8e:a7:5e:e0:f1:07:f9:da:e0:7c:
                    97:b5:f3:05:1a:4b:0a:4b:2f:02:b9:06:fc:7f:34:
                    2e:23:e9:35:47:97:8e:53:40:ed:f6:9e:f4:f7:f6:
                    e5:39:7a:0e:a2:11:42:eb:77:f0:21:9a:6f:0b:39:
                    0a:4c:bf:73:c9:35:44:cd:cb:33:46:c7:4e:34:f8:
                    4e:e0:62:14:be:c1:63:3e:ec:ae:fd:f3:8b:e0:3a:
                    06:f1:be:fb:a5:a8:6c:e9:a0:f6:c4:b2:61:a9:66:
                    1d:7d:2b:23:c6:cf:c6:a9:56:60:01:d7:b2:c2:f9:
                    34:b0:5f:41:17:95:da:d3:25:b8:95:e6:d8:e6:45:
                    a7:eb:14:77:07:2f:4a:52:2e:c5:ba:65:ab:99:d7:
                    df:0b:23:be:cd:79:34:07:b1:06:33:7b:bd:7c:ee:
                    2b:e6:d9:dd:63:ad:fa:d6:a9:c1:2d:22:cb:2d:79:
                    54:59:33:ce:32:8d:d3:fc:1f:1b:2d:32:9a:fd:82:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:34:A2:97:46:46:DD:AB:38:E3:58:11:26:1E:FA:9A:61:A9:88
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:61:60:43:a8:b0:da:39:f9:15:af:7c:d6:0b:44:99:b3:d3:
         97:f4:d6:d0:1e:c9:18:32:30:d0:30:93:81:0d:60:7e:46:cf:
         b9:e9:1d:b9:19:53:f9:08:82:3b:47:b0:97:74:97:66:0a:e6:
         2b:26:78:0e:d1:65:94:fa:c3:ee:d9:f3:e9:c9:ca:f6:8a:62:
         62:17:4f:55:fb:f3:70:4a:6c:d2:31:9f:9a:d6:71:c1:37:a9:
         d5:26:e2:c3:72:80:44:90:fa:11:6e:6d:17:51:05:ea:44:e0:
         a9:66:ab:0b:de:c1:60:26:8a:d1:c2:07:e7:ad:1a:4b:d9:ed:
         00:4c:4b:1a:05:ba:3f:7f:6f:bc:19:84:d7:75:6c:25:ac:d7:
         14:8a:65:3b:e2:c6:c4:e9:a6:cc:aa:12:9f:8f:18:d8:ec:15:
         b5:73:1d:7b:ef:b4:29:40:04:de:84:d5:eb:6e:19:0d:f6:7d:
         3a:0a:8d:f9:1d:79:96:d9:40:e6:94:4c:e3:ca:08:d7:d4:0a:
         d0:28:b6:9b:e7:af:40:e7:55:77:2c:b3:c7:74:0b:6e:0b:f5:
         0a:ca:ed:47:35:63:f8:2d:61:de:d4:b9:54:51:58:a9:8e:77:
         47:b7:80:6e:2d:c7:f9:b6:5d:fd:c8:40:bf:13:f6:97:56:bb:
         f9:ec:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:00 2026 by rpki-client