Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File:                     26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier:          2ki+eNdgE1Rf+5pH3OlZsjXEDBU0MWrxhxMYnAHc8Lk=
Subject key identifier:   AB:02:F3:4D:26:FF:23:0A:CC:34:B2:EB:1D:5E:99:FB:CF:E3:2B:E7
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer:       /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial:       019D9AAB7B78B4DD9E8E1B1491B72B77A02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number:          053B
Signing time:             Fri 17 Apr 2026 09:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:22 +0000
Files and hashes:         1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: gr4bYhFv6Om/uPrH1VThD6nESfvuZ8qiWoP08pVDIzE=)
                          2: vU7OOAM1oU2KdgtDcq53PB71mUo.roa (hash: bWa7gI9NfYeqeGnGyvEymMLlvAT66yVfsa/6btBaFoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:7b:78:b4:dd:9e:8e:1b:14:91:b7:2b:77:a0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
        Validity
            Not Before: Apr 17 09:00:22 2026 GMT
            Not After : Apr 18 09:00:22 2026 GMT
        Subject: CN=ab02f34d26ff230acc34b2eb1d5e99fbcfe32be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:e9:99:56:cd:e8:7e:eb:56:a4:98:ee:f6:
                    20:7a:db:2c:e1:a7:99:5c:dd:f2:84:af:80:dc:86:
                    b4:91:3e:ca:35:20:66:d0:12:b5:41:99:de:5b:c5:
                    54:20:0c:7a:51:cd:42:e3:42:f2:9d:80:1d:2f:9a:
                    93:8b:83:3c:d7:51:a6:d2:da:f5:d2:80:db:96:ad:
                    6d:22:58:fb:64:da:83:a7:b2:b6:ab:b8:9e:c8:ee:
                    fb:ba:b6:2c:3e:a1:c1:71:e8:93:af:36:24:71:4b:
                    db:16:3c:33:a6:f7:1f:9b:60:e0:ba:8c:3b:a0:00:
                    b7:a2:2b:17:1f:d8:f4:8d:5c:70:e8:80:96:7a:bc:
                    ed:42:d4:cd:c3:37:b4:1d:1e:ad:30:f3:01:bf:bb:
                    9d:82:37:76:4d:92:bb:a2:c8:d5:57:b9:c6:a6:55:
                    4a:82:61:55:4e:9d:fe:98:c1:c8:29:8e:80:c8:4e:
                    b0:dc:98:ee:57:c7:13:2e:8a:c5:65:c3:08:de:47:
                    29:a9:b5:21:15:9c:06:89:59:54:7f:4e:77:b5:15:
                    c4:94:62:ee:42:61:93:54:a7:34:02:b2:4d:ea:72:
                    57:df:19:d6:51:da:3b:51:08:76:b0:b0:52:65:1b:
                    7c:86:a1:4f:78:76:3c:66:1d:c2:48:c7:d1:a0:5f:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:F3:4D:26:FF:23:0A:CC:34:B2:EB:1D:5E:99:FB:CF:E3:2B:E7
            X509v3 Authority Key Identifier:
                keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:7b:78:4b:e5:84:89:24:87:76:2a:2e:1c:23:c2:ce:16:
         fe:e7:52:b1:73:e4:c4:cf:28:66:05:3b:9f:d2:5b:cd:e1:67:
         00:91:f8:cf:52:53:25:54:14:ea:3e:85:6f:ff:47:c7:5f:fb:
         b2:d3:6c:95:50:0d:e9:e6:11:7c:4d:fe:80:7a:dc:09:45:b4:
         f2:af:f0:6f:55:ba:d3:da:f3:05:3f:f6:91:62:42:8b:ed:9f:
         5a:d1:7f:1b:bf:09:3d:36:a0:bf:a9:8b:af:03:4a:a8:8b:69:
         f4:13:1a:dc:77:a3:18:b3:44:f7:72:d0:15:f7:e6:fc:6e:7a:
         71:55:36:cc:21:9c:7b:6c:46:43:31:72:d9:46:e9:eb:9f:1b:
         c3:fb:09:cf:f2:c0:27:a9:12:cf:86:1a:c6:2f:18:fe:8e:57:
         2d:90:6d:c3:bd:d7:ba:11:2e:9b:78:8d:b2:75:6c:c2:70:f2:
         2f:60:ac:b8:c7:0e:a8:22:27:f3:61:db:2b:27:97:3e:5b:76:
         58:df:41:79:71:67:05:d4:e9:a1:04:78:8a:d6:83:48:93:9f:
         82:01:f9:ec:ba:3f:75:63:2e:84:95:17:d9:00:48:c9:dd:c0:
         d3:90:5b:29:a5:a1:1c:a4:63:82:04:c1:9a:8a:e2:16:8e:f9:
         3f:c3:df:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3t4tN2ejhsUkbcrd6AqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyNDA1NTVkODZjOGRiZGU4MzZlZGQxNjRjZDMyOGZh
ZTYzYjUwHhcNMjYwNDE3MDkwMDIyWhcNMjYwNDE4MDkwMDIyWjAzMTEwLwYDVQQD
EyhhYjAyZjM0ZDI2ZmYyMzBhY2MzNGIyZWIxZDVlOTlmYmNmZTMyYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hzpmVbN6H7rVqSY7vYgetss4aeZ
XN3yhK+A3Ia0kT7KNSBm0BK1QZneW8VUIAx6Uc1C40LynYAdL5qTi4M811Gm0tr1
0oDblq1tIlj7ZNqDp7K2q7ieyO77urYsPqHBceiTrzYkcUvbFjwzpvcfm2Dguow7
oAC3oisXH9j0jVxw6ICWerztQtTNwze0HR6tMPMBv7udgjd2TZK7osjVV7nGplVK
gmFVTp3+mMHIKY6AyE6w3JjuV8cTLorFZcMI3kcpqbUhFZwGiVlUf053tRXElGLu
QmGTVKc0ArJN6nJX3xnWUdo7UQh2sLBSZRt8hqFPeHY8Zh3CSMfRoF+8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsC800m/yMKzDSy6x1emfvP4yvnMB8GA1UdIwQY
MBaAFNuhJAVV2GyNveg27dFkzTKPrmO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDkt
NGJlYzhmMWI1OGVlLzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDktNGJlYzhmMWI1OGVl
LzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB97eEvl
hIkkh3YqLhwjws4W/udSsXPkxM8oZgU7n9JbzeFnAJH4z1JTJVQU6j6Fb/9Hx1/7
stNslVAN6eYRfE3+gHrcCUW08q/wb1W609rzBT/2kWJCi+2fWtF/G78JPTagv6mL
rwNKqItp9BMa3HejGLNE93LQFffm/G56cVU2zCGce2xGQzFy2Ubp658bw/sJz/LA
J6kSz4Yaxi8Y/o5XLZBtw73XuhEum3iNsnVswnDyL2CsuMcOqCIn82HbKyeXPlt2
WN9BeXFnBdTpoQR4itaDSJOfggH57Lo/dWMuhJUX2QBIyd3A05BbKaWhHKRjggTB
moriFo75P8PfiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:01 2026 by rpki-client