Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File:                     a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier:          oQ622VeznxkT4mEjEwYfB2gw8mmfZrDx36AVriheUis=
Subject key identifier:   BC:B8:0D:91:DC:AC:4A:4D:61:DB:1B:A1:CF:45:16:11:EA:32:02:5B
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer:       /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial:       019D992B11DE91D7F9257FCBECA0B94D9573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number:          0EFE
Signing time:             Fri 17 Apr 2026 02:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:29 +0000
Files and hashes:         1: 0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa (hash: 4algmiejEZMto+7PZwa7gie6uv+uFN+W8bKhST4lB6M=)
                          2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: U2lokCsRyWkD4RMGYYncSJoboEprN3QbNdie1cA8zv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:11:de:91:d7:f9:25:7f:cb:ec:a0:b9:4d:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
        Validity
            Not Before: Apr 17 02:00:29 2026 GMT
            Not After : Apr 18 02:00:29 2026 GMT
        Subject: CN=bcb80d91dcac4a4d61db1ba1cf451611ea32025b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:a1:c8:29:e7:4d:76:7e:bc:bc:10:d4:4d:
                    3c:07:9e:33:ca:78:28:92:c4:1c:be:66:94:dd:41:
                    c2:1c:f5:9a:2b:00:47:c5:33:00:7c:0c:55:6f:21:
                    18:74:18:d3:93:e6:ad:11:a6:94:e1:f9:6c:d9:ed:
                    47:d6:6e:c8:65:b6:f2:8b:96:33:42:4c:be:32:55:
                    c6:ba:b0:87:ee:b6:1e:02:9d:a4:7d:f1:a0:52:7d:
                    97:b4:ab:3a:76:45:79:54:7a:c0:9c:8d:2c:0a:82:
                    53:4c:73:bd:fb:00:8b:e4:24:be:26:78:71:4b:74:
                    34:10:fc:69:b4:fd:ae:91:09:c9:9a:73:e1:52:1f:
                    a6:ae:11:35:7b:55:d7:0f:f9:6f:54:c1:cb:3a:b0:
                    21:e2:e9:13:35:f9:3f:d0:bd:86:c9:3d:2a:70:8d:
                    b7:ca:5c:77:f5:ec:26:f1:f2:a1:1c:1a:b6:22:1b:
                    8a:d8:3e:b8:bd:88:47:81:1a:37:f6:9d:42:c8:66:
                    bb:6c:d5:68:c7:df:7b:f8:ac:ad:11:65:79:d5:3a:
                    ed:e4:ed:97:e9:cf:b3:74:9d:35:85:3c:24:57:b5:
                    fe:c8:65:84:39:cb:b5:b3:02:ce:c3:ff:7d:e7:4b:
                    e2:a5:5e:45:4a:f7:9b:13:79:de:94:2d:76:0e:8a:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:0D:91:DC:AC:4A:4D:61:DB:1B:A1:CF:45:16:11:EA:32:02:5B
            X509v3 Authority Key Identifier:
                keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:de:b1:51:21:83:f9:d2:7d:0d:20:af:2d:8b:5a:ce:c3:
         3a:25:18:7b:42:09:9f:73:1c:42:0a:fc:82:ec:cd:2a:56:24:
         0d:88:e8:f4:f3:0a:44:47:3a:78:2a:fe:75:80:5f:23:0b:e7:
         95:97:36:e1:ab:50:fe:c8:fc:59:54:85:d7:03:90:dc:2e:be:
         2c:d4:5f:82:38:a1:43:9d:7c:ad:d1:40:b6:f2:17:55:b7:5f:
         9e:58:1c:15:74:d0:37:c2:e4:e8:cf:08:0c:ec:a8:ba:2e:f1:
         98:5c:93:9c:87:c8:5f:01:0d:ef:36:c4:6a:13:bb:1d:f9:86:
         26:cd:39:e3:d0:c5:83:1d:07:51:bc:9f:66:8c:85:40:46:30:
         1d:56:9b:dd:52:2e:ad:05:5f:e0:1f:84:d2:54:f1:a8:74:37:
         e5:db:fc:e5:2f:ce:db:31:ab:78:f4:26:46:7c:c8:c0:fb:c1:
         ca:65:38:b2:0a:68:89:00:c3:6d:a9:ae:85:5c:3c:c2:63:1b:
         59:ed:ed:d0:b9:79:fb:e7:68:ed:e5:30:c7:7f:f7:af:7d:0b:
         7d:bb:30:9c:a9:f1:ef:7e:d9:40:b9:98:20:e1:74:e2:46:4d:
         40:93:ed:34:4d:71:a8:0d:26:35:82:9b:a1:92:d7:38:bd:b2:
         3d:b6:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:16 2026 by rpki-client