Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File:                     k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier:          uarI7b0iAijy9HvzGetu++H1YQoq32CGUIVHsS3uW8M=
Subject key identifier:   70:B7:D5:BE:35:CB:73:2D:11:D1:EE:2B:C9:B2:03:97:97:61:55:97
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer:       /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial:       019DA4543BDCA98B75EC026BDB6EDA7A86BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 06:01:16 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:16 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:16 +0000
Files and hashes:         1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: XIXnhOTz+xrLyhDulZWqi+3XNPe5d5Y9wibS+Vn4xMI=)
                          2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:3b:dc:a9:8b:75:ec:02:6b:db:6e:da:7a:86:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
        Validity
            Not Before: Apr 19 06:01:16 2026 GMT
            Not After : Apr 20 06:01:16 2026 GMT
        Subject: CN=70b7d5be35cb732d11d1ee2bc9b2039797615597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:07:e0:fa:b5:52:6a:ed:88:5a:9f:5d:18:
                    f3:b8:91:66:af:27:3d:93:0d:87:d2:56:f6:f6:28:
                    b8:23:37:10:bf:8f:cb:00:be:6c:0e:65:a2:be:1a:
                    07:95:50:1d:01:cf:e2:d7:85:bb:1c:a8:f5:14:fe:
                    a9:a1:67:a7:0f:3d:8a:4d:28:f7:fa:9b:c9:30:1c:
                    42:8d:11:08:a8:e1:85:a5:0a:83:86:97:e3:53:39:
                    22:af:9a:b4:88:17:94:58:ad:39:70:88:83:cb:a6:
                    b8:fe:0d:52:d2:43:19:87:66:a6:74:0e:7d:53:c4:
                    95:6c:18:ae:b9:15:d7:bc:34:ee:cd:8d:5d:7e:8f:
                    2a:cb:28:92:43:26:af:35:f4:ad:66:45:54:9c:dd:
                    55:ab:07:1a:42:71:6f:9d:59:c5:eb:03:d3:c3:4a:
                    b6:53:a8:0c:0d:32:b4:5f:d6:13:98:b7:5e:0e:68:
                    9c:e9:db:f7:f5:ca:c9:58:69:ee:e4:a4:f6:84:3b:
                    cf:da:fc:b3:52:4f:7e:e4:f1:f9:74:3b:a6:2f:1a:
                    95:9a:cf:d1:85:2b:68:5f:a1:d3:46:6c:01:b9:a8:
                    1d:72:f3:c1:f3:5a:78:78:3e:0f:e8:2f:53:7e:78:
                    09:f2:4f:9e:25:85:c2:12:b0:bf:5c:5b:98:ae:c5:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:D5:BE:35:CB:73:2D:11:D1:EE:2B:C9:B2:03:97:97:61:55:97
            X509v3 Authority Key Identifier:
                keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:8a:35:3d:c9:ad:0d:9f:18:03:b2:cd:ca:b3:df:4d:4d:
         7b:3b:ef:45:7d:15:b3:01:79:53:48:65:4a:2a:4f:c1:3e:09:
         59:30:f8:4f:2c:9b:34:47:d8:1c:02:fa:09:20:15:f8:54:bc:
         78:5c:54:a1:9d:6d:4d:b0:a5:a7:5e:f6:47:5d:ef:ff:bc:72:
         8e:87:74:5f:54:30:1a:11:df:f2:02:bd:2a:db:d0:26:20:cf:
         74:d4:20:62:25:19:33:6a:62:36:e3:4a:6e:23:28:f0:58:bb:
         cc:50:2e:d2:64:bf:c9:6e:77:5f:a0:41:92:4e:fb:e7:1d:c2:
         06:67:d2:aa:a6:b0:92:7e:de:7a:2b:c9:1e:17:fb:bf:d2:d3:
         49:81:18:d5:7d:c7:34:b9:5c:0a:0e:7c:6b:8c:07:0f:c0:e4:
         8e:96:02:fb:47:78:6a:cd:3d:e5:db:ad:a6:ce:ff:84:91:cc:
         5e:cd:c9:17:be:55:22:0c:3a:5b:55:bb:07:3f:a2:17:ec:46:
         2b:51:a1:8b:f6:a6:7a:b3:49:f7:d2:2b:51:35:51:d5:ab:19:
         3e:08:91:27:ab:f1:dc:8e:d5:de:5c:15:d4:a3:89:6a:d5:07:
         59:aa:ff:f5:f6:a1:fb:ad:d5:c1:1d:c9:c3:5c:1c:5c:7e:32:
         fa:f0:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:21 2026 by rpki-client