Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          2GV/lEHyjOwXRkTLFVXOy/ITgBIUpRaVGqcRsTPrd/0=
Subject key identifier:   E3:3D:11:DE:F6:6D:C6:4D:F6:16:75:A4:65:FA:D8:09:B9:79:8F:E5
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019D98F4C6242C673B92A3D81B756E275CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0E07
Signing time:             Fri 17 Apr 2026 01:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:11 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: gQldOu06AZgpq+hXgxZiTPZTqnC//6RmCHpRx5ZpyHk=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:c6:24:2c:67:3b:92:a3:d8:1b:75:6e:27:5c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Apr 17 01:01:11 2026 GMT
            Not After : Apr 18 01:01:11 2026 GMT
        Subject: CN=e33d11def66dc64df61675a465fad809b9798fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:33:36:79:65:fc:ff:9b:14:22:19:1f:a8:
                    40:0f:2a:ca:33:10:c6:35:08:40:91:c8:91:63:39:
                    fc:8a:b4:95:fa:3c:d8:c9:30:7a:b1:b8:81:b7:a4:
                    e8:29:66:28:3c:18:ba:4c:28:75:4d:72:b5:f0:24:
                    4c:ab:71:b3:27:d2:3c:bc:27:fe:d8:3f:9e:4d:5e:
                    9f:e8:72:af:f8:72:05:83:58:75:40:b0:09:6c:7d:
                    b9:ce:1b:87:04:13:33:c5:0e:77:44:3a:c6:fe:ee:
                    87:fd:02:24:1d:25:75:1b:ca:38:30:58:00:fd:c8:
                    f0:4c:ff:89:00:22:c6:70:bc:8a:27:2e:f3:ea:c0:
                    28:1b:df:cb:b3:88:19:70:2a:49:3f:26:3d:48:75:
                    1e:90:7b:ca:87:05:a8:be:66:69:c4:a3:bc:9b:70:
                    58:8e:4e:1a:66:f6:39:b1:e9:a1:99:60:3f:58:34:
                    f2:64:fe:3e:bf:ca:7b:6c:52:69:b9:4d:00:6b:a0:
                    3a:cf:09:85:1c:42:de:31:cf:5e:1f:35:9a:54:ab:
                    29:39:fd:c2:6d:fc:1f:c2:6d:3f:4a:1c:10:9c:d2:
                    fb:5b:b1:36:8d:bb:1d:b2:29:12:de:09:c3:1b:17:
                    9c:ac:2f:15:b4:9a:2f:0c:11:37:21:03:80:68:0a:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3D:11:DE:F6:6D:C6:4D:F6:16:75:A4:65:FA:D8:09:B9:79:8F:E5
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6d:62:a3:88:c6:c2:81:2c:8c:d8:78:1a:68:8d:8f:4f:88:
         ca:57:b5:27:95:6c:08:79:27:01:40:09:47:c7:85:7f:b4:ec:
         8f:84:a6:95:db:3a:7b:54:f9:68:5d:45:68:f6:a5:82:d3:cc:
         3d:af:82:a9:07:85:bd:99:34:72:c3:5f:e9:79:ea:16:2c:4e:
         2b:c5:e5:4a:9a:4d:16:1a:c4:2f:55:21:61:73:b7:7d:a5:4d:
         89:a5:c9:76:67:df:ed:e8:c2:42:bf:2d:83:7c:db:2c:33:73:
         a9:b6:82:3c:e8:21:ff:3a:7a:4d:f7:6a:b7:c9:33:60:32:cd:
         18:bc:b0:f9:af:81:63:17:e2:aa:3d:c2:18:f1:6f:bc:97:fc:
         9a:d6:c0:cf:8a:2a:ba:0d:15:58:ad:3c:de:3b:41:00:f4:64:
         f0:64:fc:0e:e1:86:6a:b9:78:9d:05:63:fb:11:54:59:1d:fb:
         66:b5:f9:2b:d8:b7:3c:c5:20:9b:76:f5:a3:38:d6:6c:e0:6e:
         5e:6c:13:50:73:64:6b:0d:0f:15:ac:ac:f1:a4:54:8c:7e:2e:
         f5:8a:3a:e4:e4:06:5b:bc:14:6f:a5:ee:f2:58:8f:c4:28:9d:
         0c:ba:76:43:22:9c:47:72:96:4e:43:32:5b:7a:24:53:73:2f:
         13:1e:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:58 2026 by rpki-client