Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File:                     _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier:          FlAtOF4e19TQC/cv+MXFbY7Jst8icay6QzWrJLcxID4=
Subject key identifier:   CC:AC:15:D1:F5:BF:3C:A1:B9:95:9E:EE:E3:DB:24:E3:30:AE:66:C3
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       019D98187EE920CA65DC31A60676F247DA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number:          15EB
Signing time:             Thu 16 Apr 2026 21:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:35 +0000
Files and hashes:         1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
                          2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: wdwjvLD1s6d3nTrqhAr7ytpo5DOPXP2qaGqCfi88AeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:7e:e9:20:ca:65:dc:31:a6:06:76:f2:47:da:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Apr 16 21:00:35 2026 GMT
            Not After : Apr 17 21:00:35 2026 GMT
        Subject: CN=ccac15d1f5bf3ca1b9959eeee3db24e330ae66c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:e8:84:38:15:8c:55:08:a7:27:47:7b:d7:
                    ea:67:02:35:be:7e:55:ee:d3:4d:f2:d6:c9:a3:9e:
                    0b:f6:4b:f8:f0:f3:14:2b:86:01:0e:1f:f4:8e:56:
                    3d:e7:05:75:24:18:b5:c1:df:ab:88:13:ec:f2:c8:
                    97:24:bd:42:fd:2d:30:b2:d5:3f:b2:86:3f:b7:66:
                    1c:d6:f3:38:34:b4:cb:9f:85:c6:17:d2:77:dc:38:
                    8b:30:81:41:10:3b:2d:b0:45:25:96:77:12:b6:79:
                    89:01:ae:70:7f:33:03:bf:70:14:d1:7e:5e:48:19:
                    87:03:e7:1a:14:6f:ca:fa:4b:49:a6:cb:3f:c0:d6:
                    95:48:89:db:ef:36:51:e5:0c:42:bb:18:69:6d:6c:
                    15:41:8e:f1:60:f1:bd:a7:22:bb:bf:62:42:fb:f1:
                    25:7f:f9:fe:44:a3:6c:a6:59:28:4e:e7:5d:b1:6d:
                    07:26:75:2b:ff:00:e2:44:13:64:10:c8:25:9e:c3:
                    23:63:c1:3b:7f:98:c2:e6:a5:d0:32:56:62:05:2c:
                    b2:6a:45:01:ea:72:d7:59:bf:83:f7:10:a5:0b:c3:
                    ea:37:92:9c:4b:8c:e8:5f:2f:a2:59:f8:47:75:6a:
                    16:34:a1:66:9f:5d:e2:08:32:2c:57:e5:cc:76:15:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AC:15:D1:F5:BF:3C:A1:B9:95:9E:EE:E3:DB:24:E3:30:AE:66:C3
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:6f:f4:b4:c1:c8:e9:4d:96:70:6f:e5:c0:51:46:4b:91:
         13:5f:4a:d2:21:97:6b:ea:ef:54:16:c9:aa:e5:c5:69:43:93:
         e5:f8:94:da:ef:4c:17:aa:35:8d:08:80:50:f4:11:e2:9e:27:
         3a:4f:16:da:12:de:60:a6:d3:0a:dc:39:4d:72:6a:54:a5:36:
         ef:e8:81:3b:b8:2a:d0:7f:04:dd:d8:b0:8e:cb:3a:e7:93:ee:
         97:67:fd:e1:50:cd:4b:c7:ef:3d:22:65:d9:57:dc:18:7d:34:
         a6:b4:18:47:b6:48:2e:83:d7:53:b3:9e:d9:83:e8:69:26:9c:
         cb:73:45:74:41:de:0d:f5:b5:21:6f:61:a8:03:b6:2c:02:6b:
         3e:3e:0b:9e:06:1b:0c:eb:da:d1:c2:35:4d:aa:58:41:32:8d:
         08:ef:77:4a:76:dc:b4:74:5d:98:26:9c:79:b5:35:db:65:fd:
         e1:cb:1c:98:7b:d3:26:02:a6:c9:42:6f:e4:86:1b:5b:22:2d:
         a4:11:0d:13:b9:79:b5:0d:bc:a1:f6:dc:19:ef:f0:44:0c:ad:
         27:12:cf:f8:d9:1c:b9:39:60:75:17:8e:31:43:ba:7a:ea:de:
         cc:8f:71:ff:25:b3:90:9f:d8:00:84:3d:c5:6b:e7:e2:5a:8c:
         55:0e:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:37 2026 by rpki-client