Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File:                     TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier:          uxhibfLNMzQG6Kp6LFbbTuONYoVr71tiPJarrDUKZKE=
Subject key identifier:   70:B3:F7:BD:F2:A5:98:09:B5:A6:A1:D3:7F:3D:BF:03:5A:0D:16:23
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer:       /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial:       019D9E5211772AB83A8DA21BF4B4F263B19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number:          027F
Signing time:             Sat 18 Apr 2026 02:01:11 +0000
Manifest this update:     Sat 18 Apr 2026 02:01:11 +0000
Manifest next update:     Sun 19 Apr 2026 02:01:11 +0000
Files and hashes:         1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: nH1FBhvjbmYldm35n+xwlkmXmsAdTTz6fIEsMmuySLU=)
                          2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:52:11:77:2a:b8:3a:8d:a2:1b:f4:b4:f2:63:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
        Validity
            Not Before: Apr 18 02:01:11 2026 GMT
            Not After : Apr 19 02:01:11 2026 GMT
        Subject: CN=70b3f7bdf2a59809b5a6a1d37f3dbf035a0d1623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:9f:4b:7c:d1:63:ae:34:33:02:33:f7:1a:
                    c8:d8:79:44:f8:8e:da:0f:3f:66:48:7f:1c:7c:03:
                    dd:b1:82:78:c8:bd:8c:1a:b1:f2:8a:ec:80:9c:95:
                    00:b6:8b:86:07:31:96:e6:d5:c2:fe:f5:a9:39:4d:
                    18:97:7b:3b:e0:ff:f7:db:a2:25:6a:cd:b4:de:0c:
                    f3:65:73:fd:bf:27:84:d5:ce:1d:de:fc:1d:e9:3c:
                    56:06:07:4e:a8:e1:ed:1d:54:58:98:13:93:bd:68:
                    88:e1:ab:2b:a5:f2:16:6d:af:1b:f1:35:b4:a0:26:
                    35:ae:b6:8a:5e:9a:d7:65:e4:17:f5:17:81:2d:5e:
                    f2:cf:49:c7:7d:41:d7:aa:d0:cd:83:ab:ec:61:16:
                    98:80:d8:4c:57:09:65:d2:35:17:10:9f:a4:cf:37:
                    08:01:fa:f8:ac:e4:cb:73:51:85:7f:81:38:cc:d0:
                    db:f0:38:b1:a5:8f:c3:40:87:4b:02:85:c1:29:b0:
                    05:e6:f0:21:57:43:27:c7:52:f7:f5:43:21:a9:be:
                    4b:8b:2c:96:9e:42:aa:5d:7e:ed:a1:8a:bf:61:69:
                    da:0b:00:15:63:7c:94:92:8d:8b:af:14:26:58:be:
                    3d:a0:1d:67:4c:e4:43:b4:25:c2:84:c4:84:4c:08:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:F7:BD:F2:A5:98:09:B5:A6:A1:D3:7F:3D:BF:03:5A:0D:16:23
            X509v3 Authority Key Identifier:
                keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:71:8d:8c:6b:a1:52:b3:02:f5:9d:45:78:c0:bc:87:52:aa:
         89:2f:2c:98:a8:fa:d5:1c:fd:78:fe:c9:70:a1:7b:5b:2d:69:
         26:70:90:cb:aa:5a:9e:08:ba:cb:68:c9:3a:53:58:05:f2:66:
         fc:2e:27:f4:aa:11:1b:fa:b7:71:80:76:6a:22:1e:dc:11:da:
         5e:3e:d4:c9:0b:d7:b0:dd:89:f6:41:d9:4d:54:01:71:35:0d:
         b7:01:72:e4:07:b7:16:9c:be:99:81:d8:98:ab:5b:a2:c4:21:
         eb:3f:9b:01:95:d1:a5:d4:b2:1c:cb:e2:3b:de:c4:6b:bb:f2:
         ca:4f:f8:89:43:e9:14:03:a0:5f:fb:f5:43:ea:74:59:0b:0c:
         09:1c:2a:69:9e:2d:9d:f3:ed:44:cf:98:61:f6:a4:5c:75:9d:
         1d:e5:cd:3c:2f:45:19:de:7f:fe:a5:35:40:51:ba:f7:66:3a:
         83:5d:48:30:4d:b8:fa:8f:f8:94:58:08:0a:c8:cd:e7:27:26:
         7e:5f:10:e6:6b:62:07:a1:e9:06:8a:54:6a:7c:4c:51:32:21:
         3c:eb:a9:1f:88:10:19:5c:44:5a:97:ab:f7:68:8b:b1:61:c1:
         c3:16:02:c8:a7:ac:55:99:8d:c1:e4:34:02:6b:e3:12:d7:91:
         0f:d7:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:36 2026 by rpki-client