Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          m1tKgmuOlZWJb9Bv36EMWnIOcibImxilI0lQ9icZOx0=
Subject key identifier:   EE:DA:83:2A:3B:25:ED:0E:13:16:6E:DE:1C:5A:7B:CE:65:46:C4:74
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       019DA48A51E07902CFD1659032A548C9F5CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          046D
Signing time:             Sun 19 Apr 2026 07:00:21 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:21 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:21 +0000
Files and hashes:         1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: wanF3PS3noUvjucRSDWrmiLIYG9qEY4WuUhaBVFpHuE=)
                          2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:51:e0:79:02:cf:d1:65:90:32:a5:48:c9:f5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: Apr 19 07:00:21 2026 GMT
            Not After : Apr 20 07:00:21 2026 GMT
        Subject: CN=eeda832a3b25ed0e13166ede1c5a7bce6546c474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:1c:e7:d8:5f:bf:e6:74:b6:74:d9:5b:fe:
                    dd:28:27:5e:ba:e8:ad:ba:cb:af:e5:35:24:fe:34:
                    7b:59:45:5f:86:e0:e3:98:6f:9b:80:0c:19:8c:f9:
                    74:54:43:71:a8:56:2f:c8:09:a9:41:fc:e7:b4:35:
                    99:6f:18:93:19:0e:fa:8a:b5:a7:61:5b:5d:e5:e0:
                    d5:8d:ed:15:87:3d:c8:91:e2:ff:3a:2c:ee:bc:f3:
                    c6:0a:89:c4:6b:cb:1d:6e:b3:66:34:b3:58:87:89:
                    fb:d0:95:34:c8:6b:e0:2b:06:5d:e1:03:e3:13:37:
                    97:cd:ee:f6:53:c8:54:6a:4a:a7:be:21:1c:0c:3d:
                    d2:57:e5:75:06:a1:1b:f9:1a:31:6b:59:9e:56:c1:
                    29:42:37:9a:e8:fa:27:3c:00:c3:7d:ed:d7:16:d6:
                    45:bc:57:c7:57:06:21:99:e8:f7:23:6f:c9:6d:eb:
                    78:91:22:66:1c:1d:fa:d5:fa:60:bf:90:7b:d1:cc:
                    bd:26:99:37:e4:78:05:1f:84:c9:a6:36:20:1b:0d:
                    9d:00:da:29:f3:cc:98:9a:3d:6c:3e:6d:2a:e4:4d:
                    59:7c:9d:46:a4:a4:ce:59:d4:c3:eb:8f:3f:17:1a:
                    23:c7:f1:99:d1:f7:92:55:0e:a6:3b:1e:ac:eb:6f:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:83:2A:3B:25:ED:0E:13:16:6E:DE:1C:5A:7B:CE:65:46:C4:74
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:27:70:f7:bf:83:cc:6d:18:f7:8f:ae:83:df:3b:1d:3f:78:
         bf:cb:bb:cf:d6:53:e2:c2:dc:de:eb:35:76:a3:ba:8e:e8:31:
         aa:d0:bc:c5:7d:52:ee:ad:2e:11:36:b9:68:38:b9:fe:37:ba:
         c4:57:03:e2:e4:92:18:a3:96:2f:65:94:54:20:b4:8f:ef:fe:
         1e:99:b7:2a:1c:ca:be:eb:5c:92:ce:90:a4:f4:47:6e:39:0d:
         f1:25:11:cd:fb:1e:71:b5:13:50:b4:3f:24:23:87:54:99:c4:
         86:3d:2f:c0:1d:db:0b:26:46:a9:14:8a:14:83:c7:24:c5:f7:
         40:d3:51:8f:a7:1e:e5:a9:9f:d0:88:a0:08:76:f4:2f:c7:f0:
         41:fc:11:9e:fe:15:7c:79:ab:18:0e:0c:6d:dc:97:3f:9a:cb:
         b5:25:db:42:02:19:c7:e6:91:32:b9:45:61:36:f1:4f:ae:b5:
         db:0c:02:19:d8:40:78:93:50:af:03:7d:e2:5a:d1:4e:97:5b:
         80:3e:30:88:f5:5c:91:d0:f1:8e:25:33:76:99:48:f4:a8:dd:
         d1:8e:da:c5:1a:dc:ec:be:73:bd:ed:79:6c:b4:1a:67:83:6e:
         28:56:03:c0:4b:09:e1:dc:5f:89:0c:05:c7:bf:00:16:4d:fb:
         23:c2:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:39 2026 by rpki-client