Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          bEJQCnzor+32AYBrjfoP9rskB7eVXv+ucSwasdHDUPk=
Subject key identifier:   6A:D4:81:BF:78:3A:F2:D5:E0:A6:5B:B1:FC:FF:BB:3B:64:14:84:66
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       019D97E177BB3B32BA153258B13CEB89E980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 20:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:28 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: nxPA3ms3wEoSnMb6EP74993ci9LSiESQkMbr0UdIAAs=)
                          2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:77:bb:3b:32:ba:15:32:58:b1:3c:eb:89:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Apr 16 20:00:28 2026 GMT
            Not After : Apr 17 20:00:28 2026 GMT
        Subject: CN=6ad481bf783af2d5e0a65bb1fcffbb3b64148466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:70:5f:45:8e:68:27:2d:7a:5a:cf:db:39:
                    64:b2:12:d2:c2:bb:4b:de:3b:6d:dd:8a:74:e5:04:
                    48:3c:83:b6:95:3a:61:72:e1:51:94:d5:fc:4b:7f:
                    46:10:23:7e:c3:ee:ea:8f:20:58:33:05:d3:f1:4e:
                    80:c0:7e:c2:78:93:98:9c:af:b0:3f:10:6a:04:7c:
                    2c:ec:40:8b:f1:06:e1:ca:ef:8a:03:b3:d0:a0:0a:
                    70:b8:f8:46:81:ab:c9:68:69:42:e8:b1:d2:13:25:
                    67:cc:82:6f:e5:8a:52:55:1c:28:81:c9:35:23:30:
                    ad:f5:8b:26:c2:b2:e1:78:93:74:a7:1d:45:dc:b0:
                    62:96:04:93:9f:ce:79:37:98:60:f5:f7:39:5b:18:
                    22:23:f8:ea:04:a8:88:8d:8a:f9:b0:fa:73:c4:2a:
                    94:6a:df:74:92:95:b9:a0:27:dd:ad:61:94:2f:46:
                    7a:97:3b:82:38:df:75:eb:58:2d:62:1a:90:2e:e0:
                    50:cc:b4:1e:85:5b:e8:be:90:89:91:b2:0b:5c:5c:
                    c5:0f:95:6f:61:08:a1:fc:20:8a:08:8e:27:1a:ba:
                    94:fc:d7:95:77:bf:80:c3:d7:82:31:61:70:d2:66:
                    12:83:a7:71:4a:aa:1a:22:86:17:5d:31:fa:07:51:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:81:BF:78:3A:F2:D5:E0:A6:5B:B1:FC:FF:BB:3B:64:14:84:66
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2d:dd:f8:86:83:7a:c6:ca:64:08:3f:85:30:00:7e:32:27:
         c9:c3:bc:31:53:c0:8e:61:c9:70:d7:cb:04:a1:bd:7e:b1:2b:
         ec:f6:2b:31:45:71:52:ef:9e:5e:77:cb:be:81:56:c9:a9:7a:
         da:b7:5f:f3:82:6f:17:f9:3d:44:bd:73:ec:72:3a:a3:86:1e:
         87:a6:d6:af:84:8c:b2:9b:ff:43:be:5b:98:05:9d:8b:fe:2a:
         5b:43:31:3a:9e:70:e5:05:18:10:90:85:14:a9:32:b5:44:5e:
         3b:77:ec:bf:5d:cf:94:9d:8d:c9:4b:08:a5:de:bf:94:9a:fd:
         94:cf:61:25:5b:08:4a:ee:93:dd:3a:a0:df:85:b2:a9:de:bb:
         e4:54:a1:4a:45:bb:fc:ce:e1:a9:39:13:18:45:bf:11:04:53:
         5c:81:93:62:de:e8:21:97:eb:67:a2:f7:ca:68:0f:ed:f6:a5:
         e0:13:e7:91:4c:dd:77:8d:92:7d:60:a5:28:60:37:cf:af:93:
         2a:c1:56:54:92:7d:36:bf:3b:c2:5f:1b:44:04:65:6a:23:f0:
         2e:9b:e8:d8:c1:05:8e:88:33:85:a8:38:e0:2b:39:3f:88:a7:
         07:8a:51:3c:04:3e:a5:13:01:e0:73:a1:35:19:67:66:1d:19:
         f1:aa:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:56:45 2026 by rpki-client