Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File:                     ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier:          yOfbfQFPJC4gkcXY54WMtkp8nzg/GPT/HedVnLxE6/g=
Subject key identifier:   48:74:BF:37:A6:84:AC:14:94:21:A7:D3:E9:BE:92:FD:E4:D4:BB:2B
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer:       /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial:       019D98F4783C6FDCACE8B8D028A2D47BDEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number:          16DE
Signing time:             Fri 17 Apr 2026 01:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:51 +0000
Files and hashes:         1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: 1UDQ4huxkx5/mZmau9q9aur42TurpdxKW7tLKGJlWug=)
                          2: JXyToVHzoKcPgiftey3VODfKzHA.roa (hash: hh+ZXLITA+1er8CwLKQe1+Z8gZePfKgzblszCECG/4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:78:3c:6f:dc:ac:e8:b8:d0:28:a2:d4:7b:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
        Validity
            Not Before: Apr 17 01:00:51 2026 GMT
            Not After : Apr 18 01:00:51 2026 GMT
        Subject: CN=4874bf37a684ac149421a7d3e9be92fde4d4bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:ce:9e:3d:71:c5:bb:0c:0b:55:e5:ba:3f:
                    a7:7b:59:94:b6:c9:b7:70:a6:5d:a1:23:f2:d6:09:
                    03:51:c4:3e:d8:03:d8:e2:ff:2a:b6:f8:5a:f4:e4:
                    64:44:ff:0f:11:4d:54:29:06:04:64:53:b9:99:f9:
                    ad:ac:2b:20:ab:b4:f8:72:be:18:32:38:b1:d8:76:
                    6c:21:4d:97:0d:64:9f:98:59:65:1e:4e:9e:b8:60:
                    71:2d:b0:f2:cd:18:21:ba:d8:d9:21:6c:01:19:7f:
                    a1:9d:0b:fb:f3:ca:e6:d6:cd:37:87:4d:a8:a3:36:
                    cc:90:16:3f:9d:96:62:dd:8f:68:f3:18:04:6f:be:
                    5b:17:d5:ab:a5:72:60:88:40:cf:6c:f6:54:4b:42:
                    17:c1:07:cf:8e:7c:13:b3:66:f9:ab:64:34:15:47:
                    94:96:db:4d:39:33:c1:92:f7:e6:3c:d7:d0:65:59:
                    15:c7:ab:65:40:84:f0:19:04:03:66:95:9b:f4:83:
                    37:98:4c:16:2a:cd:ae:8b:c1:e2:81:cc:2c:83:bd:
                    f3:e1:07:eb:83:85:94:46:01:29:5b:2c:2f:11:a3:
                    aa:03:97:55:28:96:4f:35:2d:cd:75:54:68:8c:73:
                    77:8c:b5:7f:b8:96:6e:cf:6e:76:c4:cd:5b:f7:17:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:BF:37:A6:84:AC:14:94:21:A7:D3:E9:BE:92:FD:E4:D4:BB:2B
            X509v3 Authority Key Identifier:
                keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:78:97:4b:92:64:32:5c:3d:b3:d5:5b:e9:69:e7:ae:ac:
         09:de:bd:f4:3a:b2:73:ed:49:69:8c:a1:9f:20:60:cf:32:ea:
         cd:f9:61:1e:67:9d:1a:f4:08:48:eb:44:68:e0:f7:83:61:af:
         1c:92:3b:21:60:be:b6:6e:e2:b5:db:57:23:8f:7f:e2:73:61:
         fa:3a:db:c4:a5:5f:91:34:4e:91:54:61:3e:1d:91:48:64:3f:
         18:ae:42:6a:c8:9d:12:46:0a:fc:9e:23:e1:ad:7e:86:c8:9c:
         23:bb:60:c6:e4:63:35:ab:66:93:8d:78:ed:52:b3:ee:4b:84:
         3f:38:52:12:f4:9b:0c:55:cc:2c:35:84:fa:52:28:b5:62:3f:
         52:60:a0:cd:77:da:1c:d9:00:1a:cd:6a:48:0f:73:18:8b:2c:
         9d:3e:70:a9:f6:02:1c:e8:c2:d8:5b:ba:60:ba:b8:fc:4f:9c:
         a1:cb:4a:6c:6f:7f:49:fd:b1:74:70:73:19:63:26:ba:e9:4c:
         2d:bb:46:67:59:86:f6:b8:1b:ac:8a:8a:21:bf:f5:c3:12:f8:
         67:cd:a3:3c:85:2b:5a:6e:07:aa:de:e4:8b:ed:86:2e:f9:b5:
         0c:17:b1:bc:fe:a9:72:79:3d:e0:20:23:11:ab:e2:c9:40:6c:
         95:20:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:33:08 2026 by rpki-client