Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          bIR6x47HFP+SlZ6YoMKir0XWwAKQodbTcYJEhSGyTSk=
Subject key identifier:   7C:25:C3:DF:37:FD:0E:3C:FE:8F:98:A5:B7:60:2C:6D:5B:8B:F5:B8
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019D9C2CC68310A60F861ABE7929741AC1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          0AEA
Signing time:             Fri 17 Apr 2026 16:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:13 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: Cmg715PDSGnMjxQRTC8JpxR9SeZtnEeQ8EoOiTiS3f0=)
                          2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:c6:83:10:a6:0f:86:1a:be:79:29:74:1a:c1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Apr 17 16:01:13 2026 GMT
            Not After : Apr 18 16:01:13 2026 GMT
        Subject: CN=7c25c3df37fd0e3cfe8f98a5b7602c6d5b8bf5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:30:10:9d:50:0b:93:e6:54:52:38:2c:52:
                    df:22:4b:92:a2:33:ce:f3:b7:2f:94:16:86:de:20:
                    4f:69:ae:9a:b4:01:e7:19:61:58:97:c1:05:64:03:
                    85:0d:d7:59:3c:48:c8:99:55:8d:cc:bb:7d:20:3d:
                    34:66:ed:11:43:c6:9c:20:4c:b1:41:f3:49:2e:7e:
                    97:7e:f9:c7:c3:24:9c:9c:26:dc:03:3b:d1:48:e5:
                    50:4f:60:c4:7b:30:d4:05:6a:ea:17:08:0a:27:c7:
                    be:94:5e:8c:3b:24:9c:40:1b:00:ad:77:ba:4d:1e:
                    e1:86:64:16:5d:c0:97:09:66:46:eb:39:26:d5:35:
                    3b:01:7e:98:12:b9:28:36:da:83:b6:13:26:05:9a:
                    58:63:52:8c:b2:6e:66:dd:bb:04:40:fb:e1:ec:e6:
                    7d:f1:44:f9:f4:44:7b:9b:0e:db:0e:5e:28:3a:35:
                    20:a8:79:64:ec:7f:65:d8:5f:18:8e:c9:c7:ec:e9:
                    f7:41:99:c0:13:cc:87:68:34:f5:5e:fe:b3:08:6e:
                    97:9c:7b:40:54:e7:64:44:d9:24:13:99:0d:f9:ec:
                    22:b0:c9:f6:ba:50:33:e5:74:07:91:1a:2c:ea:a5:
                    7a:3e:d2:e8:0e:ea:1f:8d:92:cc:5e:02:e3:0f:d4:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:C3:DF:37:FD:0E:3C:FE:8F:98:A5:B7:60:2C:6D:5B:8B:F5:B8
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:16:2a:e2:9d:77:61:80:a9:45:b6:5c:f3:76:6b:c6:54:
         d2:bd:b0:62:a0:8b:0c:5a:70:5a:af:27:66:08:d9:dc:55:71:
         b9:3d:8e:06:40:de:04:96:57:08:7e:67:f5:cb:d6:10:1f:a3:
         d7:74:9b:07:fb:ab:39:65:4e:5f:98:b5:df:79:3e:dc:d9:3c:
         a8:6d:4d:98:33:d1:cf:8e:7b:b4:b4:1c:55:18:9b:c0:90:60:
         16:a5:05:4a:41:91:1f:51:a8:fd:b4:27:fb:ba:84:85:13:cb:
         e0:2f:a4:59:3c:bf:65:fc:b6:9b:64:85:14:61:6f:e2:ba:15:
         9c:00:87:11:fb:2c:af:4b:6a:43:47:4a:7e:22:e2:46:c1:00:
         c0:8a:90:1f:09:de:80:c6:98:64:ee:ed:00:68:e2:ba:b5:22:
         2d:6f:44:df:91:44:a0:66:9d:68:f2:45:e8:ee:d8:2d:f1:ac:
         83:ed:14:79:f0:b1:4b:e5:34:9b:4f:ef:12:89:76:b8:1f:a5:
         a7:e5:c2:bb:39:2b:c0:54:5f:89:1b:29:e1:ca:62:bd:06:ee:
         2e:b3:bb:1a:c9:fb:de:59:1a:c7:aa:d1:62:69:9e:0f:c0:8c:
         1d:44:7d:4e:29:49:dc:f5:b2:b8:31:c4:a5:6a:23:88:24:f8:
         c5:d6:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:57 2026 by rpki-client