Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File:                     2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier:          4rHwhV23o4khyxP64IpNLaoVhQhka8wiCoaGfyRTZNQ=
Subject key identifier:   55:CE:D6:05:0C:D4:1C:5A:B5:3A:25:F9:1D:0C:7D:1F:33:22:C1:BE
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer:       /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial:       019D999947513B16DEF750E620651C86AF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number:          1851
Signing time:             Fri 17 Apr 2026 04:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:52 +0000
Files and hashes:         1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: bwLGnZMwU/xKbKefyjj0KYrZdq5+Sz+2Wip7ZcEsYL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:47:51:3b:16:de:f7:50:e6:20:65:1c:86:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
        Validity
            Not Before: Apr 17 04:00:52 2026 GMT
            Not After : Apr 18 04:00:52 2026 GMT
        Subject: CN=55ced6050cd41c5ab53a25f91d0c7d1f3322c1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:3d:6f:8f:f9:58:4f:86:bf:b9:b7:57:e2:
                    cd:b6:d8:9a:1b:35:ef:d8:78:21:a0:eb:72:08:cc:
                    ed:a9:3d:2e:e3:07:c7:1b:05:f2:b5:f4:ec:13:48:
                    3b:6c:68:86:5a:43:33:d1:db:8b:54:96:00:f6:8f:
                    b2:1a:3e:ab:f7:f4:ec:7b:dc:58:e0:ac:ef:79:84:
                    04:32:fa:c1:3d:00:20:03:2c:2a:74:b1:62:f3:c6:
                    95:d8:99:6f:d7:b3:ae:a0:23:a2:0f:1b:29:12:ff:
                    91:23:c2:4d:80:aa:fc:43:1b:be:65:ed:45:52:66:
                    93:7c:d9:29:ad:b6:27:8e:74:27:25:d9:8b:0d:c4:
                    26:63:d1:2e:f2:7e:a6:dd:83:68:0e:cf:9f:eb:db:
                    3f:01:73:7f:66:41:c3:2f:02:4a:25:c7:f2:28:67:
                    8b:90:d3:24:10:15:cb:75:95:b1:02:76:63:c2:4a:
                    75:3c:06:35:8d:f1:cc:6e:73:fb:e6:08:d9:29:b8:
                    ee:16:ba:91:2a:f7:99:81:5e:d1:8c:c3:a2:b9:d6:
                    bd:8d:eb:a9:25:3a:36:32:db:81:76:11:96:09:92:
                    be:0a:8b:a2:43:35:2e:1c:79:eb:f3:77:3d:f6:7b:
                    e8:4a:1d:d7:31:22:88:19:11:10:07:70:c5:e3:e6:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:D6:05:0C:D4:1C:5A:B5:3A:25:F9:1D:0C:7D:1F:33:22:C1:BE
            X509v3 Authority Key Identifier:
                keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:49:47:5d:31:41:1e:60:a7:f7:c9:ab:35:90:84:d2:c7:
         c9:08:62:2a:5f:d6:a2:1e:8f:6f:9d:ce:89:d4:23:a3:be:f5:
         80:44:b2:96:f4:e8:af:0d:9f:ec:ca:c7:48:ec:07:02:b4:f3:
         b4:47:c1:2b:f7:40:5f:84:7e:b2:86:82:93:74:41:40:0d:e2:
         f5:b9:a1:37:a8:6f:48:9e:d4:8a:86:c6:17:ed:bd:db:71:58:
         9e:d1:65:72:88:96:e1:d8:cc:3c:ac:46:18:72:8c:72:2f:36:
         fa:c5:ac:87:04:76:c9:de:7e:c8:37:b4:61:75:de:c8:14:a5:
         70:d0:b2:95:63:3e:7a:74:34:a2:ee:dc:99:94:81:7b:df:44:
         63:20:39:03:60:32:0e:17:47:5c:3d:12:bc:44:c2:19:e9:93:
         ca:e0:eb:f3:a8:e6:3d:98:0f:86:7a:8f:6f:d8:e6:bf:ef:6c:
         f5:3b:ac:2d:bf:ef:5b:97:a9:44:fc:23:f3:71:da:11:8a:89:
         ee:7a:ff:11:33:bb:d0:93:f7:e0:23:7a:9c:6b:3e:35:13:17:
         a0:ba:7d:7b:31:c6:d0:e7:0a:1f:ee:14:3c:22:cb:79:3a:74:
         62:83:7b:4c:2b:8f:c9:2d:60:52:b5:ff:c4:dc:f7:1c:d1:d6:
         a6:e7:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:12 2026 by rpki-client