Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File:                     eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier:          bNib7scJQMzS7t9caXgCor8JaefNkz0mizk4GFXxSjg=
Subject key identifier:   62:EC:6E:58:20:CD:31:8C:E5:2D:2D:F2:18:9C:9F:DD:7A:83:8F:59
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer:       /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial:       019D9999A432753773007BF507CCAA9BD67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 04:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:16 +0000
Files and hashes:         1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: NmiBRplsUnPm8Ru3iMbVydmDjA/T2CqVQUjKg6rSmms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:a4:32:75:37:73:00:7b:f5:07:cc:aa:9b:d6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
        Validity
            Not Before: Apr 17 04:01:16 2026 GMT
            Not After : Apr 18 04:01:16 2026 GMT
        Subject: CN=62ec6e5820cd318ce52d2df2189c9fdd7a838f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:12:ef:8b:49:30:93:63:8e:a1:76:0e:a3:
                    88:a7:8b:71:ef:02:2e:80:32:ed:f8:a1:95:b1:d9:
                    6f:b5:38:f3:a8:ce:e1:7b:f0:ae:3e:03:6c:42:59:
                    9a:c8:4d:9d:ae:73:ee:eb:ee:43:ce:39:32:5e:76:
                    05:a1:5d:e4:a9:d4:64:22:60:55:32:4d:cd:d1:bb:
                    fe:c7:a7:f3:b1:6a:b9:f0:d4:23:61:4a:00:ac:61:
                    91:fd:a2:c0:55:b3:f7:8f:20:1c:9e:08:2e:0f:97:
                    4a:5e:f2:ce:ae:02:3a:47:c2:2d:2a:44:24:75:88:
                    8c:94:c3:6c:ee:19:b6:06:8f:e1:f3:80:d0:f9:e5:
                    7b:09:1c:8c:4b:52:d1:0c:4a:61:7e:4a:6b:ac:57:
                    85:1d:db:9b:a6:76:c3:c2:25:28:ab:d6:d6:57:c7:
                    da:44:36:66:78:a1:e5:15:40:56:2a:1b:7d:c1:a2:
                    f6:9e:44:ad:0a:a3:ac:15:a1:b6:1e:c8:cc:98:d6:
                    70:9b:f1:dc:21:06:1b:01:c0:89:20:25:63:40:3f:
                    5a:5b:03:fc:ba:2a:57:5b:a5:2c:a8:6d:4b:af:9f:
                    f0:f7:73:30:a4:53:73:e3:80:56:59:6b:ef:e8:35:
                    f3:f3:a1:4a:80:c2:d2:b3:4d:6c:d2:60:d7:6d:3d:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:6E:58:20:CD:31:8C:E5:2D:2D:F2:18:9C:9F:DD:7A:83:8F:59
            X509v3 Authority Key Identifier:
                keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5d:65:a0:76:c2:14:48:bb:98:8a:84:b9:44:c0:95:18:42:
         65:01:24:08:e5:19:f7:21:92:d6:dc:ef:f8:08:01:24:3d:cf:
         48:22:ae:a6:8c:74:69:42:01:b9:6e:76:ba:2f:41:00:ac:f6:
         a9:09:3d:c7:68:a1:c1:71:9b:59:db:7e:81:6e:b5:60:ca:ff:
         06:4b:ae:2b:ec:80:34:ca:c5:79:76:77:3d:83:b7:f7:19:21:
         48:45:3d:6b:65:73:77:f0:60:51:c6:68:5e:38:8a:7d:eb:57:
         c9:32:e0:62:bd:ef:16:80:fd:ef:46:da:45:a2:75:68:73:a6:
         e9:8c:3c:80:0b:ad:3f:8b:fb:5b:fa:5d:b2:71:ff:9b:9f:d6:
         8f:e0:7a:af:b0:49:75:dc:3b:a3:31:78:9d:ec:da:60:0e:02:
         22:f6:ea:54:83:08:2d:e9:f8:a4:a0:5b:0e:a4:84:28:b6:81:
         6c:6f:62:32:9d:63:12:89:f2:86:fc:15:84:f2:9e:59:05:18:
         5a:63:de:0c:9f:58:9e:26:af:bf:69:8e:dd:79:52:1a:1c:4d:
         b7:aa:82:d9:a1:26:ba:cb:c9:76:a1:1c:ec:ba:56:d9:d1:09:
         cd:28:8d:24:03:c5:91:75:38:09:f0:74:f5:6c:16:6b:14:50:
         83:63:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:55 2026 by rpki-client