Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          0bnHrH0GBUjp1Gz8VS2+ReMZiEjPmYtFcq6gUqm34A0=
Subject key identifier:   3E:28:B4:91:A9:E0:C8:AD:89:0F:8B:A3:C7:95:D5:F4:5F:AF:AF:04
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       019D98186311721F2EE916B741B3DBDF2D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          18D2
Signing time:             Thu 16 Apr 2026 21:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:28 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: BFe8+Y1K3Xirko8b9+SjFwokHnS6656kXkva6tneFs0=)
                          2: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (hash: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:63:11:72:1f:2e:e9:16:b7:41:b3:db:df:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Apr 16 21:00:28 2026 GMT
            Not After : Apr 17 21:00:28 2026 GMT
        Subject: CN=3e28b491a9e0c8ad890f8ba3c795d5f45fafaf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:62:e5:61:8c:75:63:b2:fa:19:23:b0:fb:
                    f4:9d:4a:a7:bf:64:a2:43:28:e5:80:a8:1b:48:c9:
                    a4:ef:2c:0c:72:c5:ad:21:b9:d5:e0:f8:6b:36:1c:
                    8d:bc:1c:19:27:18:97:e6:82:70:9e:1f:ee:f5:55:
                    a5:8f:85:e6:e3:5c:9a:ce:ae:06:d5:be:38:12:cd:
                    2d:c3:9b:5a:63:7a:dd:fb:b8:ec:a7:97:5d:ac:69:
                    6d:29:a2:9b:9a:42:36:2b:bc:3a:2e:82:82:39:a8:
                    48:32:9a:cf:9c:c0:1c:08:9d:94:ba:9b:64:c8:74:
                    e0:80:84:e7:c6:fd:50:0b:46:84:76:f4:60:de:d5:
                    e9:11:f2:6d:ed:4a:be:50:4b:c9:8a:27:9c:4e:f9:
                    73:0f:38:2a:d4:1c:4d:b0:55:d8:6a:48:09:4c:02:
                    d4:1d:4d:19:64:95:a5:aa:3a:3d:73:b9:e9:39:e1:
                    9c:36:d8:9a:0b:01:32:2f:3f:d3:9f:24:f0:15:77:
                    cb:a0:bf:e1:d1:9c:e8:0b:4b:97:51:84:c1:7d:a5:
                    65:98:73:e1:93:01:5e:29:f7:67:8e:fa:17:85:97:
                    90:72:3a:79:83:6c:04:9e:a1:e3:ff:29:2f:f2:c8:
                    6f:10:77:72:34:2a:d6:48:de:8c:19:c2:23:07:f8:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:B4:91:A9:E0:C8:AD:89:0F:8B:A3:C7:95:D5:F4:5F:AF:AF:04
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:55:9e:26:59:6d:d7:b7:37:28:e2:b3:03:c5:c0:e1:79:
         85:f9:74:9f:5c:a1:83:c9:38:27:a3:d5:05:bf:ce:33:af:6b:
         26:cd:89:cc:d9:ff:c1:87:3e:87:d3:be:67:6e:86:2a:56:ef:
         27:e0:89:69:23:c9:a2:75:a6:be:ef:0a:f8:29:6f:93:0c:ef:
         95:5c:6f:07:42:09:de:f9:7c:b4:07:db:15:30:54:8f:b0:63:
         87:10:96:40:b6:fb:82:43:89:e5:5b:66:cc:21:0b:43:dc:00:
         dd:9e:92:9c:96:e4:bd:9b:77:d9:11:7f:38:50:0b:29:df:e1:
         58:b9:a0:59:5d:6d:6f:07:6c:8c:55:86:3a:49:a9:80:59:5c:
         f7:cf:a9:12:01:8b:40:67:84:29:70:56:60:b0:f6:6b:70:19:
         af:14:04:4a:12:18:f9:2c:84:40:e8:e4:cb:15:ed:6b:9d:5c:
         30:d1:c0:b6:0b:0d:5a:8c:63:c6:34:42:f3:6f:81:1b:aa:70:
         7c:86:d8:97:59:db:f9:05:eb:4d:98:fe:51:66:e6:fd:c7:ec:
         82:99:33:73:1e:f2:c2:db:08:16:d0:35:17:88:b6:2d:65:f8:
         eb:47:ed:e8:68:21:81:f7:a2:4e:8a:98:00:90:bd:f6:c0:57:
         94:d2:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:13 2026 by rpki-client