Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File:                     AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier:          x2L2aIgAb2/+Fkfwz/nZrcq7asgM8fS1/+4mYXq8Sdc=
Subject key identifier:   E4:BE:5B:EF:2A:8F:A9:4B:AB:59:C4:F1:9B:0D:61:15:3A:BF:34:0C
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer:       /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial:       019D9A3EAAB09CE9D8D7A3A3211D1070A452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number:          06CF
Signing time:             Fri 17 Apr 2026 07:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:31 +0000
Files and hashes:         1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: hjO9fyLG4mMkE9MWWmKkUDtZESLdRe8ffYLO0AvDCB4=)
                          2: Bg94-F9i2Jnpyy_ChTan2u5FmyY.roa (hash: DEbeaWmESIJAfvI0AWdbHW3D5o5mtMuvaof9/WcDDdY=)
                          3: MAirATMkm_jSRjxp9j7Z40-VKMs.roa (hash: /u+Oro6kRKO2TwnukQ7TlHOXZWANvODIogmazhvXP0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:aa:b0:9c:e9:d8:d7:a3:a3:21:1d:10:70:a4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
        Validity
            Not Before: Apr 17 07:01:31 2026 GMT
            Not After : Apr 18 07:01:31 2026 GMT
        Subject: CN=e4be5bef2a8fa94bab59c4f19b0d61153abf340c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:0a:e6:89:53:cf:1a:1b:46:d7:f5:25:0c:
                    35:e2:4f:4a:9a:c6:02:f6:e4:48:f8:0f:b2:d7:15:
                    21:38:6c:b2:b6:4f:d3:1b:68:4e:89:e4:87:93:16:
                    98:b8:f6:2d:04:10:5c:38:09:8f:0a:17:6a:a2:56:
                    17:ef:90:5d:0a:4b:c2:7f:97:c0:df:ae:33:ed:5b:
                    2f:61:c2:bf:c7:ca:09:bd:eb:af:f7:f5:37:6b:05:
                    73:c2:c6:13:63:b8:f1:2c:33:60:c0:3b:bc:08:d6:
                    eb:af:ed:72:ee:8d:14:10:e5:83:02:85:c6:33:04:
                    8e:24:de:0e:03:53:27:c2:c2:8a:07:59:7a:d8:18:
                    90:2a:e9:08:e8:f7:5f:dd:15:1f:5d:db:11:72:87:
                    74:35:ea:4d:c1:b3:d9:79:bf:71:5c:4e:de:92:b6:
                    a5:28:cd:84:be:7f:dd:54:f8:b4:39:37:12:f7:6e:
                    3d:06:a2:c2:b4:00:58:93:80:1c:1c:d5:a8:ed:13:
                    53:c7:a3:21:ad:50:f1:91:9d:a1:3c:10:fc:3b:4a:
                    a4:8a:d9:ad:86:c6:b5:94:27:73:ee:e3:f5:ee:53:
                    4f:7f:da:c7:af:44:1a:35:cb:89:0a:0b:47:e2:fa:
                    45:71:ba:ab:0d:9b:de:0c:d5:35:e2:99:0e:99:8b:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:5B:EF:2A:8F:A9:4B:AB:59:C4:F1:9B:0D:61:15:3A:BF:34:0C
            X509v3 Authority Key Identifier:
                keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:67:17:9d:2b:e0:98:d5:39:4a:4a:af:69:b3:09:c3:2c:
         1a:39:a3:e0:d9:c8:db:ea:53:a1:68:7c:a5:9f:fb:64:43:92:
         c7:d4:df:29:47:e6:21:ad:50:02:ed:55:e7:6f:2e:9a:32:40:
         8a:6b:d9:51:31:17:03:c6:eb:52:70:49:fa:06:86:43:28:43:
         52:fb:b4:24:06:42:58:3d:ae:60:ac:52:e1:74:5c:5a:e4:e2:
         21:c5:c3:98:de:c6:07:19:83:78:ee:d5:30:fa:03:18:21:1d:
         51:85:e2:77:64:15:d9:95:29:69:3c:13:54:b3:ca:82:81:bd:
         c1:fe:bb:da:e5:23:4e:e9:c0:95:a1:44:45:54:83:63:f7:1e:
         e4:f9:39:3b:23:a2:ec:9c:8e:27:b7:96:c2:9e:d4:1f:78:14:
         49:ca:84:66:32:d0:77:4b:3e:e1:6b:1a:48:40:3b:59:e5:d9:
         07:a5:f0:3b:5e:b3:ac:39:dd:e0:b9:d9:9e:d3:97:68:35:78:
         9b:ce:0b:cc:9f:f6:9f:01:e0:24:b1:9a:79:ae:14:00:e2:88:
         e1:03:ff:f8:9a:6c:7b:dc:a5:b2:e7:cf:33:e5:0c:77:5b:0e:
         2f:da:08:5c:1b:35:09:d0:92:93:b4:14:28:4e:46:2d:e6:a5:
         0c:8c:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:42 2026 by rpki-client