Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File:                     2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier:          3F/zep1F8eHF6XNIThimbnhEKwC3cD/sfJTp/4c6JHY=
Subject key identifier:   B2:0E:39:61:77:1A:F7:C9:99:B0:0A:C1:EC:3A:96:C2:52:5B:2C:EF
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer:       /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial:       019DA3E6E1E834F131ACB998F5A5AE062AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number:          EE
Signing time:             Sun 19 Apr 2026 04:01:50 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:50 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:50 +0000
Files and hashes:         1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: XVMQRHEWY9xN2Q5OR+C3o++vxY1bK6hEQopYKl51h0Y=)
                          2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
                          3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
                          4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
                          5: UD_HyZZU2C19IaFsZaCL4In6Jj0.roa (hash: rylHESPK2fj3KtkgDq6dsWyTS65oKT4JjrBMW31aQeo=)
                          6: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:e1:e8:34:f1:31:ac:b9:98:f5:a5:ae:06:2a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
        Validity
            Not Before: Apr 19 04:01:50 2026 GMT
            Not After : Apr 20 04:01:50 2026 GMT
        Subject: CN=b20e3961771af7c999b00ac1ec3a96c2525b2cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:77:56:a6:fe:82:36:be:7d:38:ed:1d:bf:
                    7e:b8:b1:a7:2b:b6:8e:74:6c:b6:75:1c:24:32:90:
                    ff:12:ee:01:4d:48:ca:19:63:97:5a:49:a1:c0:0c:
                    fb:54:5f:f4:23:a9:bd:76:65:89:e3:b5:db:3c:7d:
                    dc:dc:f5:c4:12:c5:20:4c:3f:bd:43:48:5e:c4:96:
                    3c:d1:ef:4e:3e:cb:2f:77:9e:22:3d:75:80:dd:a7:
                    d1:f5:31:12:e2:af:eb:8f:71:7b:55:85:c5:ae:17:
                    38:e4:40:cf:d1:d9:3f:a2:b8:4b:c6:ba:41:b9:9a:
                    90:de:0b:7d:c8:b0:06:06:2c:1d:dd:17:b0:b5:34:
                    36:d0:1c:ae:71:d0:04:e5:4e:4a:11:5e:96:71:10:
                    6c:f7:08:34:0e:b7:31:b3:4a:99:d1:0b:c1:0b:06:
                    62:58:49:f9:9f:59:3b:4e:e8:6f:a6:77:ed:79:cb:
                    40:d2:6d:6c:de:cd:ce:88:84:b5:ea:aa:78:9d:bf:
                    92:01:56:91:bb:fc:95:84:6c:d5:53:88:da:d8:e6:
                    b4:d2:aa:f9:f6:d0:51:99:5b:98:3c:5f:7c:72:94:
                    c5:ba:c7:da:8e:4e:ca:e0:1f:c3:4e:38:7f:d1:bf:
                    2a:6a:0a:2f:9a:48:0a:22:c6:c7:e6:a6:0d:1b:f3:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:39:61:77:1A:F7:C9:99:B0:0A:C1:EC:3A:96:C2:52:5B:2C:EF
            X509v3 Authority Key Identifier:
                keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:36:e2:fd:4d:3c:71:b6:dc:01:7b:4c:e8:98:0b:9f:ec:ae:
         64:ab:92:03:a8:8d:14:eb:91:59:47:d2:46:60:e0:0e:a4:65:
         79:30:72:79:d2:26:df:70:bc:20:c2:51:82:4f:7f:0a:77:67:
         a1:ab:b9:73:2a:23:06:a4:76:fd:69:0e:fe:b6:20:0b:cf:81:
         5a:77:fd:a6:78:06:6f:62:20:c6:c7:f2:ee:d2:f7:8f:6b:f8:
         3c:fd:7d:68:f3:d6:96:93:f6:bf:52:ec:99:50:83:1e:4b:0b:
         e4:b3:ca:0c:fd:9a:2b:15:d8:ba:ce:c0:ce:b0:ac:3c:4e:7d:
         36:2d:35:4a:c6:cf:66:82:0a:33:4f:89:ab:84:2d:c7:c8:90:
         f6:96:50:02:bb:ed:44:3c:4d:8a:42:76:9a:34:dc:8f:e7:f1:
         c8:48:d7:e9:4c:8b:9e:ab:14:64:86:52:de:27:d7:47:1f:f3:
         47:2d:47:f0:3f:8c:cc:95:60:66:fc:30:5a:28:3b:e0:13:9b:
         ee:1e:77:b6:55:bb:29:96:36:6e:33:16:76:8d:2b:12:03:81:
         79:4e:8f:e8:e1:ca:e8:30:26:e8:d4:29:6a:fc:fd:d1:ca:97:
         83:b5:1c:85:58:d7:c8:6d:b5:58:00:32:9d:c3:73:6c:ce:b0:
         0b:01:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:14 2026 by rpki-client