Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File:                     aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier:          dphpSFZzDp+MZuaRFlkdnKTVvOEjB6yeUiOshfUNnMA=
Subject key identifier:   A2:EF:94:28:AD:FC:B5:13:2A:3B:62:6C:4F:4D:CD:E7:18:0E:47:D6
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer:       /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial:       019D9E889CE27826F369A8AC63D99394419B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number:          02D4
Signing time:             Sat 18 Apr 2026 03:00:46 +0000
Manifest this update:     Sat 18 Apr 2026 03:00:46 +0000
Manifest next update:     Sun 19 Apr 2026 03:00:46 +0000
Files and hashes:         1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: cA7mqzn2px5+dJKjUD8+q5l4OP2CCwJK2ZocsqX8yxg=)
                          2: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (hash: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:88:9c:e2:78:26:f3:69:a8:ac:63:d9:93:94:41:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
        Validity
            Not Before: Apr 18 03:00:46 2026 GMT
            Not After : Apr 19 03:00:46 2026 GMT
        Subject: CN=a2ef9428adfcb5132a3b626c4f4dcde7180e47d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:0d:3d:f1:a4:8d:e4:96:3b:32:66:35:bb:
                    9e:9f:02:2f:91:a1:ed:71:3a:5a:41:09:17:f6:97:
                    95:99:cc:0d:cc:05:06:84:5f:92:38:1d:21:0d:95:
                    b9:5a:f4:df:e6:b8:61:91:3e:51:ed:ae:2a:44:fe:
                    f5:5e:b7:80:c3:ae:4b:bd:c1:2f:64:3b:a2:e8:cc:
                    95:b5:75:de:0b:7a:86:fd:17:f8:29:0e:7c:97:c1:
                    a7:46:b2:ab:8e:4c:c1:69:fa:40:90:d3:8a:c5:d5:
                    98:a9:ac:f0:a1:4b:d9:d8:9a:19:cc:e3:ab:76:86:
                    4c:08:e2:87:fa:f1:8e:fa:a7:3b:57:ac:7e:a2:09:
                    18:cc:15:46:44:a7:51:96:eb:23:59:53:c3:d9:29:
                    55:71:6f:f3:cb:4d:b4:13:97:2f:30:f9:a2:6a:af:
                    03:1f:be:a1:cb:74:ec:d9:1a:9c:88:8b:be:83:73:
                    7f:ce:22:79:7e:0d:d8:94:d4:6c:0f:a0:b2:73:c6:
                    4a:9f:b1:4f:97:db:c3:67:64:84:0f:29:94:39:30:
                    08:cb:ac:23:33:d3:6e:2f:ce:34:00:2b:b3:d1:fe:
                    30:6b:ea:34:a9:70:56:2d:2a:d6:00:a9:ae:bc:75:
                    1d:93:e8:d1:1d:d2:21:11:0d:2a:f2:5c:d4:6b:7a:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:94:28:AD:FC:B5:13:2A:3B:62:6C:4F:4D:CD:E7:18:0E:47:D6
            X509v3 Authority Key Identifier:
                keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:9b:c7:2c:81:bc:05:d9:45:81:8b:42:cb:f8:59:c7:21:
         11:2a:9d:13:43:f6:64:aa:c2:65:32:85:f4:c0:9f:4d:68:d6:
         1c:ea:71:4d:ee:92:5c:ca:41:af:4b:2a:62:97:e8:88:24:0b:
         63:0a:78:1e:81:cf:f3:a8:d8:1a:9d:e1:8f:63:27:73:97:c2:
         d0:3a:77:f3:b4:54:0f:62:aa:75:65:e3:5c:aa:ab:42:ca:f4:
         88:a1:88:a5:f9:8f:b7:53:91:f5:b9:33:5f:c7:49:a6:34:b8:
         4a:03:ea:22:e1:26:3f:b3:46:fc:d7:65:9f:de:4f:bb:04:89:
         75:63:e8:50:a9:1e:9a:54:0b:d0:a1:a0:bf:4e:af:6b:d3:5e:
         44:08:60:ff:aa:1d:76:e6:2e:a1:77:0b:70:41:f4:87:e5:cf:
         c4:8c:55:51:9a:cb:8b:d3:69:87:e4:34:67:da:7d:e7:c0:69:
         cf:32:ec:6e:53:c3:ab:2c:93:bf:90:85:cc:20:4c:8c:99:45:
         ef:36:80:5a:ad:5c:13:c3:27:a9:2c:08:44:93:5a:12:62:ae:
         cf:15:ed:67:23:f2:8b:ff:bb:90:dc:e4:34:c8:15:2f:cf:d5:
         48:47:20:68:ad:66:5c:f2:71:0c:79:84:c3:4c:56:8f:8a:a0:
         29:d2:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:16 2026 by rpki-client