Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          MM6AWtKoCGt/DzFB/iOMpp0DNAfgOnB4c5oGHzJbXUo=
Subject key identifier:   01:19:AF:4A:B2:8E:14:5E:1A:CC:2A:28:31:61:6D:5E:62:42:5A:EF
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       019D992B0D65F1682EE9A3BABF7094461822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          11AD
Signing time:             Fri 17 Apr 2026 02:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:28 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: zpLc19rVbxhg4eB3SiyefBnRW17CdHy0wcoUQ2y7leE=)
                          2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:0d:65:f1:68:2e:e9:a3:ba:bf:70:94:46:18:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: Apr 17 02:00:28 2026 GMT
            Not After : Apr 18 02:00:28 2026 GMT
        Subject: CN=0119af4ab28e145e1acc2a2831616d5e62425aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:71:84:03:fe:3d:4e:87:40:c6:4b:08:4d:
                    67:32:ed:90:4e:7e:44:9e:34:d3:aa:67:9e:1c:db:
                    3c:f4:55:f2:cd:11:a7:c4:69:d5:b2:dd:b2:0d:13:
                    c9:ab:a7:8b:00:7a:fb:5a:a2:34:48:e1:0b:ec:bd:
                    e8:27:68:13:5b:ad:a6:b1:0a:05:99:27:71:88:ae:
                    b2:89:db:5e:79:73:23:b1:14:58:b4:87:03:59:e9:
                    0e:f3:70:6e:12:b8:4b:05:3c:8c:e4:18:a4:72:0e:
                    a1:dd:ca:0e:57:4a:d3:3a:1f:20:fc:ff:f7:79:28:
                    17:22:fc:39:7c:c9:48:be:44:fd:9e:f7:01:55:12:
                    70:46:a7:3f:61:94:c0:90:b8:32:43:43:09:95:61:
                    e3:ef:05:ae:10:cf:4d:8d:a3:0f:fd:aa:b7:0f:cd:
                    00:7b:65:95:77:3a:d5:7e:0b:2b:cd:3f:b6:27:6f:
                    b9:89:1d:f2:f0:80:4e:bb:0e:be:9a:8f:24:4e:1c:
                    2a:44:0a:c0:65:ae:1c:f9:f6:6a:e8:4f:f6:10:99:
                    16:93:da:31:bd:32:fd:d3:5e:2d:da:99:26:b5:d9:
                    ab:17:c7:b5:dc:6a:d7:b5:0b:f3:b6:45:3f:8e:83:
                    ae:0a:fc:0b:d3:de:a2:68:08:6b:5c:69:31:1e:29:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:AF:4A:B2:8E:14:5E:1A:CC:2A:28:31:61:6D:5E:62:42:5A:EF
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:25:e6:97:c1:16:ed:a8:bf:67:47:2f:0f:b9:1b:cb:85:
         f1:bb:df:c2:91:dd:ac:d3:8b:bf:1b:7d:62:10:68:23:2e:30:
         54:61:f4:53:9a:82:44:f5:a3:57:05:e5:96:e0:59:bd:13:d1:
         b7:f3:9a:71:cf:92:71:95:28:6e:93:be:71:d4:ee:30:ac:44:
         f2:68:a4:a8:a0:3f:99:a6:2a:3e:a7:c8:34:c5:9a:64:f1:26:
         99:22:0a:f3:6c:da:b5:dd:6e:b2:0f:a0:ba:e8:c4:4c:3b:35:
         62:0d:e6:3f:de:f1:a1:60:c0:3c:ac:95:a2:ae:9b:57:ca:93:
         be:75:6f:36:6d:58:89:f7:33:3a:b1:05:0a:b1:68:37:cd:82:
         43:cd:4f:17:82:1c:f5:59:e7:72:92:23:02:02:33:81:df:87:
         8d:f8:18:a5:fa:7e:34:31:73:cc:f4:63:89:a7:c3:8f:46:db:
         78:f0:79:5c:5c:d8:44:6e:69:3a:22:2a:88:47:a4:0f:68:69:
         53:a9:e7:43:ed:db:59:14:72:36:d1:b8:5e:17:68:8d:48:dd:
         cf:ee:6b:78:0c:56:a3:6a:32:17:46:17:d9:5c:97:e4:75:ab:
         d8:ad:df:0c:c1:57:ad:96:02:73:f5:11:e2:4d:6a:f3:bb:93:
         5b:81:76:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:05 2026 by rpki-client