Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File:                     2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier:          vL6ecY/v+FTd5zQ/ljzrVDocZ7hq0pUR+l/bpX+0fB8=
Subject key identifier:   D7:21:B6:FA:CF:77:42:0C:42:BB:A4:EA:01:CD:71:13:AC:F5:2B:BE
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer:       /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial:       019D99D0937D2F319B33416F22B8EFAD3D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:16 +0000
Files and hashes:         1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: +aTEt+9xln3N9kjgA2IYMY8jaCOvJvLD/9yzVtLI5GI=)
                          2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:93:7d:2f:31:9b:33:41:6f:22:b8:ef:ad:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
        Validity
            Not Before: Apr 17 05:01:16 2026 GMT
            Not After : Apr 18 05:01:16 2026 GMT
        Subject: CN=d721b6facf77420c42bba4ea01cd7113acf52bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:96:f8:fe:e8:97:2c:86:3b:32:c1:7f:39:
                    12:da:7a:e1:f8:6f:7b:53:d7:6e:7d:3f:00:83:70:
                    3f:3a:53:36:a6:bc:76:51:65:c6:05:fd:c5:2b:40:
                    f5:70:4b:9b:74:bb:b9:05:d0:56:16:43:b0:fd:b6:
                    ed:1d:ef:5c:8c:12:bd:7d:b0:d4:f6:02:2f:56:82:
                    60:66:af:52:62:09:f7:e0:62:ea:5f:6b:d9:24:c8:
                    33:82:88:58:c8:ee:76:45:a8:f9:3d:ff:b5:93:8a:
                    66:86:ea:82:31:77:e6:ae:b6:5b:84:d4:c8:b4:40:
                    e1:a6:5a:e6:f7:d0:ef:19:89:87:86:63:c4:a4:5b:
                    3e:71:62:f8:60:57:76:c9:71:91:c6:d9:ac:45:20:
                    49:e6:81:1d:70:95:ba:6b:72:1f:0e:f7:84:d1:5e:
                    e7:cb:80:6c:e1:ff:de:d0:f7:53:ed:a2:51:44:9e:
                    b5:98:6e:c6:25:bf:18:57:90:dd:30:96:e0:09:76:
                    4a:45:53:e3:b9:94:24:5f:65:5f:c0:28:95:6b:5f:
                    2b:be:ef:e9:f5:a8:58:28:24:23:33:30:a8:14:f8:
                    5d:37:05:6d:00:ed:ee:4c:26:ea:5d:c5:1d:15:17:
                    52:52:1a:97:d0:bb:c9:22:23:c3:94:73:96:8e:78:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:B6:FA:CF:77:42:0C:42:BB:A4:EA:01:CD:71:13:AC:F5:2B:BE
            X509v3 Authority Key Identifier:
                keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8d:8a:30:fa:7b:81:f8:4a:b5:d7:17:80:de:4c:d2:78:bd:
         59:40:fc:52:10:0b:fa:88:25:f9:33:8d:a4:ac:f5:02:96:66:
         0d:48:34:13:e7:52:81:e5:3e:d8:df:0d:d9:a1:8d:1d:eb:e0:
         f1:56:a5:aa:e2:ef:d1:11:7b:ca:a7:61:9c:3a:74:d1:2d:72:
         d2:5f:a1:73:c2:ce:04:04:79:32:f7:6e:59:05:b2:78:2c:b8:
         cc:82:25:b7:0d:d9:b7:05:3e:e2:03:0d:f0:54:0b:02:fe:82:
         0c:a5:a8:b7:ef:22:55:61:e0:2e:bd:1b:64:1e:d4:ba:67:e3:
         ca:0b:2f:7f:e6:42:dd:a8:f0:9d:cc:e9:9d:97:9c:b5:58:9b:
         73:e8:ac:d5:04:7b:74:48:a6:62:88:2f:c3:20:31:5a:11:99:
         af:e8:8a:4d:87:83:fa:31:cc:ca:92:f8:92:15:72:69:ff:0e:
         ab:1c:ae:df:89:1a:77:29:9c:d0:c5:85:4e:08:b9:c9:35:37:
         38:75:fe:a1:be:13:c1:ad:34:02:a9:86:ef:ab:2c:91:90:f6:
         37:cc:b3:08:9c:9e:37:0f:f3:85:da:0d:cf:36:0d:3e:99:ea:
         57:47:45:bc:da:ed:5f:0b:dd:51:26:52:04:86:9c:4d:bf:be:
         92:67:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:20 2026 by rpki-client