Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          4qrrap8b2/p/VP/uSy9QRuQtz4iwIh6qOqZD7ynIO1M=
Subject key identifier:   71:52:D8:09:9F:CB:23:DF:63:54:F4:D2:27:C4:DE:D8:FB:CB:25:C5
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       019D9961F6B421C9E18EFD4A83716CB8795E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:27 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: J5Wa+Yielq3M/DJzGHTharYQbxjXY0OwVZuzKN4oa4g=)
                          2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f6:b4:21:c9:e1:8e:fd:4a:83:71:6c:b8:79:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Apr 17 03:00:27 2026 GMT
            Not After : Apr 18 03:00:27 2026 GMT
        Subject: CN=7152d8099fcb23df6354f4d227c4ded8fbcb25c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:5a:39:d8:25:86:be:7f:b4:ae:af:77:e7:
                    86:e4:ad:c7:7a:f3:a4:85:1e:ca:19:b6:7e:34:ec:
                    64:dd:c4:21:34:f6:98:fc:1c:a8:e3:8b:6e:5a:30:
                    62:43:3e:71:c6:bc:85:36:c3:a3:7a:bc:f0:a3:ac:
                    86:c9:80:2c:3a:c9:8c:dc:19:c9:e4:8e:08:4f:a1:
                    57:b3:fa:13:3e:54:4f:df:e5:cf:ac:d5:ad:24:b1:
                    dc:04:2d:8f:f9:1f:04:80:29:9f:b0:7b:a5:30:32:
                    af:7f:71:45:ca:ca:6e:d9:85:91:a9:fa:35:6b:ec:
                    a0:72:57:32:cb:24:85:74:5f:2b:50:7e:53:22:54:
                    05:d2:09:81:50:12:3b:f6:85:02:b1:f7:07:ba:58:
                    c8:65:50:d9:0f:a0:06:9a:47:5f:84:c5:97:ab:fb:
                    12:2f:4a:44:85:93:21:14:b2:2f:02:19:3d:ab:fe:
                    2b:36:cb:83:f0:23:36:6a:45:14:37:98:1f:ec:09:
                    2f:43:53:40:6f:25:80:cd:fb:20:94:fe:f0:b8:c4:
                    56:ce:96:8a:e5:47:50:56:8d:36:e0:4c:a6:c0:12:
                    73:e8:bb:9e:6a:ab:1c:d3:0d:2e:4e:0d:af:67:af:
                    21:eb:21:84:04:99:b7:6a:66:ab:04:24:77:7f:f3:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:D8:09:9F:CB:23:DF:63:54:F4:D2:27:C4:DE:D8:FB:CB:25:C5
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:47:2d:6b:26:50:16:43:fb:9b:52:26:f4:df:37:71:d1:
         8d:ac:8c:2c:0e:95:b4:5d:7e:4f:5a:d4:51:ef:2d:af:18:d8:
         05:ba:6c:1e:1c:23:99:1f:19:40:b2:b4:5b:e5:72:ba:70:02:
         d0:fa:07:57:6d:bc:71:1a:1d:7b:fb:fd:d7:72:49:ba:d7:fe:
         b8:fb:5a:1a:3f:a9:8a:0c:64:03:cb:08:fe:ad:8c:17:70:39:
         de:c6:e1:d7:dd:bb:0d:d5:1b:78:90:ec:ef:b4:17:96:eb:b3:
         87:be:f5:e8:2a:75:61:9b:f2:47:69:e7:11:6e:25:7d:ad:51:
         4d:29:2f:ce:a2:be:10:8c:c6:17:8d:f5:a1:5d:4d:b1:03:cf:
         90:65:c6:06:8d:19:cd:c6:1c:15:53:8f:3e:83:2c:3c:89:0b:
         87:fe:45:ec:b3:08:fd:99:fb:a3:9d:4c:a4:61:ae:a4:1b:c0:
         b6:c5:f7:26:30:77:fb:af:e5:24:54:3e:ac:c7:39:30:7f:cd:
         de:3d:e9:36:c0:02:75:73:f9:e5:d8:b6:bf:56:f9:16:41:c8:
         a3:c4:b8:78:4b:0f:b0:14:67:1c:77:14:a8:fe:fb:17:99:be:
         8b:ea:54:e1:e7:3b:15:71:b9:ac:56:8d:64:e9:71:2b:6c:e4:
         89:e7:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:31 2026 by rpki-client