Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File:                     Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier:          V+W//ZYGldU/uFSwguOWTVWLK3vJuJlcbe3/GRku6Qo=
Subject key identifier:   27:A3:91:28:58:F0:4A:82:0E:64:83:11:E2:0B:8E:7A:03:C4:1E:B3
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer:       /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial:       019D9B19B1CEA6259DDAD860B7011611496F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number:          13D6
Signing time:             Fri 17 Apr 2026 11:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:45 +0000
Files and hashes:         1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: s7DJP6bEShiiGf4u2uSzFKTIcj7Y/+GOe5IGtT5qKP4=)
                          2: qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa (hash: +pjqzmokR2G2qc24N9ur5O1FIrpMiWBJ/MAwmqbWH98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:b1:ce:a6:25:9d:da:d8:60:b7:01:16:11:49:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
        Validity
            Not Before: Apr 17 11:00:45 2026 GMT
            Not After : Apr 18 11:00:45 2026 GMT
        Subject: CN=27a3912858f04a820e648311e20b8e7a03c41eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:87:62:8f:bf:13:93:03:5a:c8:b2:cf:9a:
                    cd:20:fa:a3:8b:62:e4:f1:7c:ab:f2:0e:8a:0c:3e:
                    32:99:ac:ce:5e:3c:c9:32:2d:4a:04:20:47:66:b8:
                    dc:87:0c:70:ac:22:96:e2:43:40:b0:37:8c:b3:42:
                    20:33:69:fc:58:d8:86:0e:e0:cd:57:29:6f:c7:a0:
                    19:31:44:0e:64:21:63:ba:a1:01:27:5f:5a:5d:9b:
                    40:c9:7e:8b:09:ed:3e:e0:5d:c2:bd:59:3a:b5:92:
                    95:d2:64:e2:f2:83:b6:72:7b:e5:7f:bb:49:6a:3e:
                    61:51:95:ce:cd:c8:fe:75:a3:6b:95:c4:f6:2e:6e:
                    82:e5:5e:5a:b9:b6:b6:ea:75:36:7d:df:09:2a:44:
                    0c:97:0e:d0:97:a7:38:39:2d:9b:ff:b3:0d:79:bc:
                    18:a3:ce:e5:a9:1f:eb:dd:ef:b0:63:20:34:c7:39:
                    35:b1:29:52:b7:df:a9:c2:e4:84:ac:33:83:c5:3b:
                    a2:cd:8f:5a:e1:db:8a:df:bd:99:c5:08:1e:ce:3a:
                    08:fb:6f:a8:d6:e5:bc:3f:b4:62:ab:22:ea:a4:bc:
                    92:9a:72:96:72:0e:01:e9:a8:49:e0:62:28:59:a6:
                    c4:86:52:82:99:10:29:41:f6:d5:43:7f:61:d7:e7:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A3:91:28:58:F0:4A:82:0E:64:83:11:E2:0B:8E:7A:03:C4:1E:B3
            X509v3 Authority Key Identifier:
                keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:df:68:0d:b9:28:bb:88:56:93:c7:b6:91:e0:cd:15:63:6e:
         01:cc:31:5a:a5:3e:a0:55:81:c3:cb:40:bd:a4:80:2a:38:57:
         6b:38:5e:50:23:4e:7b:7e:a1:48:e2:3c:70:8b:ab:3d:a7:2f:
         ec:93:9b:04:74:95:0d:68:03:ef:05:95:63:7d:36:9f:83:89:
         93:a5:3a:93:6e:57:1c:45:a2:85:cb:7e:5d:ce:9e:92:47:3a:
         2a:02:cd:fd:df:00:38:be:8a:55:ee:d7:79:18:22:8f:10:8c:
         d3:a7:00:14:cf:86:a3:40:73:ca:50:96:74:da:0f:bd:cd:13:
         61:05:df:29:4f:dc:13:15:a5:80:04:67:18:2b:20:8d:1b:fa:
         68:04:1e:75:aa:7f:37:e4:13:0e:31:b6:98:72:71:86:1e:51:
         9e:ac:3b:b0:c1:17:54:3d:3d:40:43:b8:dc:fb:78:bd:a4:01:
         f8:84:76:f9:9f:46:90:fb:08:fb:1a:a9:75:8d:28:f0:0f:70:
         4d:8e:fe:ba:6d:02:e7:03:8e:ea:49:fe:0c:9f:f2:d8:04:7e:
         77:46:f0:cd:32:9a:6c:dc:3e:8c:d6:c7:d9:1a:30:3c:b2:9b:
         53:81:b0:b8:27:70:49:ad:f4:8c:ba:b1:b3:d0:9b:18:de:3e:
         ab:8d:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:41 2026 by rpki-client