Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File:                     DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier:          2I7xGTN8H/JHVdGVCtYGqi/+ylR9ypnbdnFZDsKnask=
Subject key identifier:   AD:C7:C6:FB:05:9B:20:06:99:52:90:2A:0C:20:6C:00:9A:03:46:4F
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer:       /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial:       019D99D040955FE2D632F30A18237AF261F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number:          16B2
Signing time:             Fri 17 Apr 2026 05:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:55 +0000
Files and hashes:         1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
                          2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: yZMK0ewWc+S64OQQBcfj7j2Mn0RfpwzJmm97nnxc0I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:40:95:5f:e2:d6:32:f3:0a:18:23:7a:f2:61:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
        Validity
            Not Before: Apr 17 05:00:55 2026 GMT
            Not After : Apr 18 05:00:55 2026 GMT
        Subject: CN=adc7c6fb059b20069952902a0c206c009a03464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6d:39:57:f6:1c:60:89:4e:53:6e:44:2f:aa:
                    98:f8:44:42:f8:d8:0a:f4:47:e2:ac:fd:74:be:f7:
                    b6:20:57:89:f7:81:50:15:1f:75:96:7d:fb:f2:87:
                    9e:6b:e4:ac:62:d4:db:72:a9:f4:3f:c2:cc:66:da:
                    ee:04:4b:cd:35:e0:6a:a7:7a:64:be:7e:12:ec:e1:
                    f8:b8:f4:a8:c4:70:27:7e:d0:6a:f9:fd:a3:71:5a:
                    54:f9:bb:21:a4:32:ca:35:3a:27:ae:95:79:1d:76:
                    8f:f7:5f:bf:cf:91:a1:d7:c0:bc:bf:ba:be:00:d0:
                    2f:19:f6:e0:1d:5d:01:89:b2:d5:57:a6:0f:67:b3:
                    db:34:e0:1f:71:42:d4:46:7b:bd:bf:9b:d3:80:89:
                    7b:e7:00:e5:2b:5f:47:33:ad:53:47:a6:95:00:94:
                    9f:be:e5:8a:59:0b:ac:9b:f9:ac:92:e3:bc:2d:1d:
                    75:37:04:a7:f9:f7:68:d9:f9:0a:13:8a:ee:77:aa:
                    d9:cd:a1:dc:77:b7:b3:03:33:7c:e3:ca:cb:16:0a:
                    4c:63:b1:bf:f0:d8:90:cc:0e:c5:31:16:a3:8c:67:
                    9e:73:c4:41:65:2c:c0:16:50:b7:ec:f1:09:00:bb:
                    7a:85:23:d2:4b:3f:e1:6e:4e:43:d5:da:93:3f:ec:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C7:C6:FB:05:9B:20:06:99:52:90:2A:0C:20:6C:00:9A:03:46:4F
            X509v3 Authority Key Identifier:
                keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:1e:93:fb:ff:f1:ff:30:bc:ce:d5:27:ec:84:5a:14:ec:
         72:7e:e5:6f:0b:c6:94:78:81:8f:39:80:85:8a:28:56:1c:96:
         fc:18:fa:f8:c2:da:cd:1c:cb:ec:2f:f5:1a:e4:14:a3:44:20:
         c9:9f:4b:37:bb:b5:e8:de:cf:54:4e:a5:fa:9e:e1:d0:ae:65:
         2e:ae:fd:54:04:bf:d6:44:f4:9d:59:2f:ac:45:5b:2c:c2:ef:
         df:ad:9a:fd:57:d0:4d:8a:e9:ab:3d:58:35:2f:08:09:14:14:
         8f:e2:e6:94:14:bb:aa:4a:18:4e:95:7f:32:f7:63:ba:c9:86:
         57:61:8b:aa:87:1e:c4:1f:07:31:3f:94:2d:dc:ed:55:b9:a9:
         b6:6d:89:69:ef:e9:c9:0a:90:7c:50:18:09:63:e3:4a:b6:fc:
         08:a4:0a:5e:6c:23:c3:c3:16:5f:88:a7:52:44:2c:45:1c:e2:
         73:ac:62:4d:1c:06:74:94:05:5c:eb:da:93:6c:57:5c:67:e8:
         51:e1:3c:5b:21:aa:bb:b1:8b:09:ee:78:1a:d0:54:92:eb:cd:
         0c:74:9a:11:0a:ac:a0:80:d8:bd:be:53:35:8d:cd:a3:f3:1f:
         d4:7e:9d:f0:16:60:45:51:73:9a:e2:a5:72:c7:04:41:9c:b6:
         54:4e:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:48 2026 by rpki-client