Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File:                     2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier:          Zy9/QNnHu+ymoT9UBOUj5o4nRzH1LGW+L3WpsUC1RkE=
Subject key identifier:   F6:66:73:4E:ED:DE:FF:EA:40:73:18:4F:0D:62:5E:1E:47:B7:72:B8
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer:       /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial:       019D9818BAEA0815FA5E4C87130AAAD79E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number:          1528
Signing time:             Thu 16 Apr 2026 21:00:50 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:50 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:50 +0000
Files and hashes:         1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: ynIgDgYEHaTIvuwsEe5EGP1xIrtP9KHxdwF6qG8diZU=)
                          2: Mvg3Mo5WSYjcX-Icj2bidj2_crQ.roa (hash: vVq/Mz8wGpzyBjkk9cQ+W/VRqd2BvaRyhDgc817bfY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:ba:ea:08:15:fa:5e:4c:87:13:0a:aa:d7:9e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
        Validity
            Not Before: Apr 16 21:00:50 2026 GMT
            Not After : Apr 17 21:00:50 2026 GMT
        Subject: CN=f666734eeddeffea4073184f0d625e1e47b772b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:b6:b9:b8:c7:7a:84:47:47:66:e0:27:37:
                    2c:3c:05:3a:a0:57:ae:7a:73:75:e6:30:8e:67:41:
                    17:bd:b6:3f:f9:1e:fb:45:05:15:0d:2b:c1:c2:9a:
                    77:d5:c2:d3:b2:a4:02:d8:a8:8b:7e:43:f9:23:51:
                    09:b1:5b:87:f4:ff:8d:32:6e:a7:a1:19:3a:c8:da:
                    df:20:b9:9f:58:77:64:2e:1c:6a:ac:da:a1:67:2c:
                    0d:eb:f1:0f:e2:19:13:e9:a5:f2:c2:53:3f:bb:14:
                    42:46:ab:b8:ea:1b:f8:53:e6:9d:40:63:a8:55:19:
                    86:c9:56:c9:d7:b2:c8:5f:37:a5:34:66:6b:0d:51:
                    80:01:47:55:d9:5a:ba:21:37:dd:fa:f1:2d:66:5a:
                    5e:75:b9:c7:5b:3c:67:84:2f:3d:1e:ca:9f:13:aa:
                    ed:e6:09:a3:d0:b2:e4:8c:85:67:2a:b8:61:4d:49:
                    78:b2:44:7c:2c:50:cb:e3:08:14:4a:f0:6d:8a:5a:
                    f7:3e:74:5d:c8:a4:a5:58:37:0d:61:a7:92:81:5a:
                    fc:a9:5e:21:ed:c5:34:54:77:6e:1a:6c:e1:46:13:
                    68:ba:f6:d6:17:82:af:b4:83:a4:68:91:00:7e:b8:
                    d9:5d:81:f5:a2:15:69:ce:1d:91:e3:ef:bc:82:02:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:66:73:4E:ED:DE:FF:EA:40:73:18:4F:0D:62:5E:1E:47:B7:72:B8
            X509v3 Authority Key Identifier:
                keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:06:fc:d0:a6:35:2e:42:62:da:f7:25:3e:62:35:99:de:
         a3:ca:64:1f:38:18:47:63:6c:2e:16:8e:cf:7a:b7:ce:5b:c7:
         51:55:17:ff:97:41:dd:f9:eb:ea:7c:67:f3:5b:63:12:16:20:
         8d:12:6f:08:96:5d:38:1c:84:0b:ad:dd:11:a0:22:c2:91:6e:
         db:d7:89:04:93:b6:67:83:2e:48:03:eb:85:1c:63:fe:4b:0c:
         b9:54:12:9d:d4:3c:e8:fb:47:6c:0c:6d:97:0a:9f:a2:e8:a1:
         37:36:8a:a2:0e:cb:7c:52:f8:93:26:fc:1e:f2:e4:45:6f:4e:
         a6:03:48:60:97:6d:68:fe:43:d3:7b:a6:d3:26:56:e3:8e:86:
         62:ae:fb:17:9a:d8:af:07:17:50:b9:2f:08:ef:18:ae:63:38:
         da:38:f1:9b:d8:9f:46:a6:1e:e9:0f:9d:10:b5:56:9e:3a:3e:
         5b:37:9d:e7:43:ae:ee:48:21:d8:a7:47:cd:b5:98:8c:8a:45:
         6f:b5:05:93:e3:28:fb:b3:c8:4b:bf:58:82:42:3c:7b:a2:72:
         69:83:2a:49:6d:91:72:66:84:45:a8:47:ee:de:d4:d2:be:a9:
         88:7a:64:a5:1d:a1:b4:b4:cb:85:7d:f7:b8:27:26:c5:dc:3b:
         a5:5a:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:56 2026 by rpki-client