Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File:                     2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier:          5NhWAQ38Kl5OZTMKJcoMi5mCQl0uFDcxt1KxaHH+pps=
Subject key identifier:   82:3E:C0:7E:A2:00:93:50:6B:84:27:38:96:A3:84:24:B1:CF:35:DE
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer:       /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial:       019D99D0D6AA275E13B6DBD9A00033A7BEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:33 +0000
Files and hashes:         1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: mKNaUYbLelufFCfa4BBH2hPGxi5zOBH3w0JbHHE5qZw=)
                          2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d6:aa:27:5e:13:b6:db:d9:a0:00:33:a7:be:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
        Validity
            Not Before: Apr 17 05:01:33 2026 GMT
            Not After : Apr 18 05:01:33 2026 GMT
        Subject: CN=823ec07ea20093506b84273896a38424b1cf35de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:04:7c:39:98:e4:a0:ff:1e:9b:38:76:75:
                    9d:95:71:80:59:59:04:a7:fd:f1:5a:6b:15:77:62:
                    08:b4:39:c3:2a:84:2f:42:9f:e4:5c:12:33:d5:d4:
                    fc:2a:b9:1e:4d:5b:95:d1:4f:c9:5c:de:cc:a9:55:
                    b5:de:00:02:44:c9:7a:c3:49:d2:ce:18:17:e4:b7:
                    13:46:b3:7b:3b:c5:5d:20:57:af:3e:6f:b0:36:61:
                    ef:07:37:51:f1:47:7e:d1:70:fb:71:42:4b:59:77:
                    e8:19:7f:bb:76:d0:96:4d:cb:f2:b6:bd:6d:7c:ad:
                    a4:10:d5:90:5e:2a:84:f5:72:f2:c5:96:d5:62:5f:
                    1f:ef:a5:79:af:58:e3:eb:31:9b:39:fa:5d:ce:2b:
                    39:6a:42:c6:c2:57:e8:c3:6d:4c:d3:cb:ea:f9:73:
                    a8:03:72:15:a6:cd:25:c1:ff:3e:da:df:a5:02:dc:
                    2c:89:db:f2:d2:d6:2a:aa:19:10:fb:5c:86:7d:d9:
                    73:51:51:74:b3:f8:f1:5e:2a:62:ab:2a:d5:2d:49:
                    c7:04:7b:d6:cb:1f:aa:03:10:f9:26:54:5d:b9:1a:
                    a3:9a:df:75:02:8e:44:1c:1a:4f:4c:bb:4a:4c:8a:
                    34:1b:b5:fa:99:7b:7d:d5:23:0d:e3:88:79:02:9e:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:C0:7E:A2:00:93:50:6B:84:27:38:96:A3:84:24:B1:CF:35:DE
            X509v3 Authority Key Identifier:
                keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:c2:2c:60:ff:fc:92:21:36:6d:f2:32:ba:8b:a8:fd:c9:
         1d:26:e5:98:31:16:85:ca:8e:b7:97:9a:f1:f7:3a:7b:b5:65:
         35:ef:57:34:02:54:f3:29:45:80:c9:2a:18:af:a2:28:24:f1:
         64:4d:56:d0:c8:ab:26:aa:8a:ce:59:ce:ff:0b:cf:bf:82:d7:
         76:7a:cb:36:1c:8f:4b:c0:72:b4:1d:6a:97:35:02:3f:44:e8:
         e5:d8:0c:2c:8c:36:9d:a3:d9:e0:4d:f9:de:00:58:a6:9f:e1:
         66:6b:a6:07:bc:b0:68:c2:a2:07:1e:14:b4:1f:00:62:34:9e:
         ca:22:d4:b2:29:2b:54:aa:d4:96:fe:9f:47:f4:b1:d8:34:95:
         b6:15:f1:72:1a:3f:c6:5a:c6:8a:7e:6d:15:8d:28:d8:be:a7:
         90:89:35:15:15:20:96:b8:24:ee:5c:6f:4a:cf:7d:d7:08:e1:
         4c:76:17:9b:f5:67:ee:f8:8f:e1:29:ef:59:50:07:9a:99:eb:
         2a:8c:b8:e6:c3:f1:2b:5b:46:d9:80:d7:64:52:1b:fa:3f:a5:
         3a:ed:02:5f:36:61:19:e2:c1:ec:60:eb:2c:d9:fe:fd:e2:41:
         c0:4e:32:1c:8e:a5:34:2c:98:50:b4:8e:f8:13:4a:5b:d0:18:
         91:f1:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:06 2026 by rpki-client