Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
File:                     si5iV8EWb28s9CgOB6wMrLFfqd4.mft (raw, json)
Hash identifier:          Z9vPSa2aBaNHHwB14KkMKZR9IOCYbSzgTLrdRQEOBa4=
Subject key identifier:   3A:AE:BE:50:DE:0F:CC:E4:FD:34:E2:40:F6:1F:03:C6:EE:00:52:7E
Authority key identifier: B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE
Certificate issuer:       /CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
Certificate serial:       019DA4538A2A973EEB1723E83980F702EF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
Manifest number:          67
Signing time:             Sun 19 Apr 2026 06:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:31 +0000
Files and hashes:         1: si5iV8EWb28s9CgOB6wMrLFfqd4.crl (hash: nieESdvI5mqmjT6xT7kHAHrRVJzYVXpr5+JWasrxgA4=)
                          2: to7i0Ci5lQH6CsTqpByICqd4qQE.roa (hash: eMPNYL14+MIRFte38ZNDEn2SBRIVaM+X88x35MWdRoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:8a:2a:97:3e:eb:17:23:e8:39:80:f7:02:ef:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
        Validity
            Not Before: Apr 19 06:00:31 2026 GMT
            Not After : Apr 20 06:00:31 2026 GMT
        Subject: CN=3aaebe50de0fcce4fd34e240f61f03c6ee00527e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:eb:ec:d4:f1:d5:af:b4:37:ea:78:35:bd:
                    bb:33:53:b2:7e:c8:3c:d7:c2:f1:df:00:99:81:9a:
                    05:1d:3b:ca:dd:9b:02:d0:dd:8a:ee:63:0b:35:20:
                    17:0e:40:5a:8c:4f:81:d7:f1:d5:7b:78:57:d2:ea:
                    ce:86:7b:b4:f2:ee:7a:68:06:61:64:c0:85:cf:8e:
                    1f:3f:07:46:09:5a:b8:3f:02:01:5e:41:22:4e:5f:
                    42:84:67:c9:3d:47:e3:d8:59:80:18:9b:9b:93:5c:
                    37:cd:5c:ec:71:68:0c:77:cf:a8:8b:e8:ae:ec:33:
                    17:71:8e:6b:df:ff:c2:44:b8:2b:29:15:d0:bd:a1:
                    f5:6a:00:74:fe:b9:78:10:87:5f:24:02:58:84:02:
                    d7:01:04:a2:c4:9e:2b:d3:15:36:34:f1:eb:3c:36:
                    2d:6b:e9:4b:3f:43:86:c2:9a:b3:be:12:58:99:c0:
                    da:3f:8d:e7:9e:cc:89:9c:8a:48:ac:33:52:38:b6:
                    ea:b7:2a:1a:5f:0b:4d:60:8f:c5:21:01:2b:aa:94:
                    42:c6:c1:09:4a:c7:f0:04:51:ac:aa:5f:da:96:5d:
                    7b:e0:71:2b:03:c7:a6:2f:30:a1:d9:21:f9:8d:50:
                    62:7e:ae:d5:91:35:f6:7b:29:d2:e3:e5:bd:08:2a:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:BE:50:DE:0F:CC:E4:FD:34:E2:40:F6:1F:03:C6:EE:00:52:7E
            X509v3 Authority Key Identifier:
                keyid:B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:31:6d:92:38:77:0a:ce:1c:ed:19:95:7b:d8:5b:7e:ae:32:
         2a:a4:3d:8f:d8:71:53:88:51:ab:3d:2d:75:80:37:ae:a2:25:
         74:86:88:af:53:6d:e9:f8:c5:7d:80:b3:74:19:88:ec:5c:21:
         53:52:8b:66:a3:18:ce:f2:26:61:ad:ba:69:29:02:93:36:a0:
         fb:61:00:5f:54:14:b9:cf:36:f7:b8:40:e5:15:b4:19:fa:ba:
         28:8f:1e:45:cb:62:b1:15:41:da:85:9c:28:6a:2a:fd:a0:75:
         1c:55:24:9a:52:32:dd:20:63:15:13:ed:88:59:01:24:1a:29:
         d4:5f:56:01:3b:8a:70:7d:c9:72:52:c3:49:49:c1:cb:76:d0:
         f8:d4:7a:f8:12:7e:6a:0a:7e:38:d6:76:78:8e:eb:f7:ff:7e:
         19:1b:a5:ae:01:d3:78:04:96:35:ee:e5:d7:4b:6b:fd:1b:ec:
         e4:f0:31:83:81:c6:ec:55:77:1e:98:ae:b5:34:97:7d:31:1d:
         20:9f:4d:94:46:34:2f:bc:4b:12:97:2a:d9:7c:dc:7c:27:79:
         aa:cf:43:60:25:91:00:ef:c4:e5:44:5c:51:4e:ff:0a:e4:90:
         e4:98:96:95:ae:d1:02:68:b2:3c:6d:0e:7f:3e:0e:3c:b9:f2:
         a4:09:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:18:57 2026 by rpki-client