Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          1Sxlf0mZsRxQULJplFHxIu8flqZH5t2ptwYU+cctPeU=
Subject key identifier:   E1:45:BC:34:32:EC:64:C9:AF:45:45:EF:E5:2C:0E:93:33:C6:A5:80
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       019D996240499330B826F65DF5A8E650C0D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          12DC
Signing time:             Fri 17 Apr 2026 03:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:46 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: t5dWKNR36MNG4f5B07w4/Zv+1UBpXiYWQu6ZkhOYCR8=)
                          2: qdG_Gv-Z2yCeI5FZ0wm9b0l6kSw.roa (hash: qEsauC0Q7PPkI4NMJ7sTsrOSfvgrVIwh8wnzn4v958c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:40:49:93:30:b8:26:f6:5d:f5:a8:e6:50:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Apr 17 03:00:46 2026 GMT
            Not After : Apr 18 03:00:46 2026 GMT
        Subject: CN=e145bc3432ec64c9af4545efe52c0e9333c6a580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:9f:aa:81:92:f9:92:72:91:95:15:5e:1d:
                    cb:9b:8f:0b:a6:64:88:ac:ce:a8:89:0d:b3:a7:f8:
                    26:60:c8:75:1b:61:5b:33:6c:3f:0b:7f:3d:24:f4:
                    ca:82:80:24:ed:98:04:84:51:bf:dc:bc:83:74:7f:
                    06:73:97:12:bd:eb:38:1d:0a:09:b5:63:56:6c:94:
                    bf:d4:1f:4d:7f:2e:64:43:6c:f9:b6:23:f1:af:b8:
                    1d:5c:e8:e5:f6:86:f7:3c:01:fc:b8:9a:8b:3a:10:
                    62:e7:d0:37:71:70:20:ef:b5:dc:a7:48:c4:8c:1c:
                    7f:0a:7e:6a:bf:78:96:32:4f:3d:bd:dd:86:47:d4:
                    43:57:6d:d2:b5:a4:6b:e9:27:3a:15:a1:fd:9a:65:
                    d5:fc:1e:68:17:3f:59:16:94:23:5a:2e:c8:97:31:
                    60:64:6d:9a:5a:0a:b7:ca:6d:13:af:fe:10:4a:8b:
                    1e:9e:8f:91:d2:64:eb:9e:03:fb:64:07:d3:58:9e:
                    aa:87:68:f8:01:8e:43:b4:ac:40:19:79:bf:2a:cc:
                    a7:ab:62:a6:09:62:8f:22:41:47:d8:89:dd:f4:a8:
                    3a:d0:e7:89:51:ee:93:6b:54:f4:5a:c2:07:44:16:
                    f9:67:3a:5b:34:c7:9a:20:47:c5:9f:53:89:2d:00:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:BC:34:32:EC:64:C9:AF:45:45:EF:E5:2C:0E:93:33:C6:A5:80
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:70:0f:98:65:6c:9d:e3:02:17:5d:35:31:55:74:8e:2e:
         63:36:03:28:f2:d9:dd:ff:7c:ac:c3:5c:bf:d3:d4:60:24:95:
         86:a8:ed:56:69:39:51:0b:dc:69:fe:8f:a5:cb:af:af:f8:1b:
         cd:f7:2a:38:6b:02:5a:7d:3d:77:35:67:e8:fc:cd:4d:8d:12:
         2f:4d:69:60:5c:39:a4:0b:2f:9a:42:22:52:1a:27:22:b7:d3:
         be:21:92:65:c0:ca:48:35:fc:07:06:88:e6:34:7d:0a:81:0b:
         f3:55:98:62:75:32:cd:c6:48:34:1a:ba:eb:96:33:ab:5c:57:
         df:a4:67:eb:86:7f:30:5b:5d:51:3d:86:6a:ab:a6:1f:c3:00:
         61:ea:2e:e9:75:f6:f6:cb:8d:27:59:95:5e:7c:2d:2d:fc:e0:
         68:6e:6c:69:35:bc:c7:24:d5:d3:ac:09:68:cd:5e:92:17:44:
         d6:a3:f7:74:02:75:b7:be:ea:d1:b4:d8:98:5f:14:4c:10:57:
         a8:6a:e1:ae:cd:69:dd:28:3f:e1:e1:8e:e5:c7:14:0e:1e:51:
         f8:59:49:dc:d2:6d:de:7f:f1:54:c0:86:40:e6:01:19:27:72:
         51:78:f7:ef:6b:6c:1d:07:13:2b:fd:e2:50:28:d8:f4:90:73:
         3d:fd:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:47 2026 by rpki-client