Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File:                     dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier:          yI0RdvALuDrn8zop/D5VQ11/AyUgd6lebIj9XVsTNzk=
Subject key identifier:   C7:6A:FA:BE:7B:A8:B8:31:8A:71:F6:83:BE:85:B7:29:9A:0D:44:F2
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer:       /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial:       019D992B4F56F8F38F80C93E909ED30E7E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number:          0530
Signing time:             Fri 17 Apr 2026 02:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:45 +0000
Files and hashes:         1: RIKPxzN612TS7QdYx0yhnbfdgCk.roa (hash: 07oY6OiufBnwXNFc8F9BHYyCv8CtgRF58yYSOyMr920=)
                          2: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (hash: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM=)
                          3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: mjEMIj2UX89sIjw54IvHz2MBzRPf47FGok1/4roKgfE=)
                          4: ryBPgXvA-kuwL8ute7lp1pTeuxA.roa (hash: aMotHhiy0ZyL5y70ElZdApnRGo5oHKFlodbC24Zl6LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:4f:56:f8:f3:8f:80:c9:3e:90:9e:d3:0e:7e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
        Validity
            Not Before: Apr 17 02:00:45 2026 GMT
            Not After : Apr 18 02:00:45 2026 GMT
        Subject: CN=c76afabe7ba8b8318a71f683be85b7299a0d44f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:23:41:cd:7d:23:9d:02:d0:ba:2d:88:5d:
                    24:b7:fb:08:42:c7:cc:18:f4:4b:03:d6:9a:bf:77:
                    c3:93:70:49:53:61:9c:8e:23:15:9f:fb:d4:21:04:
                    9e:f7:ec:05:1d:30:2c:8e:77:2b:f3:56:4d:61:03:
                    24:3f:8a:63:07:3d:ce:22:7a:27:67:9f:8f:29:17:
                    dd:67:af:51:5d:e6:2a:cb:89:d3:4b:5d:4f:a9:29:
                    b4:28:95:a5:d5:63:f1:d4:c9:06:38:7d:1b:2b:9b:
                    ea:e5:e5:8a:35:c2:e7:d9:3a:e3:2e:c2:23:60:b0:
                    8b:3b:db:ff:bb:6c:31:1f:ab:a7:38:60:e4:6f:04:
                    11:52:5b:ba:98:69:76:91:a4:80:85:7d:26:8a:d1:
                    1e:89:4e:84:13:6c:80:13:46:7e:5c:97:96:95:f1:
                    4f:c0:a0:ee:a4:02:10:25:57:eb:5a:c9:57:d4:fb:
                    7a:37:d9:f2:2f:72:f9:70:70:f6:2f:c8:56:03:05:
                    a8:b1:19:94:c5:9f:98:c0:40:87:64:c2:9a:35:fd:
                    b5:c4:3c:45:1f:13:7d:52:90:ba:4d:a9:64:ed:a4:
                    ec:b2:54:0c:c0:7d:b9:5d:d3:35:bb:87:fc:4a:8d:
                    b1:92:e4:6e:54:d1:c6:76:3b:39:c3:99:c3:5c:2e:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:FA:BE:7B:A8:B8:31:8A:71:F6:83:BE:85:B7:29:9A:0D:44:F2
            X509v3 Authority Key Identifier:
                keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:e0:20:4f:43:f1:71:1e:17:47:fa:73:6e:53:97:7c:6e:
         ca:f7:f6:07:b9:79:1f:ae:97:bc:30:e5:a2:33:cf:98:3a:ec:
         24:5a:db:cc:d0:dd:e2:04:fb:8f:db:95:28:dd:cd:83:d8:17:
         1f:6e:99:4f:cb:d1:6d:e6:5b:c3:05:34:d4:36:98:85:40:a3:
         a7:0b:95:16:8c:d7:20:7d:71:ca:90:6e:49:60:2d:78:8a:41:
         2d:36:e7:28:01:24:68:04:53:a4:38:91:a8:6b:c8:db:b7:80:
         6b:5f:43:5f:3a:09:6c:94:04:24:ff:c3:69:90:79:3b:fc:46:
         cc:84:00:31:36:c5:98:8e:8c:4a:39:3f:d2:29:00:a2:06:f4:
         47:64:c8:4e:21:61:bf:1d:c3:29:93:0d:10:06:f1:6c:bd:9a:
         da:21:92:e1:60:1f:a6:2e:a9:d8:41:70:92:92:a8:e9:28:70:
         39:f6:66:bd:15:ff:7e:0c:0f:c4:08:5d:60:c5:ad:64:99:a2:
         d3:d1:d1:3c:1f:7d:f8:14:c7:ae:bb:2b:c9:e3:85:bd:f9:d7:
         8c:a3:ab:62:2f:1e:d2:2d:c2:12:ef:af:89:82:c7:42:12:c2:
         5c:06:c0:25:e8:a8:08:82:f4:15:9d:06:d0:d3:af:81:18:35:
         c4:d3:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:47 2026 by rpki-client