Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File:                     2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier:          xSRO742ymgHJQT/4dKxZCicgMQmZsJoTnNeyxm/zlTI=
Subject key identifier:   A7:E1:3B:B8:3C:22:EE:71:92:3E:05:DB:92:BF:14:ED:1D:FF:12:F2
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer:       /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial:       019D9886A62260D2815E841F9221DB6B32A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number:          181B
Signing time:             Thu 16 Apr 2026 23:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:54 +0000
Files and hashes:         1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: SdFhzx6s3WQiTKFt8FUOvSuGq+vS4A2wBXbMs7d2s1o=)
                          2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:a6:22:60:d2:81:5e:84:1f:92:21:db:6b:32:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
        Validity
            Not Before: Apr 16 23:00:54 2026 GMT
            Not After : Apr 17 23:00:54 2026 GMT
        Subject: CN=a7e13bb83c22ee71923e05db92bf14ed1dff12f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:80:3d:67:18:0a:bc:13:b0:72:05:2f:b4:
                    fa:bb:d7:4a:a1:69:75:84:54:5d:af:98:7e:50:54:
                    d9:79:b7:75:c5:d9:c3:fa:a0:32:02:b4:69:d0:87:
                    be:07:9d:74:38:01:d0:8e:e7:f6:f5:95:a8:a0:91:
                    44:c5:af:3d:8f:25:62:2e:0c:06:69:ee:7a:6f:88:
                    8a:52:d8:17:ee:e9:2e:cf:04:66:a8:0a:0a:d5:55:
                    89:dd:d3:e4:f9:46:86:bf:06:3c:dd:c9:5a:e6:24:
                    c5:9d:4e:4e:39:c0:c5:e0:6d:8a:7b:0a:83:6d:32:
                    be:5c:ce:cf:89:41:b4:a8:ad:34:9a:18:54:cd:25:
                    e9:24:64:68:65:f0:42:4d:2b:15:60:6e:d5:c4:d0:
                    91:9a:48:13:d3:77:c9:17:c6:e2:75:49:31:d8:19:
                    70:8e:83:86:79:e4:cc:4b:9d:fa:cf:48:ba:84:57:
                    31:62:c2:d0:1f:74:87:20:cc:dc:57:54:16:5c:45:
                    74:23:78:68:50:28:30:0c:4f:ff:2a:0d:67:b4:50:
                    52:8d:2b:7f:13:90:7f:b1:d0:54:9a:a0:c4:99:ca:
                    e0:87:8d:bc:57:12:e1:11:66:36:13:06:00:64:40:
                    7e:89:1b:3d:fd:fd:94:ff:39:c7:fc:4b:24:1a:ec:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E1:3B:B8:3C:22:EE:71:92:3E:05:DB:92:BF:14:ED:1D:FF:12:F2
            X509v3 Authority Key Identifier:
                keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:15:cb:c3:5c:ab:93:a4:e6:f0:57:e1:c6:88:a8:1f:88:21:
         14:8f:26:20:c2:26:ef:13:a5:f4:37:87:f2:77:30:28:95:1a:
         b5:88:44:30:1d:09:68:08:b6:bc:7e:2f:bc:8c:a0:be:f3:77:
         e8:15:58:f7:1d:eb:b3:9f:b0:e9:e2:37:00:9a:7e:26:bb:43:
         3a:66:89:2e:49:9d:0f:e4:d8:30:01:14:e8:1e:40:98:b3:d3:
         55:3d:81:28:e9:78:a9:b1:c6:e0:ec:b1:46:25:64:21:57:7d:
         2e:90:bf:c2:b9:29:9f:97:0b:3d:29:2c:1c:89:73:5c:d8:a6:
         8c:71:b8:f2:c9:4f:4b:49:ec:36:ca:e5:38:0c:16:3c:59:66:
         cf:2e:19:6b:79:bd:60:01:f8:e3:58:1f:82:5d:1e:cf:48:58:
         aa:46:56:c6:53:6b:13:0b:bd:a6:c0:28:ad:20:01:e9:ba:a5:
         05:e8:79:41:51:c5:67:1d:e5:af:98:be:fd:da:7c:a1:0d:f4:
         2b:9d:22:a9:5d:33:92:8f:bb:e5:64:6b:e7:47:62:d8:14:84:
         9b:49:98:fe:0a:64:d6:5b:43:4a:fc:ef:19:2c:55:3f:1a:07:
         ed:8b:d1:7f:4a:3b:dd:a1:27:b9:76:ee:9d:d7:0a:1a:44:82:
         cb:14:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:57 2026 by rpki-client