Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
File:                     Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft (raw, json)
Hash identifier:          llTGqY6ejmKkZWTlDPgHw/rpmzbts7PE/ECS64kQ6jw=
Subject key identifier:   9E:90:26:90:65:16:F0:76:D3:94:06:9E:EC:1E:0E:83:FB:B3:4B:C4
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Certificate issuer:       /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial:       019D9D75CE1DB9F43EA828131592F7D7C599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
Manifest number:          DB
Signing time:             Fri 17 Apr 2026 22:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 22:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 22:00:36 +0000
Files and hashes:         1: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl (hash: LEQsnnCqet+oTtvMm1QOtbMI8GGB1NZiD4E8Y0kSO7s=)
                          2: pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa (hash: 4nqaIka8KRsnuFWOYZD3ShbhJq0aiv3A2wx6tpUOgnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:75:ce:1d:b9:f4:3e:a8:28:13:15:92:f7:d7:c5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
        Validity
            Not Before: Apr 17 22:00:36 2026 GMT
            Not After : Apr 18 22:00:36 2026 GMT
        Subject: CN=9e9026906516f076d394069eec1e0e83fbb34bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:66:88:25:12:3c:9f:5e:31:66:78:c6:2b:
                    3b:77:3c:da:f7:f8:b5:85:a5:0f:cf:f6:9c:54:20:
                    03:52:1d:1b:f1:62:30:a3:d1:4f:26:02:b4:f3:ba:
                    30:67:35:94:49:c3:8f:81:1b:a3:42:e2:ae:2c:7c:
                    e5:e4:7a:5b:2e:84:3b:f8:fc:c3:c5:40:58:35:52:
                    57:ec:c4:b2:2e:e4:c3:8e:43:99:c3:89:86:74:e3:
                    dd:83:0a:14:71:40:95:ad:bf:ce:44:90:37:e0:26:
                    6c:d5:03:20:a5:37:26:93:18:1c:f3:22:8b:76:93:
                    84:db:1f:13:31:4b:9a:86:38:5f:86:f5:87:65:83:
                    fa:67:d6:42:59:b8:35:d6:be:e5:f6:81:0e:83:54:
                    9e:7e:b4:2f:06:db:2f:7e:7a:86:87:e2:ae:b1:e5:
                    9f:00:77:f6:a1:a4:0f:2a:e7:94:7c:3d:22:70:44:
                    cf:e5:c9:86:ba:52:97:5a:0b:f6:21:8a:8d:09:a2:
                    55:2c:2d:40:9a:55:ce:eb:9b:86:54:5c:dc:85:92:
                    23:39:03:55:14:70:40:1c:9a:9f:11:6d:fc:30:f1:
                    03:b9:0b:1d:d1:b3:32:c4:4f:38:75:44:1c:60:67:
                    06:e3:21:20:fa:98:80:76:01:7e:7f:ce:46:68:8c:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:26:90:65:16:F0:76:D3:94:06:9E:EC:1E:0E:83:FB:B3:4B:C4
            X509v3 Authority Key Identifier:
                keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:08:b1:04:1b:42:3d:ca:6f:84:78:5d:4b:9e:94:80:92:
         cb:be:e6:7d:48:fc:1a:25:a6:a4:e5:8a:06:08:02:d3:df:b0:
         3b:5c:ed:7a:ef:be:cb:1b:a4:3a:37:9c:62:e6:97:8b:f0:fe:
         1f:e2:91:5d:14:7f:75:4a:2f:dd:06:1c:cc:36:a8:6f:35:e9:
         6a:79:39:34:48:6e:42:de:9d:74:f2:c1:23:09:f5:de:71:5e:
         65:21:f2:c9:1d:ac:00:13:59:a8:17:7e:55:a3:0b:f4:c3:5a:
         f8:55:c0:ae:7f:b8:9c:94:3a:84:01:36:06:cc:5f:fb:29:2f:
         75:24:8d:f8:2a:9a:02:81:68:05:e0:e3:5b:be:a4:d1:ac:65:
         93:33:64:d5:46:50:ba:ca:ee:aa:44:d8:a9:6f:77:50:1a:87:
         98:a4:8a:41:c3:0b:a0:27:cc:7a:95:3b:8d:a3:bc:ab:09:19:
         7c:be:56:be:1d:19:83:b5:ab:55:1a:02:71:c9:8d:1b:7e:57:
         c8:86:fc:98:d0:c9:d8:82:8f:52:35:4f:72:ad:18:bc:a4:c1:
         4e:62:e3:da:b5:f0:1f:3d:8a:c0:07:87:73:56:8b:ac:eb:dd:
         31:4e:39:59:d6:a9:f5:dd:7b:08:3a:76:1c:10:c0:4c:91:3a:
         30:77:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:03:59 2026 by rpki-client