Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File:                     rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier:          S8+CKaa9+mNkrmzvilmpeHVZMToPCvx2ThYVt/BHAuU=
Subject key identifier:   ED:1E:62:E2:C5:9D:38:EF:FC:84:1B:A7:C4:93:4C:66:5A:48:E3:34
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       019D99D047C86D36929506981D8C9902ACAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 05:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:57 +0000
Files and hashes:         1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: Hz1Rx1O/362XQASIyEWj6m3XbLiDB2U9GM1ofbfkgi4=)
                          2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:47:c8:6d:36:92:95:06:98:1d:8c:99:02:ac:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: Apr 17 05:00:57 2026 GMT
            Not After : Apr 18 05:00:57 2026 GMT
        Subject: CN=ed1e62e2c59d38effc841ba7c4934c665a48e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:0b:b4:d5:e5:58:82:02:70:7e:26:d5:b2:
                    cd:3c:d6:8a:84:65:ea:b8:01:51:fd:b0:04:76:6a:
                    ad:ea:63:4f:fa:29:c7:2b:2c:aa:50:66:ea:80:ed:
                    19:71:1c:6b:e3:d0:10:b1:a4:19:7e:fc:9e:e4:53:
                    c5:57:78:3b:87:94:10:04:ee:93:53:94:ad:ca:65:
                    09:f0:b8:c1:60:3f:41:06:db:ea:5a:1c:be:de:6c:
                    68:0c:91:0b:85:c5:b5:c9:3d:99:c5:7d:74:be:fd:
                    11:93:01:75:44:17:46:2e:5e:f0:bc:3b:94:37:25:
                    75:b3:34:ee:a9:81:86:a5:e0:ef:3e:39:13:f7:90:
                    55:63:f3:4c:a9:a2:b4:24:a0:23:e4:d8:3b:fc:01:
                    03:c2:d5:66:61:a3:a7:a9:90:56:f1:62:16:eb:7b:
                    5e:ff:04:11:51:ee:95:ce:74:6c:33:5e:3d:e6:e4:
                    ef:eb:7d:22:61:a3:dc:3b:79:af:a4:cb:91:e5:87:
                    c1:5e:7d:d2:cd:f8:0e:44:3a:db:2c:27:1d:2e:a9:
                    34:bf:72:3a:88:85:8c:ab:eb:e3:8d:a4:92:38:83:
                    a4:b7:78:2c:65:ff:3a:da:18:1f:65:2a:e1:0c:e0:
                    26:59:31:6f:77:f8:12:aa:69:3e:5e:ed:22:1f:e7:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:62:E2:C5:9D:38:EF:FC:84:1B:A7:C4:93:4C:66:5A:48:E3:34
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:ed:0e:a9:51:a0:5f:07:88:91:3e:d7:2a:dc:a6:10:62:
         5c:18:24:35:35:6d:a9:e9:b2:2c:cc:c0:ef:34:15:0c:74:15:
         2b:d9:c3:a4:04:a5:d0:45:20:fc:c6:d3:7f:90:79:b2:38:33:
         0a:17:25:13:9d:21:59:b8:74:d1:d9:95:8b:d3:35:cf:56:ec:
         01:46:a7:68:72:fa:87:f8:62:fb:9c:d2:cc:22:89:54:eb:af:
         89:18:42:17:ea:34:b8:57:f8:57:65:ef:cd:3f:3a:76:9d:38:
         9d:87:66:9b:15:ca:bb:89:ef:87:87:0e:f5:c0:90:e1:82:99:
         ef:3c:19:62:93:21:ec:f6:38:32:8e:1d:72:3c:fa:fe:a9:8e:
         b9:35:44:d4:d4:46:66:e5:77:b9:f8:79:75:d6:f9:41:8c:97:
         4d:33:0f:66:57:b0:f9:e8:55:ef:87:45:32:b8:f4:cc:f6:95:
         5f:52:f7:49:d4:01:55:98:00:2a:62:d9:a7:89:57:84:ee:9c:
         dc:45:5f:ba:bb:e3:f4:00:61:b2:1f:16:2b:0b:44:5a:3f:15:
         75:b9:e5:d6:2b:95:e1:4c:68:47:ec:f6:44:ce:b6:ec:66:12:
         c8:d2:1b:6a:90:1a:c0:96:ea:2c:f3:27:7d:a5:5b:7c:ff:86:
         71:6a:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:59 2026 by rpki-client