Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
File:                     dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json)
Hash identifier:          Trh+tpyoE7zIJqi+AAXzRA8gebAZyl+IrHsJZ0QNj2o=
Subject key identifier:   7E:C8:6E:98:D1:85:8A:96:4E:35:9D:A1:A7:57:DB:38:3A:6D:C6:30
Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
Certificate issuer:       /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Certificate serial:       019D9C62FDB41C3A95EA4D72B01E4599C1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
Manifest number:          013B
Signing time:             Fri 17 Apr 2026 17:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:26 +0000
Files and hashes:         1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: 9BSp6ctM1SuG2cJw8NPgYbriIETwGgnBeq8S3kIulOU=)
                          2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:fd:b4:1c:3a:95:ea:4d:72:b0:1e:45:99:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
        Validity
            Not Before: Apr 17 17:00:26 2026 GMT
            Not After : Apr 18 17:00:26 2026 GMT
        Subject: CN=7ec86e98d1858a964e359da1a757db383a6dc630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:81:ad:19:ea:0a:83:01:76:2c:ee:9f:fe:
                    da:68:d4:3e:e8:a8:43:00:d6:69:2b:40:c1:9f:d3:
                    25:89:a8:95:72:ac:24:eb:69:b6:cd:75:0b:7d:bf:
                    12:6c:c9:12:35:c8:d3:45:98:c7:6d:17:63:b4:69:
                    37:d9:99:60:cb:fa:63:43:b8:d6:95:b1:2e:c5:07:
                    98:6e:25:c9:56:ca:0f:e5:d9:cb:69:78:8f:a7:f0:
                    03:2e:30:02:56:83:30:9d:57:aa:f9:4a:4e:5c:1f:
                    49:e4:74:31:3b:12:fb:9d:6a:53:1b:cc:30:20:2f:
                    b4:32:5a:3c:1e:3c:8a:dd:42:42:92:7d:71:4d:a1:
                    a4:ea:e7:bc:9f:38:30:6e:62:f0:54:f5:28:bf:87:
                    52:71:6e:e7:7d:46:14:b6:83:b3:3e:4d:57:00:13:
                    53:2d:a5:75:e8:84:05:e6:f5:37:96:46:57:8f:89:
                    9a:fa:59:3e:12:f4:77:bb:b6:21:56:db:81:0d:3e:
                    e3:cf:23:8c:8e:c8:4d:49:be:7e:22:a1:8e:b4:3a:
                    3d:b6:78:44:d7:cc:8d:df:58:60:13:92:61:e5:0a:
                    ec:3a:07:18:84:f3:40:03:e5:74:ae:b6:3d:1b:c8:
                    e4:5b:99:8c:12:9a:a5:34:eb:01:7f:ae:8a:2a:09:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C8:6E:98:D1:85:8A:96:4E:35:9D:A1:A7:57:DB:38:3A:6D:C6:30
            X509v3 Authority Key Identifier:
                keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:dd:b4:e7:f8:78:56:c4:3a:6d:41:98:8c:bb:08:ad:22:
         a7:b4:1b:c4:dd:3a:58:a7:26:89:9f:5e:fe:3a:1b:26:af:63:
         26:6d:93:6b:94:8a:73:70:57:6c:f7:45:92:4c:11:9f:12:e6:
         01:48:f8:54:f9:00:9e:7d:d8:53:ae:b2:3f:75:1d:77:c1:a1:
         d4:4e:95:35:d4:6d:ec:13:31:e4:f2:51:9b:91:f4:6b:89:a6:
         33:ea:a3:58:c3:e2:3c:23:27:49:f6:55:30:2a:c5:c4:b7:ea:
         32:ba:74:c3:e0:f1:5d:b0:2f:0a:ff:21:d5:5c:1c:c5:be:a4:
         e2:36:1c:82:9d:60:4c:d0:1e:e7:3c:df:55:6b:32:de:7d:51:
         fb:98:89:09:c7:89:5b:5f:ba:9d:46:8f:ef:01:3a:aa:d5:ab:
         77:75:35:eb:aa:b4:70:d4:81:78:d7:19:76:1d:dd:bd:06:1e:
         54:aa:e0:dd:59:04:cf:5c:ba:e2:b0:07:a3:52:aa:c2:f3:f7:
         d4:71:7f:6e:bd:f9:2d:d8:f8:a4:a8:5f:b2:9b:1b:3a:9f:08:
         23:c9:39:20:2f:64:81:34:2b:09:8d:3f:f7:3e:30:06:a8:d8:
         0d:62:30:0a:dd:2e:9f:b2:f6:f1:b3:0b:e8:2c:b4:0f:7d:0f:
         3a:c4:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:36 2026 by rpki-client