Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File:                     RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier:          BdqVLw+5sV7ZP5rnEmnXYY+NU0iMFWH0kkZwUcwxyMg=
Subject key identifier:   E4:66:97:2F:FA:3D:E2:0A:94:04:E4:54:AE:D3:5C:1A:4D:32:55:E9
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer:       /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial:       019D9818C1B6CA30591A838CCF95CCDC6A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number:          094C
Signing time:             Thu 16 Apr 2026 21:00:52 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:52 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:52 +0000
Files and hashes:         1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: Kg8YbXK5WOEm0q45rBvEYlpaTtlBH+eld8dw/S6hOcc=)
                          2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:c1:b6:ca:30:59:1a:83:8c:cf:95:cc:dc:6a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
        Validity
            Not Before: Apr 16 21:00:52 2026 GMT
            Not After : Apr 17 21:00:52 2026 GMT
        Subject: CN=e466972ffa3de20a9404e454aed35c1a4d3255e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:5a:f0:3c:84:f5:72:b8:35:6e:35:60:fe:
                    c8:29:3b:05:01:95:07:7b:48:1c:db:a2:b2:d5:57:
                    ef:d5:7f:94:da:29:ad:cb:d6:4e:d4:31:22:c9:56:
                    b9:b3:e8:13:da:78:ba:cf:6b:62:ea:b2:21:56:75:
                    c5:c4:ab:5c:a0:f4:25:fc:8e:82:53:e1:ea:7b:cb:
                    79:8b:c1:fc:bd:14:d8:c2:5d:bc:2d:aa:af:4c:2f:
                    cb:39:b1:f2:40:ae:fc:d8:66:f7:ad:2c:e3:42:a9:
                    18:bd:a1:de:b8:ca:7b:c6:c4:13:00:13:66:0a:92:
                    5b:96:5a:0d:da:fb:e1:33:07:a4:d2:6a:ca:94:ff:
                    b3:69:d5:3f:a0:73:3c:54:1a:23:ee:10:e6:46:d4:
                    bc:ba:d6:9d:0a:56:b1:f1:4e:9e:35:10:38:53:3d:
                    cf:35:a7:26:e8:60:b2:ce:4e:15:c1:03:5d:7a:03:
                    91:a8:f2:3e:84:a7:a6:fa:87:eb:03:9a:de:2a:3e:
                    61:4e:25:05:e2:47:e1:59:87:32:fe:78:83:ce:04:
                    71:95:40:a7:1b:61:e7:93:0e:18:39:e4:9d:36:89:
                    39:d0:28:ac:bf:90:df:9c:de:a5:e0:d5:d0:1a:b9:
                    83:f0:d8:bb:a6:d7:48:9a:30:a2:d2:cd:d7:3d:25:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:97:2F:FA:3D:E2:0A:94:04:E4:54:AE:D3:5C:1A:4D:32:55:E9
            X509v3 Authority Key Identifier:
                keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:99:02:89:3e:d3:8b:8e:46:11:90:7a:78:8c:64:b1:86:
         3a:94:63:b5:ef:40:62:ba:dc:51:d3:07:3a:3d:ce:11:d2:96:
         88:3d:fe:d6:cf:c7:59:76:23:39:e3:82:64:4b:30:e3:55:8c:
         5b:f8:1d:ca:7a:26:ee:40:d2:b5:7b:f7:4a:8f:92:99:66:c2:
         20:3c:1f:cb:4a:89:c2:e0:c3:0a:f7:78:5d:8a:4f:b1:60:66:
         df:2d:5c:18:03:bb:6d:f0:9e:26:e1:2b:96:c1:aa:a6:97:32:
         6b:32:80:39:c1:3e:e0:54:78:ea:2d:58:7c:1a:16:13:10:52:
         cb:8f:8a:e0:65:dc:11:33:ae:0b:79:eb:1d:55:00:14:47:1b:
         24:ee:67:cd:05:87:a0:9b:ac:79:99:5d:61:7e:09:c7:f9:11:
         fe:e8:07:d7:37:f7:31:e5:71:80:83:95:15:b6:55:8c:45:49:
         fa:b1:ee:e1:6e:7c:78:95:ac:c9:e1:c4:6c:44:57:7e:c6:6b:
         63:cb:98:55:8b:34:64:bc:ab:16:f0:2b:78:c9:8b:ec:be:7d:
         82:2f:a7:42:1f:34:8a:ea:d2:e9:12:b0:a1:43:bb:07:55:7d:
         89:00:cb:b1:5c:6c:85:c9:0b:b1:fb:f4:fb:3c:69:a4:fd:ca:
         0e:ad:74:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGMG2yjBZGoOMz5XM3GoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx
NTAyZTIwHhcNMjYwNDE2MjEwMDUyWhcNMjYwNDE3MjEwMDUyWjAzMTEwLwYDVQQD
EyhlNDY2OTcyZmZhM2RlMjBhOTQwNGU0NTRhZWQzNWMxYTRkMzI1NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveZa8DyE9XK4NW41YP7IKTsFAZUH
e0gc26Ky1Vfv1X+U2imty9ZO1DEiyVa5s+gT2ni6z2ti6rIhVnXFxKtcoPQl/I6C
U+Hqe8t5i8H8vRTYwl28LaqvTC/LObHyQK782Gb3rSzjQqkYvaHeuMp7xsQTABNm
CpJblloN2vvhMwek0mrKlP+zadU/oHM8VBoj7hDmRtS8utadClax8U6eNRA4Uz3P
Nacm6GCyzk4VwQNdegORqPI+hKem+ofrA5reKj5hTiUF4kfhWYcy/niDzgRxlUCn
G2Hnkw4YOeSdNok50Cisv5DfnN6l4NXQGrmD8Ni7ptdImjCi0s3XPSUmiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORmly/6PeIKlATkVK7TXBpNMlXpMB8GA1UdIwQY
MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt
YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1
LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOqZAok+
04uORhGQeniMZLGGOpRjte9AYrrcUdMHOj3OEdKWiD3+1s/HWXYjOeOCZEsw41WM
W/gdynom7kDStXv3So+SmWbCIDwfy0qJwuDDCvd4XYpPsWBm3y1cGAO7bfCeJuEr
lsGqppcyazKAOcE+4FR46i1YfBoWExBSy4+K4GXcETOuC3nrHVUAFEcbJO5nzQWH
oJuseZldYX4Jx/kR/ugH1zf3MeVxgIOVFbZVjEVJ+rHu4W58eJWsyeHEbERXfsZr
Y8uYVYs0ZLyrFvAreMmL7L59gi+nQh80iurS6RKwoUO7B1V9iQDLsVxshckLsfv0
+zxppP3KDq10Aw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:07 2026 by rpki-client