Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File:                     Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier:          gwDa/Der+Mt4q7031EZR3AZ8F+fhnkCmf4KbCkq4d4Q=
Subject key identifier:   D3:C1:75:98:EA:F1:C6:FA:C7:8D:DB:58:17:C4:44:0D:48:A9:0E:BA
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer:       /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial:       019D9962F2CF827D6F5E89184EA043493263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number:          116F
Signing time:             Fri 17 Apr 2026 03:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:31 +0000
Files and hashes:         1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: z3b2lkAR9lblkQdR7ezn8UnG0pthuiVE5r/kzmLeJ6s=)
                          2: d1oY-rePzrEhSHN4TgD8ubZR5-k.roa (hash: jS9ynsZdE/EEvcdn5+RIkD8jADjtptlW575sCzvdXBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:f2:cf:82:7d:6f:5e:89:18:4e:a0:43:49:32:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
        Validity
            Not Before: Apr 17 03:01:31 2026 GMT
            Not After : Apr 18 03:01:31 2026 GMT
        Subject: CN=d3c17598eaf1c6fac78ddb5817c4440d48a90eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:17:e4:02:83:c7:6b:49:d1:b2:7b:e9:f3:
                    ab:df:bb:9e:67:61:e3:bc:45:c6:a8:9d:7d:10:ef:
                    e6:4c:51:21:dc:70:6a:55:50:17:f6:48:28:0f:f4:
                    37:88:83:83:6c:ca:11:9c:2e:b7:61:77:06:35:e2:
                    23:fd:9e:f0:41:32:f7:2b:8f:9c:b8:8a:1f:e9:e9:
                    40:90:7e:01:13:69:dc:03:3c:19:25:ac:53:f9:d1:
                    f5:29:df:28:fb:2f:79:57:0a:1c:0e:a0:fc:98:0b:
                    73:31:50:59:12:fa:73:4b:8e:73:af:29:0c:34:fa:
                    80:2d:f7:35:64:ed:57:3c:cf:8e:e5:7c:30:1e:a8:
                    f9:b4:b2:77:25:a9:71:71:2a:81:52:d3:f1:80:82:
                    5c:3e:76:e2:34:d3:a8:36:e6:7f:e3:d1:a1:f6:2a:
                    48:6e:58:5a:5e:07:7c:e8:3e:fe:3d:fa:34:03:31:
                    35:84:ee:b6:b3:13:82:3a:8d:9c:d3:2c:f7:5d:82:
                    74:4a:79:66:17:7c:0d:fe:7b:23:15:2e:f3:81:db:
                    22:0b:d9:ae:d1:ca:6d:ee:3b:0b:ba:b0:8f:ad:d5:
                    49:e2:88:f9:75:8c:89:26:55:be:3f:4d:db:1d:15:
                    64:c1:aa:1b:66:c7:14:58:72:7d:bc:d1:41:a3:64:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:75:98:EA:F1:C6:FA:C7:8D:DB:58:17:C4:44:0D:48:A9:0E:BA
            X509v3 Authority Key Identifier:
                keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5d:76:88:ac:f8:d4:ad:ca:38:ff:b9:7b:5c:a8:69:ca:29:
         08:41:57:fa:de:fb:27:09:24:3e:e9:8a:2d:be:0a:b2:1a:75:
         54:71:86:5d:d9:25:c3:75:08:1f:ba:ac:e0:4d:e2:ee:2b:a5:
         e2:15:90:33:06:bd:f2:fa:6d:21:e8:ab:74:49:9e:02:96:83:
         8e:99:b0:d5:0d:d1:27:f5:1f:4b:74:de:22:37:de:c5:e7:5d:
         fc:7b:1e:fd:27:7a:28:dc:8c:0f:34:bf:6d:99:65:8a:25:c4:
         dc:7e:62:bf:51:86:54:79:7c:fa:3e:78:d4:ab:2c:a6:02:1e:
         f2:38:2b:9a:3f:8b:33:0b:d8:52:62:6b:60:f2:c0:46:cb:cf:
         0a:ad:72:f6:8f:50:30:76:6b:0d:dd:40:a2:c0:06:d2:a9:45:
         84:1c:c4:74:69:05:7f:e1:31:81:8e:65:7c:ab:98:90:ea:13:
         e6:f4:46:c2:2b:26:2f:d7:24:be:e4:49:ba:35:66:41:8d:6b:
         5e:50:c2:72:77:6b:04:81:38:cf:54:14:7e:17:02:93:1e:e5:
         58:2f:81:bf:06:25:3c:29:37:ce:b0:d1:81:e9:12:6f:cc:f8:
         9a:86:c1:15:c6:8b:98:ac:e1:ae:5e:d8:d2:f2:7c:ce:72:0a:
         35:79:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:19 2026 by rpki-client