Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          8qEjbh5IabHNLIxxqavvS91YmsVeRFdYe3ch8a7mNdA=
Subject key identifier:   92:A2:52:CB:BC:4B:EE:97:91:49:61:8B:78:94:2D:8D:50:E3:77:A0
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       019D9962A727A0E21DFB34D930DAEF257B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          10CE
Signing time:             Fri 17 Apr 2026 03:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:12 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: dAplY4J7aB5qx6+0dZcq+YnnlaBdKiccrd3vNTkIKvs=)
                          2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:a7:27:a0:e2:1d:fb:34:d9:30:da:ef:25:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Apr 17 03:01:12 2026 GMT
            Not After : Apr 18 03:01:12 2026 GMT
        Subject: CN=92a252cbbc4bee979149618b78942d8d50e377a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:c8:86:b9:59:8b:20:8b:c1:e6:9d:e8:75:
                    3e:bd:e5:40:18:50:ef:b9:97:eb:5f:f6:20:e2:59:
                    26:62:91:bf:74:72:9f:f7:b7:87:7f:99:40:5a:7e:
                    a3:dd:e1:06:b5:dc:0d:4d:51:d2:23:1a:00:2e:6b:
                    c5:e7:24:53:d4:fb:48:8d:7c:6a:af:af:04:61:15:
                    20:da:6a:ca:49:6e:f9:68:18:7b:8c:36:8d:0f:78:
                    1a:d5:59:0c:69:2a:b3:03:7b:c4:51:e3:8b:db:53:
                    c8:9b:0d:54:b8:c3:99:5d:c8:c2:62:d3:fe:5f:80:
                    be:36:31:1e:3a:28:d9:79:c3:ba:b3:2a:a2:79:92:
                    10:cc:97:ff:50:15:c5:1c:31:7e:83:72:f8:57:f2:
                    a9:14:a7:4b:b3:5c:79:1b:3e:24:5b:16:fc:7e:8b:
                    89:0c:5d:4c:b2:f4:42:76:94:c8:49:5d:88:e5:d1:
                    8e:e3:db:bb:73:a0:0a:4c:a9:91:44:85:07:be:8c:
                    c9:d1:99:f6:08:39:fe:e3:a6:19:19:70:f2:14:68:
                    53:d1:61:48:51:bb:2f:35:3c:61:40:b7:73:9d:48:
                    57:0c:08:ea:08:48:d7:d5:0b:3e:f1:f2:a2:69:0e:
                    d7:9f:be:8c:28:6a:99:97:c3:a6:fd:7e:cc:97:2e:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:52:CB:BC:4B:EE:97:91:49:61:8B:78:94:2D:8D:50:E3:77:A0
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:71:fa:d8:1e:a3:e1:57:8c:00:df:f9:88:69:67:b9:bf:
         4b:f2:ac:07:0d:8b:28:a3:b4:d8:e8:d6:89:2d:5d:98:32:ea:
         9d:39:f0:63:ee:e9:46:56:83:4c:ab:86:55:7a:ed:8a:a5:84:
         26:49:77:21:49:44:e1:10:e3:c4:cb:cc:30:9d:21:41:eb:d8:
         d8:31:28:a3:97:41:13:49:a0:51:c7:8f:fc:af:6e:7c:7b:50:
         e8:bb:64:6e:3c:0d:7f:4e:4a:ab:b3:0b:d7:61:81:fd:13:d6:
         61:43:00:e3:44:6b:38:63:c6:1e:d2:7a:c7:6a:92:b4:5e:89:
         8d:e6:9e:c6:03:d8:e6:26:3b:20:64:cd:95:54:4f:83:ff:66:
         ee:3a:50:32:0c:a6:5e:46:a0:74:6d:a6:25:6e:9f:af:d1:f5:
         a5:6c:9c:d5:13:fa:b0:c3:fd:c3:10:47:be:4b:5c:6b:9b:80:
         2f:9b:84:d0:d2:04:3e:ca:12:31:ed:8a:a1:fe:dd:e2:97:a9:
         ba:ee:ab:e7:eb:53:f5:e3:72:40:36:cb:6f:8a:66:3c:43:45:
         14:f4:70:04:7e:32:49:b2:ff:f2:b5:a1:bf:60:1d:89:1c:f0:
         5b:3a:86:51:39:b9:58:6e:5f:29:3e:0b:13:15:df:0c:b1:0b:
         26:b8:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:46 2026 by rpki-client