Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File:                     N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier:          eUwoZZszIWOPXwBQC646u7YkZYoSaUx9p3n8UnAm9rw=
Subject key identifier:   C5:29:ED:17:9E:0F:B2:8D:07:30:34:65:32:DC:71:80:E6:59:D0:06
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer:       /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial:       019DA3AEE15CC1F7755136316445B1BB95EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number:          0F7E
Signing time:             Sun 19 Apr 2026 03:00:40 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:40 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:40 +0000
Files and hashes:         1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
                          2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: dmmaBSZaZWGkq5hDjNmIX7EwW5vv/JSrN/geWArM4To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:e1:5c:c1:f7:75:51:36:31:64:45:b1:bb:95:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
        Validity
            Not Before: Apr 19 03:00:40 2026 GMT
            Not After : Apr 20 03:00:40 2026 GMT
        Subject: CN=c529ed179e0fb28d0730346532dc7180e659d006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:d5:53:63:38:03:07:dd:05:e5:70:bc:da:
                    f7:8e:3c:66:19:65:ed:7f:79:72:09:bd:61:c8:27:
                    c4:a7:69:63:42:3d:18:ab:9f:9e:df:86:6f:65:06:
                    76:99:75:6a:ff:f5:4a:90:d3:43:2d:26:d7:0f:18:
                    fe:32:69:84:7a:58:90:c1:64:d3:92:18:90:34:69:
                    2e:f6:b0:37:06:d7:03:a6:56:81:78:4f:d3:e7:39:
                    db:01:dd:20:86:e0:51:27:09:a8:17:3f:62:e6:cd:
                    34:a4:4f:a2:e7:c0:a6:0a:9b:b9:13:a4:4d:17:70:
                    57:96:b0:72:61:69:c5:b9:30:83:5e:e3:68:34:37:
                    4a:35:c3:03:ad:69:dc:39:9a:8c:82:14:1a:c5:54:
                    77:02:19:8e:c6:e4:44:be:68:fc:5a:0e:4d:3f:b8:
                    d2:99:22:7f:fe:21:70:63:8c:00:d3:66:4a:f5:b6:
                    b8:53:96:d9:99:ac:f9:5c:42:81:46:df:2b:6e:ae:
                    d7:0f:36:b5:1f:b2:e6:b2:67:d3:a0:a5:a2:e0:5d:
                    30:c2:9f:c2:23:fa:ee:63:cf:b8:e6:b5:2d:ac:88:
                    e3:4c:f8:f2:16:2b:d4:59:78:80:20:a7:87:f8:4e:
                    03:d7:ee:79:eb:f3:86:c7:e5:bc:eb:3b:a4:7d:da:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:ED:17:9E:0F:B2:8D:07:30:34:65:32:DC:71:80:E6:59:D0:06
            X509v3 Authority Key Identifier:
                keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:b1:9b:18:9e:3d:b1:e0:c3:f1:eb:68:70:3f:7a:ab:59:
         d9:f2:b3:59:92:b2:93:09:d3:8c:9a:d7:f8:ab:46:54:64:27:
         e9:1b:b4:bc:44:1a:d9:67:06:7c:a8:0a:98:ec:60:27:e6:72:
         09:7e:66:a6:f3:71:64:44:02:63:83:15:3d:ba:7b:0f:1d:a2:
         a0:c3:bf:e7:e2:f9:f3:fb:94:7f:fe:a9:bc:25:f0:b9:42:3a:
         77:29:8a:6d:e1:e2:69:b0:62:eb:55:69:50:4e:33:19:b1:73:
         c7:fb:ca:49:e5:2c:79:48:88:b4:3f:0f:69:05:c9:94:fe:27:
         da:75:56:37:dd:cf:29:3c:cf:fc:ee:6e:4e:0f:57:d4:ed:5e:
         36:a6:3c:79:83:0b:b4:70:31:8b:68:a4:69:1f:40:63:5f:36:
         88:b0:b9:ca:dc:0e:ad:fb:7e:3a:69:6e:d5:a5:c9:48:f3:82:
         35:fa:68:04:64:11:7c:9e:19:b0:21:c0:97:a5:ff:ac:3b:eb:
         d4:0c:aa:ab:35:63:bb:a5:10:ae:24:75:39:97:27:d7:c3:15:
         58:0e:b3:dc:7f:13:4c:48:8b:40:84:ba:53:47:34:c5:f3:dd:
         85:67:4c:0d:99:e0:a3:da:72:86:7d:fb:d7:97:7e:7e:56:8e:
         ce:ab:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:46 2026 by rpki-client