Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          MBTE3P+4gZt+AjZ0YoS3Ss+CZvCJUPwQbWmu57WeYLM=
Subject key identifier:   6A:B8:C6:13:F0:81:29:84:4F:41:34:49:CA:56:77:3B:D2:E3:89:8B
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       019D992B127989F7655824C6C3F0D69429B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:29 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: evBb41YWJglb1i5Ig+D/X+ObR1c7894uiaMAhxG1NDc=)
                          2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:12:79:89:f7:65:58:24:c6:c3:f0:d6:94:29:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Apr 17 02:00:29 2026 GMT
            Not After : Apr 18 02:00:29 2026 GMT
        Subject: CN=6ab8c613f08129844f413449ca56773bd2e3898b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:1e:3e:aa:57:f7:c4:26:17:3d:f6:63:13:
                    a3:c2:0f:83:76:5b:59:41:a9:b0:e3:91:91:21:89:
                    41:6e:2a:af:6c:02:15:ac:de:7e:d6:0f:b2:fc:a4:
                    4d:a7:75:32:08:8a:6a:77:9d:aa:23:ad:25:f5:7f:
                    3f:85:45:24:52:63:dc:53:ce:94:bd:dc:b7:95:92:
                    2e:1a:f5:f6:44:12:c6:98:90:4b:47:4e:25:a3:c4:
                    c1:04:5b:22:be:6d:62:51:73:e7:a2:bb:82:4f:f3:
                    0c:29:3f:4c:b1:2d:67:6c:8d:f7:37:ab:20:3e:14:
                    45:44:27:81:1e:3a:e3:9f:e8:1a:59:43:54:64:82:
                    1d:ab:92:28:ca:9c:2e:f6:3c:ca:0e:ef:c8:58:5f:
                    8e:59:1f:37:e5:26:bd:d0:0f:7a:f3:01:bb:28:68:
                    e2:6c:21:8a:7c:a7:da:a4:d2:d1:df:f3:8f:62:fd:
                    9e:80:b2:dc:fa:ea:1c:33:dc:ef:71:35:a0:18:56:
                    4f:83:09:e2:d2:e7:8f:32:f1:6b:89:44:fe:23:fc:
                    1a:74:3d:9d:d8:d6:9a:2e:71:ee:28:c8:61:c1:6f:
                    0d:b7:b4:6b:6b:09:bc:65:c2:53:11:24:3c:f5:ea:
                    f8:f5:82:b4:ff:79:59:26:a5:46:51:a3:cb:8f:52:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B8:C6:13:F0:81:29:84:4F:41:34:49:CA:56:77:3B:D2:E3:89:8B
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:48:13:14:0d:ab:c3:f7:26:de:e7:87:02:6e:f1:5c:04:
         27:9c:70:05:8e:f2:e7:23:68:59:ed:cd:aa:ca:bf:95:97:42:
         b0:8f:89:3d:d4:87:45:b4:20:c0:c2:7e:59:f5:03:57:79:53:
         c3:81:c9:d3:1a:00:ec:1f:2b:bf:03:6e:e7:6c:b9:1f:89:8b:
         a6:04:95:7b:a4:2a:09:a9:64:8f:ff:38:eb:76:57:d5:9e:61:
         82:97:09:9d:6a:eb:f6:51:e4:4b:9a:e5:37:07:4d:eb:58:bb:
         dd:9e:11:34:0b:b5:60:f0:a7:0b:ad:43:56:d3:f4:02:56:3d:
         73:96:79:46:1a:d7:30:f5:51:c1:c1:3d:63:ea:ec:75:4b:67:
         e4:42:87:93:77:de:e8:b0:a0:2a:d4:15:0c:4f:81:10:a7:3b:
         3a:dd:4e:5c:db:cc:99:74:31:9f:76:bb:9c:f3:ba:cb:e4:99:
         29:ca:2d:27:b1:e9:53:9f:23:ed:4f:33:b2:d2:2d:13:ba:23:
         7a:2c:b2:11:9c:41:b4:f2:c7:24:e4:15:dc:96:04:2f:78:2c:
         b6:01:17:74:33:d8:05:61:6e:8d:e3:ae:20:26:22:85:e7:14:
         1a:49:32:61:44:0c:30:c4:5b:3c:99:e0:09:03:c8:09:a7:a5:
         3b:8e:b0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:34 2026 by rpki-client