Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          f6wgaWp4lhWs/1JjaPzQgSYAeGrq7phZ+1+zQsiH6XE=
Subject key identifier:   01:EB:AE:CF:91:85:DF:70:FC:04:FF:6E:97:F5:C1:8D:95:CC:EA:A3
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019D9A3E8E2019054A27045010F322A24EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 07:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:23 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: sK7FW6VccGK7wq75CSrcDfvFuwFZAcrL2+4g5m6S+xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:8e:20:19:05:4a:27:04:50:10:f3:22:a2:4e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Apr 17 07:01:23 2026 GMT
            Not After : Apr 18 07:01:23 2026 GMT
        Subject: CN=01ebaecf9185df70fc04ff6e97f5c18d95cceaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:46:4d:d6:ed:75:e5:56:b3:32:a4:df:18:
                    88:c8:0c:c6:fa:28:b5:bd:29:16:3f:27:13:85:d3:
                    6e:29:2e:4d:19:f2:cd:cf:12:4a:13:24:1a:56:5e:
                    19:b1:c4:d8:13:67:f2:6c:1a:58:a0:41:93:90:dd:
                    4c:8e:b5:12:d2:fd:bd:90:94:ac:6d:68:3e:37:77:
                    81:d6:a3:45:8d:bf:be:e8:60:70:e8:40:ec:da:86:
                    03:b2:1e:0e:4d:ec:8c:d3:70:d6:f7:af:91:7b:72:
                    2a:c0:0a:a7:c5:9c:3e:a0:a2:c8:a9:cd:a4:e4:11:
                    70:15:79:13:16:c9:91:61:ec:3b:1e:4c:0d:dc:9a:
                    26:fb:58:e5:bb:5e:63:8e:58:75:be:85:63:b0:9e:
                    ad:80:3f:1e:30:99:11:a4:73:4e:88:69:d9:c4:97:
                    54:9f:34:b2:3e:25:02:c4:2c:dd:c6:fe:c1:8e:68:
                    70:da:49:fc:32:03:6c:9f:ff:a3:81:d9:90:fb:74:
                    02:f0:3d:78:70:b1:06:ec:84:f3:6d:57:66:3b:18:
                    01:b7:4b:b1:1b:ab:e3:a5:99:ed:1b:f0:29:18:c2:
                    e3:8f:11:34:7a:ba:35:ec:ea:4a:24:a9:38:72:e6:
                    0d:04:b7:3e:2f:df:f2:ca:f3:2b:da:b8:7f:66:88:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:AE:CF:91:85:DF:70:FC:04:FF:6E:97:F5:C1:8D:95:CC:EA:A3
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:08:6c:48:f7:d3:92:a0:e7:22:24:df:c4:0b:29:ac:d9:
         c5:fb:9d:e4:32:98:15:d1:4d:bc:6e:47:63:8d:bd:1c:97:45:
         6d:58:ff:22:5c:19:7b:82:99:30:f6:96:0b:11:96:81:c4:2b:
         08:7d:0d:af:04:f2:2d:6b:33:6f:2d:3d:5a:a1:4c:f8:60:09:
         fa:87:e6:d5:71:f7:77:df:53:d2:7c:b8:22:b3:d7:06:0d:96:
         90:22:76:a4:c2:c7:9e:c9:05:13:24:1d:1a:8e:af:e3:b3:61:
         f2:d9:83:bb:21:09:f2:95:29:cc:50:65:a8:0a:39:17:5d:20:
         44:d5:0b:17:1c:2a:7f:6d:9f:94:a9:d6:8e:dc:87:73:90:1d:
         38:af:12:84:1d:a0:05:3f:1d:7d:87:55:1c:db:51:f8:24:6e:
         23:64:e0:2d:e0:cc:6a:b0:9c:8a:e4:de:cd:d1:fd:0a:ec:f2:
         17:eb:bd:0b:c0:46:e0:1a:4a:b0:a2:40:ce:92:a1:38:19:1f:
         52:92:50:5d:fe:fd:f4:ae:32:4f:cb:d5:bb:88:25:e2:04:47:
         ce:b5:f2:e6:1d:0b:0b:5c:44:5a:09:e3:dc:e9:8d:22:7b:0c:
         54:6a:ac:81:9b:05:e5:8f:ca:9a:97:20:e3:97:79:b4:e6:e5:
         a0:f8:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:36 2026 by rpki-client