Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          llu6rB7RUmcRrYBcAViKPCb7j2v93Gq8z2h6X71oC2M=
Subject key identifier:   C4:7D:64:02:15:24:2B:FD:08:DA:10:87:F7:87:74:79:7E:4F:FF:59
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019D9C632262B0AABB830916C9BD1232A848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0E99
Signing time:             Fri 17 Apr 2026 17:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:35 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: t3d9Q1o7Cv4ue9E1KdqH0ug6LnqkrtfZ3kiiAHXbKmA=)
                          2: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          3: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          4: lEbAfouHoMhTrs36FwPLKCH2I7w.roa (hash: ccDJaCoETUQjCTdcoNlWxXPIM6P7uFIKkfsOSoduMMA=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:22:62:b0:aa:bb:83:09:16:c9:bd:12:32:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Apr 17 17:00:35 2026 GMT
            Not After : Apr 18 17:00:35 2026 GMT
        Subject: CN=c47d640215242bfd08da1087f78774797e4fff59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:54:0f:71:c2:ac:dc:4c:04:b4:62:57:f0:
                    dd:30:2d:b7:5b:4d:4a:db:85:f9:dc:3c:e4:4b:39:
                    89:1b:dc:89:24:62:8f:51:24:a7:14:24:9e:9d:87:
                    65:10:df:5d:0a:5a:b3:ee:3a:44:28:07:46:b3:d7:
                    7d:96:2c:5c:07:36:11:bc:a7:44:a5:06:47:d5:56:
                    d6:1c:9a:7a:a6:89:d3:c1:85:20:90:c1:26:c3:3b:
                    15:66:ff:d3:c3:33:24:02:3d:72:33:1e:68:fe:dc:
                    15:60:9a:5f:a8:b3:d3:72:3d:43:da:87:72:19:b5:
                    e8:40:80:6a:a9:e3:04:c4:64:1b:19:89:ea:18:80:
                    5e:30:5a:78:b3:f6:64:03:6d:ab:c1:ee:3b:59:32:
                    82:bf:3b:dd:0b:a6:71:6e:18:17:5a:a3:ec:c2:3a:
                    36:44:2a:82:7b:d4:b8:05:6c:19:7b:54:6d:f3:86:
                    91:7b:90:67:a5:28:59:56:e8:4c:11:ed:73:c8:ea:
                    48:b5:56:eb:fd:e5:ae:02:f8:49:bd:cc:64:19:43:
                    d2:12:9d:ad:35:4f:18:b3:c3:59:00:c9:87:05:09:
                    e7:d8:71:97:9f:32:87:c4:96:ac:05:40:58:8e:3a:
                    a1:a3:c4:5c:a7:33:cb:aa:bd:e5:8f:68:35:34:b1:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:64:02:15:24:2B:FD:08:DA:10:87:F7:87:74:79:7E:4F:FF:59
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:ff:18:95:fd:0f:d5:35:48:a3:75:99:84:e0:be:f7:57:
         53:02:08:ae:e7:ea:19:d8:d8:e8:da:20:67:dc:f5:22:e9:ac:
         6b:a6:b2:66:aa:e0:08:33:2b:d5:8f:f9:51:86:49:bf:7e:75:
         dc:2b:33:9c:30:43:08:1a:4c:e4:f6:71:19:d7:0a:29:a4:51:
         8d:62:4e:26:f8:9d:6f:57:f5:8b:0f:91:37:69:2e:0b:52:9b:
         fb:7c:72:e2:dd:3c:3d:ba:95:4e:89:a9:dd:1c:09:ac:1f:3d:
         39:23:2f:1d:d5:a0:d0:33:75:6c:02:cb:d5:c4:79:a3:1a:32:
         e7:8a:35:20:c0:06:22:1d:74:fb:58:60:8e:27:34:05:ec:dc:
         13:18:34:30:cc:97:76:f1:8c:9a:a3:25:54:0d:30:60:c7:bd:
         c8:d0:03:ee:bf:16:7a:91:78:d6:20:48:9a:37:13:4d:8c:7e:
         40:81:4c:5b:28:82:77:5b:42:1d:42:17:ed:55:95:f4:35:fd:
         47:0d:19:35:e5:b8:79:fd:57:78:b1:39:7a:ab:77:31:62:b8:
         34:63:3d:5e:92:92:eb:ba:10:d3:95:5c:51:5d:95:9e:38:8c:
         bc:b5:27:4f:80:9e:51:7d:47:88:ed:c0:50:30:e6:ed:40:3d:
         54:10:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:34 2026 by rpki-client