Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File:                     2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier:          YJE/3DlJo6AzQR1jztVOfPqE+Hfuim7MTLkNpmT8SM0=
Subject key identifier:   EA:64:2E:5E:BB:46:5D:7C:80:EF:77:A0:B8:5C:04:C3:B1:77:2F:5B
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer:       /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial:       019DA2D3246181A88938AC96F19F64A9111F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number:          15E1
Signing time:             Sat 18 Apr 2026 23:00:39 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:39 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:39 +0000
Files and hashes:         1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: Rb+i6LAJPxlCjmZfpaPpTpG36lO6dFjadcD+l0NMlLk=)
                          2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
                          3: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (hash: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=)
                          4: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (hash: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:24:61:81:a8:89:38:ac:96:f1:9f:64:a9:11:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
        Validity
            Not Before: Apr 18 23:00:39 2026 GMT
            Not After : Apr 19 23:00:39 2026 GMT
        Subject: CN=ea642e5ebb465d7c80ef77a0b85c04c3b1772f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:3b:96:da:2a:72:32:4a:76:ab:ab:19:a6:
                    8d:47:f5:5d:29:d0:b9:26:45:d3:c0:d3:7e:93:3c:
                    f2:ba:69:68:9a:6b:9a:00:63:25:3f:c1:07:82:c1:
                    d3:d4:f7:dc:db:10:17:22:b9:85:9f:1d:d3:b3:6f:
                    f5:1b:94:c9:e2:10:7a:e2:00:6e:ca:06:e9:1c:7e:
                    34:74:06:69:0f:f1:00:71:67:f9:ad:a3:54:2d:bd:
                    b1:15:11:a8:b7:7e:fc:fa:44:86:23:27:19:c0:cb:
                    99:dc:10:57:70:5e:d4:bc:8b:9d:8f:c3:c7:16:46:
                    39:e4:19:2e:53:a3:6c:61:a5:92:55:c2:2c:ef:e9:
                    70:b6:fc:be:5b:96:6a:9b:b1:81:54:b8:4f:53:4b:
                    48:8e:e6:9e:de:87:62:7f:96:38:42:7d:94:ba:4e:
                    54:ab:14:f5:66:dd:11:69:bd:32:95:f2:a1:3c:be:
                    c3:ef:f1:14:e5:1c:8a:cb:87:9b:d7:fa:0b:f7:81:
                    58:8b:ae:6c:35:f0:e8:91:90:02:e9:41:0c:56:13:
                    b5:23:8f:e9:4f:97:18:40:bc:fd:eb:a8:48:c9:cf:
                    bc:51:44:a9:ec:41:50:bf:63:0b:34:67:7b:b1:d2:
                    93:6f:ff:38:80:66:05:e1:7c:f4:56:6f:68:ce:69:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:2E:5E:BB:46:5D:7C:80:EF:77:A0:B8:5C:04:C3:B1:77:2F:5B
            X509v3 Authority Key Identifier:
                keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:07:16:a8:9d:f0:0e:2d:74:72:16:a2:28:10:4a:2b:dc:67:
         1e:94:38:4d:2b:49:53:d8:63:a7:d5:c3:be:14:e6:3e:af:e7:
         f0:5f:01:23:eb:47:4e:42:50:3d:f8:5d:e0:2d:15:10:4a:18:
         d6:8d:8d:91:78:f5:8c:7c:9d:22:5d:77:ee:11:5f:06:82:ea:
         c7:6e:01:8a:7d:13:72:c0:17:78:47:3e:cc:2a:ce:f4:d0:0f:
         45:c8:d2:09:35:01:17:5d:36:c6:fd:cb:a4:31:d5:08:5a:c0:
         d5:fb:8f:b6:e8:7c:7f:07:c6:54:79:ea:db:8e:90:5e:9e:58:
         a0:a6:c6:da:c6:05:ce:27:a9:2c:6a:43:55:44:4c:e4:56:3d:
         6c:a0:0c:0c:13:0d:15:73:15:cc:47:7a:04:4d:c2:6e:81:4c:
         83:da:08:2b:87:76:10:ae:05:5e:39:01:31:78:91:db:31:b2:
         26:72:0b:16:7d:1c:c2:17:5c:a2:eb:24:56:db:55:46:c3:04:
         eb:0c:e5:62:f0:88:4f:c4:8c:22:b1:1f:23:49:4b:12:07:a9:
         d4:6e:31:e4:37:6d:eb:8c:1c:83:bb:05:26:5e:d7:94:c0:57:
         24:36:8c:a8:62:62:a2:b8:26:00:b7:1f:76:08:7a:0e:69:5a:
         45:00:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:36 2026 by rpki-client