Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File:                     2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier:          gFf3jIaYVCnVhL4bqbSTYpkqqE+LMdZFSk57iIVC75s=
Subject key identifier:   25:D3:AD:B3:7C:95:F0:47:96:93:AF:63:37:0B:BC:6A:31:CF:97:9B
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer:       /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial:       019D992B4CBB20874BB4F5C6AEA186BE4E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number:          15DC
Signing time:             Fri 17 Apr 2026 02:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:44 +0000
Files and hashes:         1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: 0juLjA4CVBQOtReuOveZGRC/HDMTJnKmn0CKKkiFG64=)
                          2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
                          3: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (hash: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=)
                          4: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (hash: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:4c:bb:20:87:4b:b4:f5:c6:ae:a1:86:be:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
        Validity
            Not Before: Apr 17 02:00:44 2026 GMT
            Not After : Apr 18 02:00:44 2026 GMT
        Subject: CN=25d3adb37c95f0479693af63370bbc6a31cf979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:83:c3:02:2f:04:e9:af:ad:ea:91:5a:fc:
                    92:4b:7d:9b:db:fd:31:20:84:e9:82:9e:42:3a:c8:
                    01:a4:dd:4f:ed:58:80:95:3a:fd:fa:eb:02:32:70:
                    37:69:64:61:ea:0d:9e:b0:85:54:c7:16:3a:0a:4a:
                    ca:f7:1c:3b:46:62:98:4e:29:94:1e:b2:19:03:4c:
                    13:db:07:ca:05:22:49:c1:42:56:27:0e:64:97:65:
                    5c:39:33:30:3a:81:ab:f9:79:a2:fc:cc:4a:52:e5:
                    dc:3d:66:69:45:e1:1d:9a:44:53:25:63:6b:e6:48:
                    df:e2:b5:05:78:90:fc:e0:15:35:be:1b:aa:db:b6:
                    b1:88:19:d2:c8:42:88:f5:d2:af:55:35:21:30:98:
                    ab:93:1f:72:3c:74:7f:d8:1e:7b:19:a4:2c:88:f3:
                    17:43:9b:10:db:30:38:46:70:62:1d:9a:12:f3:2c:
                    32:cc:a5:d5:fd:c0:11:ec:39:f4:de:60:bd:66:87:
                    6b:cd:b5:6e:08:09:ba:b9:7f:24:d8:43:8b:e7:9d:
                    4d:eb:fa:85:15:62:09:5d:81:7c:28:56:33:37:07:
                    94:69:63:dd:03:60:0e:dc:89:76:94:88:6e:9d:3f:
                    56:7a:46:de:0b:d5:63:e6:a5:d9:c3:59:e0:c2:9c:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:AD:B3:7C:95:F0:47:96:93:AF:63:37:0B:BC:6A:31:CF:97:9B
            X509v3 Authority Key Identifier:
                keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:75:05:10:f9:b3:f7:fd:ac:c8:b0:ab:97:f8:e3:16:32:bc:
         53:93:13:ae:73:68:3e:eb:7d:c5:33:ae:ee:98:94:1b:58:42:
         a0:f5:fa:fb:f1:85:51:a5:15:89:97:43:16:52:c6:fa:57:54:
         d5:f4:25:32:c1:82:a1:fb:50:5a:fe:03:47:d5:78:3d:6d:15:
         a7:28:15:e0:da:f9:48:8c:a6:cb:72:80:08:6e:eb:d2:a2:00:
         6c:13:69:9f:47:c3:c3:b7:e9:d3:e8:b5:0c:44:9e:0e:88:10:
         c9:ba:5a:74:dd:2b:6a:09:de:43:00:7c:43:6b:07:ab:ad:24:
         14:1f:7a:f0:14:82:e1:c2:0a:83:ed:3c:77:c7:8a:2c:cc:8e:
         74:ce:d9:93:91:bf:84:ee:fd:cc:26:41:10:a6:b8:2e:6e:b1:
         7c:d3:b8:ec:3a:58:91:34:8c:3a:6e:44:57:d4:b4:ea:3b:b7:
         30:ce:fb:5a:84:00:28:af:9d:97:91:c5:dc:21:55:a4:86:d0:
         a0:27:21:d6:72:d4:e6:0c:89:48:28:97:74:44:2c:96:5e:55:
         af:56:a5:75:76:40:9d:24:26:fa:fa:af:e2:a8:03:ec:90:fd:
         4e:c8:92:35:fc:6f:6c:d7:09:1f:6a:78:74:70:57:ae:b0:61:
         ca:ee:a7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0y7IIdLtPXGrqGGvk4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz
Mzc5NDMwHhcNMjYwNDE3MDIwMDQ0WhcNMjYwNDE4MDIwMDQ0WjAzMTEwLwYDVQQD
EygyNWQzYWRiMzdjOTVmMDQ3OTY5M2FmNjMzNzBiYmM2YTMxY2Y5NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnmDwwIvBOmvreqRWvySS32b2/0x
IITpgp5COsgBpN1P7ViAlTr9+usCMnA3aWRh6g2esIVUxxY6CkrK9xw7RmKYTimU
HrIZA0wT2wfKBSJJwUJWJw5kl2VcOTMwOoGr+Xmi/MxKUuXcPWZpReEdmkRTJWNr
5kjf4rUFeJD84BU1vhuq27axiBnSyEKI9dKvVTUhMJirkx9yPHR/2B57GaQsiPMX
Q5sQ2zA4RnBiHZoS8ywyzKXV/cAR7Dn03mC9ZodrzbVuCAm6uX8k2EOL551N6/qF
FWIJXYF8KFYzNweUaWPdA2AO3Il2lIhunT9WekbeC9Vj5qXZw1ngwpx2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXTrbN8lfBHlpOvYzcLvGoxz5ebMB8GA1UdIwQY
MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt
NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5
LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnUFEPmz
9/2syLCrl/jjFjK8U5MTrnNoPut9xTOu7piUG1hCoPX6+/GFUaUViZdDFlLG+ldU
1fQlMsGCoftQWv4DR9V4PW0VpygV4Nr5SIymy3KACG7r0qIAbBNpn0fDw7fp0+i1
DESeDogQybpadN0ragneQwB8Q2sHq60kFB968BSC4cIKg+08d8eKLMyOdM7Zk5G/
hO79zCZBEKa4Lm6xfNO47DpYkTSMOm5EV9S06ju3MM77WoQAKK+dl5HF3CFVpIbQ
oCch1nLU5gyJSCiXdEQsll5Vr1aldXZAnSQm+vqv4qgD7JD9TsiSNfxvbNcJH2p4
dHBXrrBhyu6nMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:18 2026 by rpki-client