Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
File:                     AdbvBHn5_fqCZlff2ODvNmjKGr8.mft (raw, json)
Hash identifier:          sYJkmjkTqyVAklvkA26Z/wxqpqI5HclpBRnC+s8obXQ=
Subject key identifier:   DA:D5:86:91:8F:28:36:D4:29:76:79:E0:3F:3B:C0:DE:D4:DA:19:30
Authority key identifier: 01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
Certificate issuer:       /CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
Certificate serial:       019D3564A0E257A32D0F25B1E9A7227DDDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
Manifest number:          1823
Signing time:             Sat 28 Mar 2026 17:01:20 +0000
Manifest this update:     Sat 28 Mar 2026 17:01:20 +0000
Manifest next update:     Sun 29 Mar 2026 17:01:20 +0000
Files and hashes:         1: AdbvBHn5_fqCZlff2ODvNmjKGr8.crl (hash: RsZxDfEtrR/k+FUQpvlwQAA1qtyMxIqSLpJAMZEJhzw=)
                          2: UnQYQckhZ4GJ4hvz2V3obUCnWQM.roa (hash: 6r4OETawl2/CmtMrvXzxODkSxev0jxwRRiZOUVdB0TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 17:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:64:a0:e2:57:a3:2d:0f:25:b1:e9:a7:22:7d:dd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
        Validity
            Not Before: Mar 28 17:01:20 2026 GMT
            Not After : Mar 29 17:01:20 2026 GMT
        Subject: CN=dad586918f2836d4297679e03f3bc0ded4da1930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:7d:20:40:50:32:97:10:95:91:0c:df:99:
                    7b:d7:be:29:d6:34:05:b9:cb:e4:bb:ea:e7:d5:5a:
                    44:e6:0f:d6:49:09:57:08:a7:ee:16:41:9c:c1:e7:
                    fb:f3:1c:2d:d6:60:d3:e6:d3:9d:31:e3:da:a4:23:
                    4d:f3:e5:30:87:cc:f7:ff:45:7d:3c:57:e7:da:a0:
                    fb:d1:d8:55:0a:28:f8:3c:89:d7:fe:2d:7a:d4:a5:
                    06:ef:4a:12:63:a9:3d:d5:19:01:18:98:50:f7:49:
                    c7:79:cc:d2:1f:5d:e6:d8:bf:26:46:34:e6:61:20:
                    3b:b1:47:be:50:5f:60:5c:02:0b:f0:1d:03:ee:da:
                    b2:d6:28:b1:48:16:b7:92:9c:0c:1b:39:f5:d0:b0:
                    9b:8d:66:a2:4a:ce:4e:43:26:71:e3:06:13:0b:1d:
                    da:93:36:53:ae:bc:fc:94:4d:ba:dd:d2:71:2a:ad:
                    a1:1b:1c:3e:3c:7a:38:ff:60:c7:29:53:e2:a1:ce:
                    d0:e2:c0:34:35:41:15:8b:aa:0e:d5:b5:f1:38:6f:
                    a7:73:d6:79:f8:6a:67:cf:cb:3c:67:40:2e:68:29:
                    be:74:00:69:e2:0f:b3:88:73:0a:3a:bf:d2:82:5d:
                    6e:6b:1c:94:4b:d3:54:61:35:d5:87:12:1c:de:d6:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D5:86:91:8F:28:36:D4:29:76:79:E0:3F:3B:C0:DE:D4:DA:19:30
            X509v3 Authority Key Identifier:
                keyid:01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:61:86:0c:92:79:32:ad:c7:2b:31:5b:76:de:a9:59:23:
         3e:6b:03:43:6e:46:56:74:6a:e0:d6:b1:e2:e0:42:89:7a:76:
         62:27:40:c0:8f:31:6a:78:3b:ef:30:de:c0:48:1f:2a:4e:8b:
         3b:79:28:13:1e:41:e8:b9:e0:b9:e1:01:8d:0e:ae:b5:ee:ac:
         a2:06:f0:9e:7f:f6:97:63:db:86:51:f6:12:c6:a0:57:a3:48:
         73:aa:79:c7:b4:6a:e9:aa:05:77:d9:d8:9c:1d:e2:51:1a:54:
         b1:ba:26:f0:4c:6f:40:01:fb:d4:c8:ac:b2:97:fc:cf:05:ef:
         2c:c6:a7:3e:a3:d2:11:1a:c5:9d:4a:e0:92:92:14:c2:09:e4:
         58:17:0f:e7:cc:88:d4:c2:1e:98:c4:8a:7c:53:06:2a:3c:5d:
         4f:7b:61:ba:db:2b:08:ae:6e:1f:41:74:ef:2a:18:ab:b5:6e:
         a9:50:78:df:eb:48:1c:0d:2a:08:c3:3a:2c:42:2e:b2:77:10:
         6a:2b:ab:5f:b9:de:79:2d:73:f9:12:ca:d2:f3:aa:d4:0f:6f:
         84:11:0a:94:c7:96:b0:81:a1:f8:8d:36:de:19:0b:96:81:39:
         86:47:a7:6f:8e:10:95:ae:f7:d0:f7:00:36:b8:4c:e5:c0:db:
         a1:c2:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:03 2026 by rpki-client