Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          RVhrQaKCKC7qVo3wKD/WI0BPfRxDlVEyk4rHQ4w66Ro=
Subject key identifier:   18:EA:68:20:B6:52:7A:FB:00:3A:9E:58:21:58:65:0E:DD:21:E9:76
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       019D38D321A66946F50E9AB9AFC37F7C3EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          181F
Signing time:             Sun 29 Mar 2026 09:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:53 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: 2JEpu4qV92MHnrG6N2KzQm/tgar+IWh7i9gVXr6BndE=)
                          2: yPdEnBlETthfb3n2w6_5p1naims.roa (hash: FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:21:a6:69:46:f5:0e:9a:b9:af:c3:7f:7c:3e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Mar 29 09:00:53 2026 GMT
            Not After : Mar 30 09:00:53 2026 GMT
        Subject: CN=18ea6820b6527afb003a9e582158650edd21e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:71:62:67:78:08:d4:f5:e8:30:6d:f6:20:
                    5f:70:88:e4:8a:39:df:7b:e6:56:b1:4d:8c:e0:bc:
                    db:99:b7:14:73:b8:e8:6d:ce:42:be:cd:d2:d5:19:
                    63:81:53:d1:b0:47:83:70:40:2a:9f:d9:d5:85:dd:
                    82:20:63:9a:4b:cf:0b:53:b7:e7:20:ce:ba:c3:48:
                    94:6c:07:29:ce:a0:a1:a9:92:78:fc:42:11:f1:c8:
                    ea:fa:d7:3f:f2:e9:b6:33:59:5b:a7:f0:2f:f5:6a:
                    f1:13:41:35:9e:11:40:a1:38:18:5d:aa:55:33:9c:
                    ed:75:c8:a3:36:6f:7d:f4:4c:12:4e:7c:07:f9:07:
                    78:5f:a2:24:41:fc:f0:cf:b0:fa:66:6a:58:62:aa:
                    5c:01:81:74:89:ca:99:18:b7:4d:09:10:14:2b:5a:
                    b2:c4:1c:a6:aa:c2:d6:a8:ef:e8:cd:48:b1:6c:55:
                    91:08:d3:60:7c:5a:eb:a7:26:ea:d3:af:91:31:27:
                    d7:4d:2a:92:33:28:fa:21:30:29:99:75:53:57:42:
                    44:de:22:ae:8b:39:3b:a7:85:73:b1:33:1b:f5:8e:
                    97:56:a2:dc:3f:e7:6f:7a:4f:ca:dd:6a:65:3a:de:
                    43:fe:84:c1:ec:5b:fb:d1:07:5f:9f:c0:f1:40:2b:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:68:20:B6:52:7A:FB:00:3A:9E:58:21:58:65:0E:DD:21:E9:76
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:67:32:2e:1c:dc:19:7d:13:a4:59:18:34:c3:5f:d0:ca:
         2d:15:33:22:d5:6b:57:18:af:b1:a8:69:3a:27:21:01:6d:64:
         3d:98:2b:d4:96:5c:48:be:25:b1:28:71:29:ca:8b:9b:62:bc:
         57:aa:c7:a9:db:e6:60:72:61:8f:58:67:33:7a:9a:f3:ed:57:
         d9:ee:fb:aa:8b:95:75:d5:e2:7f:54:7b:a8:4c:02:88:21:7f:
         9a:ad:9f:6c:a6:cf:78:ee:f5:22:aa:c8:2d:06:59:af:1a:a1:
         cd:65:1c:b2:21:57:46:7b:28:b6:ee:2a:26:72:a9:ab:d8:45:
         a6:e5:c6:ed:d5:4e:cd:af:f3:0c:89:e0:60:06:1a:81:6b:ca:
         6b:e5:d3:67:46:aa:15:6e:81:95:a3:8e:45:31:85:50:2e:53:
         ba:6c:b5:1f:35:12:65:06:a7:68:54:0c:57:e8:a4:82:fd:13:
         85:4f:79:df:98:86:10:0d:6a:97:3b:3b:75:86:1d:89:29:3e:
         48:ed:0e:e5:bd:bb:ba:53:ba:6d:c1:0f:5a:ce:27:62:36:27:
         de:3c:b5:6f:4e:3e:c0:99:fd:b7:78:61:2c:53:0a:ac:db:c9:
         c2:05:02:bf:b9:f9:3e:8d:52:ed:47:88:34:93:1e:a3:48:e3:
         66:03:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:21 2026 by rpki-client