Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
File:                     4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json)
Hash identifier:          ce1aU672bXh9jRT46J0EEuNTru+AXFlkWShMbZnQjC0=
Subject key identifier:   2F:C4:B8:A4:E1:1C:51:F6:C6:51:DB:02:95:52:9E:92:EE:B7:07:C8
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Certificate issuer:       /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial:       019DA89E46A9572E51FE9E5CCC4B47E4B635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
Manifest number:          0261
Signing time:             Mon 20 Apr 2026 02:00:38 +0000
Manifest this update:     Mon 20 Apr 2026 02:00:38 +0000
Manifest next update:     Tue 21 Apr 2026 02:00:38 +0000
Files and hashes:         1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: KMYsQ/Y77cvaQBkkUWygTwmncMvVKSG9ugX/rudD0pY=)
                          2: LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa (hash: R8R2deH4wzpQeZtkxO49MWL5HlgBcEV1PZ5wfpJUweo=)
                          3: dEyl1wRLwZD53oaixGSnEJouVpI.roa (hash: GpR9gkiY/09kNYwh3uLXbfU1LJkTwOBwOzQDnF7Ik84=)
                          4: hFB_f-BZ_am25TGtg-kLEdIlptA.roa (hash: NoOMHYbmu75DUl11Vo7jX7dGF5BWLAYsxu8ojOU01yk=)
                          5: lLg_J9YIGk9Bx5020VMchGBjT28.roa (hash: z6BgfhJ3Bk6vD4wjFGLuDISYOvDfTRG5fR6HJauBSGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a8:9e:46:a9:57:2e:51:fe:9e:5c:cc:4b:47:e4:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
        Validity
            Not Before: Apr 20 02:00:38 2026 GMT
            Not After : Apr 21 02:00:38 2026 GMT
        Subject: CN=2fc4b8a4e11c51f6c651db0295529e92eeb707c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:3c:d7:36:86:6c:f8:ef:4b:cd:da:f1:ff:
                    e8:fe:9f:2c:b6:56:aa:56:a7:79:33:5e:cd:d5:b5:
                    b0:f0:ba:b6:89:96:7a:5f:f8:a4:87:3a:99:ea:6b:
                    61:a7:e6:2f:50:5e:c2:ff:8e:19:0e:5c:47:c4:15:
                    00:d9:0a:06:d4:ad:cd:c8:e3:06:5a:aa:84:21:39:
                    3c:80:18:e5:09:43:30:a4:06:6b:59:68:ca:aa:40:
                    f2:fd:5f:64:6c:7e:30:69:ff:49:a5:03:2f:df:b9:
                    39:5a:8b:41:25:5d:57:6a:98:6c:e7:4d:84:32:f4:
                    30:bf:62:76:b3:90:65:95:e7:33:5a:76:91:f8:16:
                    19:14:28:4c:6d:50:79:d5:b6:7c:b2:b3:91:90:31:
                    aa:5e:3a:ac:22:98:db:86:12:6e:28:fd:4b:a8:c3:
                    99:9c:f9:72:b5:9c:f9:bd:ad:b2:8a:bb:c8:4a:a6:
                    7f:eb:78:2c:9d:94:c6:20:1f:24:8f:c8:0d:8b:8b:
                    76:3d:45:4e:65:63:0e:dc:26:90:0d:3c:1d:4c:d8:
                    15:81:c7:cb:5c:b4:25:81:10:d6:f6:07:f3:df:b8:
                    6f:bd:50:57:de:4e:b1:ab:f8:fd:02:bb:ff:bb:26:
                    0d:3a:49:52:4d:82:04:36:29:86:d0:d1:35:a9:fe:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:B8:A4:E1:1C:51:F6:C6:51:DB:02:95:52:9E:92:EE:B7:07:C8
            X509v3 Authority Key Identifier:
                keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ed:0e:53:c1:8c:99:3b:8f:e9:f7:84:32:0b:ab:42:89:42:
         0f:19:88:3b:a2:89:8a:40:5b:38:43:93:6d:dd:9f:7c:dc:e5:
         44:5a:9c:9d:6b:7e:76:df:aa:e1:40:67:b2:17:da:88:00:6e:
         48:66:a0:24:5c:f0:a6:81:ad:d3:9e:9a:58:29:76:bd:54:9a:
         13:dd:da:3f:50:05:de:21:e5:54:61:aa:64:1d:3b:57:ac:e7:
         aa:47:e6:dd:59:90:b2:ad:b1:3b:74:53:8c:d1:80:62:6f:10:
         e7:23:56:89:b4:3d:f6:ad:92:52:68:f7:6e:6f:2d:ec:3e:93:
         e1:df:ec:e6:63:43:50:34:17:4d:85:e3:f3:03:70:67:a1:00:
         d4:48:dc:cc:bd:78:bd:f8:42:c3:f8:6a:69:71:8d:2a:4f:c7:
         57:c0:7b:24:2c:3d:4c:35:b0:9a:48:19:97:ef:72:50:ef:6a:
         86:90:6b:15:0f:b2:90:7f:a5:53:ee:8f:5c:18:8c:8f:86:05:
         cb:90:6a:26:96:a2:fb:20:54:54:6e:7d:7b:e6:50:47:ff:a4:
         02:27:9c:cf:4e:97:33:d5:fd:24:71:c9:92:72:fe:e3:07:64:
         48:3d:fc:6f:66:10:a0:9d:7c:02:0b:06:61:33:07:93:86:f9:
         af:c0:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:39:28 2026 by rpki-client