Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          r7oUR7BrgxCOLJoYN1kMCAmB7Eg2wVyFbUK7JOfcoTY=
Subject key identifier:   CD:1F:12:E2:3E:D7:74:F5:0F:C0:CD:39:90:62:5F:2F:F8:7B:63:08
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019DB27D8B3230AC68CD34993C9C96A87EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0ED8
Signing time:             Wed 22 Apr 2026 00:01:05 +0000
Manifest this update:     Wed 22 Apr 2026 00:01:05 +0000
Manifest next update:     Thu 23 Apr 2026 00:01:05 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: XUIfJsSUYop6em/yOByLdPUHcawyu37VDBNoYrG+k8M=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:7d:8b:32:30:ac:68:cd:34:99:3c:9c:96:a8:7e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Apr 22 00:01:05 2026 GMT
            Not After : Apr 23 00:01:05 2026 GMT
        Subject: CN=cd1f12e23ed774f50fc0cd3990625f2ff87b6308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:47:82:ca:e4:78:56:3b:e7:96:16:5f:95:
                    4b:aa:5c:de:73:5d:a3:1a:85:f5:3d:39:dc:22:6d:
                    85:f0:14:1b:22:32:27:ca:75:b1:63:60:65:07:b7:
                    a4:d9:20:81:1f:9d:3d:45:6c:53:01:05:d4:83:04:
                    88:0e:6c:23:36:4f:ea:90:f6:ff:2c:39:36:85:58:
                    18:38:fa:a6:7e:fd:bc:9a:e4:92:dc:f1:20:1d:48:
                    c2:23:61:90:9d:82:ab:96:0d:fd:33:d0:5d:35:33:
                    be:6a:a9:24:57:94:78:69:1e:4f:ee:b5:8a:6f:92:
                    4c:3d:8e:23:cc:98:fa:2a:32:3f:65:ff:31:4c:1f:
                    9c:5d:67:94:2c:56:b4:75:74:0a:d9:b9:45:b4:f1:
                    70:97:e4:c8:67:f6:a6:61:36:2d:1e:1e:6f:58:09:
                    83:7e:37:47:0c:c0:b1:3d:cd:eb:e2:6f:42:b1:41:
                    36:e6:fa:c6:29:8d:34:d4:7a:8a:4b:8f:6d:0c:06:
                    6b:06:5b:a4:67:29:45:62:f9:45:12:33:cf:59:54:
                    92:11:7d:b1:5f:48:4e:a4:0d:f4:4d:20:95:35:73:
                    f6:99:5a:02:d5:57:61:0b:d2:b5:67:89:c1:4c:2e:
                    50:f3:7b:7b:2b:55:33:88:66:44:e6:5a:71:80:bc:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1F:12:E2:3E:D7:74:F5:0F:C0:CD:39:90:62:5F:2F:F8:7B:63:08
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:8f:2d:0b:1f:c7:a2:ea:19:30:13:0b:51:f9:28:57:a7:
         0a:e8:cc:fe:71:9c:50:7b:3a:f1:07:34:2a:af:31:61:93:5d:
         c4:d6:ad:10:b8:02:c5:b9:8b:ec:5c:ae:d8:b6:7b:40:cc:fb:
         06:c7:62:a7:f1:cf:d4:12:b5:ab:24:06:e6:b8:67:73:62:4a:
         72:d1:9c:b2:71:cd:ff:bb:de:37:2a:df:33:60:0c:c8:6e:b8:
         a6:e6:32:02:59:a5:41:f4:a0:31:34:da:aa:3e:10:95:6d:6b:
         3d:e8:22:c2:0a:40:a6:cd:ad:04:32:08:34:81:53:62:b3:24:
         6f:03:d8:64:df:15:91:8d:1a:1a:d3:13:10:22:83:22:66:fc:
         7c:71:96:6f:30:22:bf:9c:e1:21:c5:cd:40:9c:24:7f:c7:c4:
         83:5a:b1:58:58:72:33:07:5d:12:ff:e8:91:2f:4d:40:67:80:
         6b:c5:16:57:58:55:15:e2:ef:3a:e3:3e:48:6e:1b:a6:02:17:
         b9:67:10:f7:a5:6d:85:af:41:ff:2f:8f:f9:21:e7:f8:25:6f:
         ef:b9:90:39:61:0c:de:93:e5:92:31:a7:bd:c5:e2:c4:54:2e:
         f3:5b:5e:d4:7a:87:62:39:b0:de:b7:82:cf:58:88:0b:54:00:
         5a:bd:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:57:57 2026 by rpki-client