Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          GSa+yWvzT8C0MxmIAuPmxLVfwxJwqljuPEClX3vcTjQ=
Subject key identifier:   28:DE:1F:02:15:D7:E6:DA:5C:36:2C:AF:CF:6E:3F:B1:79:72:EC:98
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019DCED023AD15A586E8F0A70987098B80BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          18E4
Signing time:             Mon 27 Apr 2026 12:00:40 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:40 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:40 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: QfC+eEnX0xOytmnRZRL5vMPF/BZlgnJirVzX8EDatHY=)
                          2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
                          3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
                          4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
                          5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:23:ad:15:a5:86:e8:f0:a7:09:87:09:8b:80:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Apr 27 12:00:40 2026 GMT
            Not After : Apr 28 12:00:40 2026 GMT
        Subject: CN=28de1f0215d7e6da5c362cafcf6e3fb17972ec98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:c4:e5:35:77:d7:cb:82:45:6f:21:5e:53:
                    3d:14:09:58:8e:66:3d:38:75:dd:e7:e1:67:a4:84:
                    a5:9e:5c:49:ca:06:f9:d6:6b:0a:e6:41:ff:9a:db:
                    b4:96:4b:95:34:36:8f:55:8d:08:61:b1:8b:fb:18:
                    4c:f5:66:fe:22:63:8c:1c:bc:ae:a1:f6:10:9f:57:
                    3c:bb:68:31:cd:1d:e5:2a:89:dc:66:90:3f:1c:63:
                    1a:3a:b0:d1:2e:31:1a:37:e0:bd:e3:90:20:4f:49:
                    a0:04:38:2f:42:02:df:f1:13:54:86:76:93:3a:3c:
                    cd:71:92:bb:bf:e7:98:c8:4d:b3:c4:b2:3d:e5:65:
                    f6:c2:ce:f2:ab:0f:b6:6a:3f:be:d3:a6:6e:1f:53:
                    ef:b6:05:1f:00:e9:77:a3:03:51:46:af:f0:0a:54:
                    7a:ad:76:04:a8:95:a0:f2:f1:f2:c3:7e:89:7c:7e:
                    66:1f:0f:ca:17:b6:f4:a6:61:96:51:e4:0b:20:e2:
                    63:df:0a:68:ae:fd:c8:f3:63:1b:6a:26:48:d2:c9:
                    37:1a:94:a4:f2:47:3f:f4:7d:cb:16:f1:ed:96:f9:
                    6c:d8:71:89:79:27:1e:47:e2:8d:6c:db:89:59:50:
                    3f:ca:66:e6:06:9c:ff:e4:e2:51:10:ef:9b:e5:e1:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:1F:02:15:D7:E6:DA:5C:36:2C:AF:CF:6E:3F:B1:79:72:EC:98
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:ba:17:f6:13:2c:62:2f:e4:1b:94:ac:9d:49:5f:83:88:
         64:8c:77:60:03:52:ce:af:e0:c6:23:b4:6d:39:8c:c9:eb:cf:
         8a:ad:90:41:0a:17:6d:f2:58:4c:0b:a9:f9:7e:57:f4:87:a8:
         7c:d1:f6:8f:b2:4d:b2:de:87:3c:4a:67:02:8e:a3:66:ca:24:
         ae:af:24:1a:9d:8e:14:39:27:a8:34:b8:76:e9:d8:86:b2:f8:
         4d:b2:c4:f8:50:5b:70:36:dc:87:bb:31:e0:76:53:ed:45:8f:
         32:4c:5e:16:a0:aa:ee:9f:77:cf:4d:bf:d2:9a:9f:8f:6c:7b:
         7e:9c:7f:04:71:b1:ff:78:d9:b7:8a:b1:1b:36:11:da:5e:aa:
         4a:ce:0b:0b:fc:3e:83:ac:55:49:b7:0a:91:71:83:8e:84:8e:
         7e:4b:5a:91:b3:ac:50:92:d0:93:8e:b9:d3:a8:1a:60:c0:e2:
         c4:7e:6a:9a:30:cb:a9:05:15:52:01:7b:e5:a1:47:5a:0f:93:
         c3:51:89:1d:d4:3d:f0:5e:62:34:57:6e:34:68:a0:c4:52:c9:
         45:57:e4:f2:23:d7:b9:86:43:ed:08:66:17:e3:17:fe:70:a0:
         53:54:a8:36:cc:0d:d6:ca:71:db:fe:a9:f0:27:05:ff:59:3e:
         02:51:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:26:59 2026 by rpki-client