Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          qFuWfQKly+JLbaYch0bPJ4+LG+/3xmXyXeHDP2lfOmc=
Subject key identifier:   3E:D2:82:80:74:BE:7B:67:4F:9A:65:36:B7:71:AA:E3:9A:6A:B1:C1
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       019DCD18AD7B8AA1A9DAD35401B1528B7249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0F02
Signing time:             Mon 27 Apr 2026 04:00:39 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:39 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:39 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: 0DLEEY3t+ZRw7OXHz2BSR60Qx0p5bwuQ/27jEbYqc7A=)
                          2: GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa (hash: YTbCU6GzTrIzftbZbD0fHbZANynvTnyxCIyn5sAM1mc=)
                          3: GgOfbd9F5KPJoYLhExG-OXyRwK4.roa (hash: Av0WKgdWyMP5jVBTfHweW1CBduaCDbaswF0VMggKgCk=)
                          4: hYLRUg0SQqMstMmusnhckxfWhuY.roa (hash: 1x1ITik47KH9EPZ8bGLZz5XWRPVBO6Cz1LvH0CdcCtM=)
                          5: vtwUYAYY8HgSzf0nS8zvrbl0txg.roa (hash: J5aRxIaRZQn03q+9SRxqwbVkAXCYWQNCOSEx8+r+upI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:ad:7b:8a:a1:a9:da:d3:54:01:b1:52:8b:72:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Apr 27 04:00:39 2026 GMT
            Not After : Apr 28 04:00:39 2026 GMT
        Subject: CN=3ed2828074be7b674f9a6536b771aae39a6ab1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:8c:3d:b8:d8:29:d9:fa:44:c2:24:70:f5:
                    2f:56:4e:94:10:34:62:3c:40:5c:d2:2f:4d:ba:23:
                    dc:df:b4:ea:f7:66:cb:e6:3f:fb:b5:ae:fb:01:f6:
                    13:ee:b3:d7:63:81:72:4a:98:76:05:52:c8:32:41:
                    df:8e:fc:cd:b2:2e:dc:d1:11:1b:45:c8:7e:43:59:
                    fa:b8:40:f3:29:c4:c2:c3:71:f0:a6:72:67:d2:73:
                    10:a8:70:09:75:a4:13:49:36:dc:f4:dc:77:81:11:
                    9e:cc:ff:7e:c1:35:fe:9f:2e:4e:74:92:2b:e9:4a:
                    2a:02:e7:79:e4:75:75:f2:18:28:44:f7:ef:a5:07:
                    10:43:c1:7e:46:82:ca:d7:23:b0:08:96:8d:4f:4a:
                    5d:9f:2a:dc:36:05:91:5f:1e:77:b4:c0:53:b2:cb:
                    0d:93:d0:b2:be:7d:ac:3e:2e:fe:59:90:f2:a8:ed:
                    eb:be:2e:22:6f:e2:27:49:72:00:c4:dc:67:0e:0e:
                    e0:a9:18:e7:ce:82:96:5d:1f:cd:9c:79:de:e4:62:
                    d9:18:18:62:e3:a5:99:df:16:92:ff:d2:c9:a2:67:
                    5d:20:8a:9d:42:10:9f:1d:16:84:4c:62:01:cb:8c:
                    8d:d3:a2:82:ea:3d:a7:81:86:94:40:a2:92:2c:bf:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:82:80:74:BE:7B:67:4F:9A:65:36:B7:71:AA:E3:9A:6A:B1:C1
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2a:5a:2b:7b:b3:ed:73:34:3d:fe:31:4c:97:39:0b:55:1a:
         94:ba:8d:fa:d0:2d:fd:1f:6e:3d:02:db:76:69:f0:a5:10:16:
         08:2e:a1:f0:34:cf:61:03:f8:59:f6:11:3a:73:5e:98:25:4f:
         b1:12:73:64:2c:b4:a6:1e:07:7c:d3:ea:64:a3:ea:0f:b9:66:
         f6:c6:18:35:95:b1:d6:07:fc:c5:ab:36:55:54:96:2f:b0:b5:
         bb:b4:16:5c:56:48:93:97:8a:8e:92:62:82:92:6d:63:e4:94:
         d2:19:19:41:f6:99:60:9d:1b:22:69:bd:ed:b8:51:6b:b9:f2:
         de:ab:53:fd:d6:10:c3:dd:18:94:7a:43:5e:7a:10:49:bb:c0:
         6d:57:bb:10:7e:65:b3:2c:16:c5:e7:89:9f:05:a6:d3:22:82:
         61:7d:ea:9c:6a:0c:97:64:a3:b7:f8:1b:9f:5e:3e:c5:2c:42:
         1b:a0:3b:07:93:2c:40:b1:01:c7:dd:40:3b:cb:67:50:f4:42:
         ed:fe:22:98:a7:04:92:67:ee:28:ca:0e:d5:c4:73:74:6f:24:
         9e:5f:6a:da:35:e7:86:e7:9d:f7:4b:74:e7:fa:4e:21:b7:29:
         ac:df:66:b1:bc:2a:3f:47:d5:7f:5d:7d:78:d5:14:f3:75:7d:
         ae:ed:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:28 2026 by rpki-client