Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          jaBvub2MZAg6aLvuct0YehCYfrPYoAmqaEsNvnR3+v4=
Subject key identifier:   E4:B1:4F:52:70:30:09:36:CB:B9:23:96:99:CD:3B:5B:05:FB:0B:37
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       019D9C62EB233F3AE1B2DA626BE5BF374706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          0F30
Signing time:             Fri 17 Apr 2026 17:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:21 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: wrrJ3qgYfXN4GFEmzSVwk7wmigs9ZQSVy46EyfSuugc=)
                          2: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (hash: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=)
                          3: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (hash: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs=)
                          4: g9DlwoPcP__m6NZqUMdk9BeZ8_s.roa (hash: kBEZ3OB5J/nHjPA7g4sqM3oE29ycmGA4VRa1os8i/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:eb:23:3f:3a:e1:b2:da:62:6b:e5:bf:37:47:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Apr 17 17:00:21 2026 GMT
            Not After : Apr 18 17:00:21 2026 GMT
        Subject: CN=e4b14f5270300936cbb9239699cd3b5b05fb0b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:39:a3:50:ac:be:46:bc:36:66:1e:ac:6e:
                    e2:92:81:0b:ec:8c:b0:a8:6c:06:68:f1:24:1b:77:
                    3a:9e:61:f7:1a:73:f4:89:d9:de:d1:a5:ec:d5:7e:
                    2d:72:27:a7:98:f7:32:87:b4:54:0a:f4:58:09:9d:
                    a7:47:d6:98:39:a2:50:aa:cf:b9:93:24:22:cc:c7:
                    8f:7a:09:04:61:09:e1:a2:76:7c:8f:0a:f5:cd:3f:
                    50:41:e0:19:95:e7:03:02:65:f1:18:80:32:02:0e:
                    16:cd:85:30:aa:80:5d:15:07:e1:1b:6a:95:a4:5e:
                    ad:1d:2b:12:df:00:ee:c6:16:a9:4e:63:ea:93:a3:
                    3b:b0:ed:86:65:fc:de:13:70:72:4a:77:c1:29:e4:
                    29:46:f7:fe:0f:67:b0:0f:c2:db:ec:0b:79:97:ea:
                    81:e2:92:19:73:18:88:24:16:f6:c6:4d:c8:c8:59:
                    4a:56:93:7a:5c:8e:5b:56:1f:63:25:13:88:d9:03:
                    dc:0b:a2:5d:01:af:2b:f1:7c:07:d0:6d:90:61:8e:
                    b0:e4:3d:a6:14:15:da:00:aa:2d:c8:4d:d3:85:e6:
                    70:60:8b:ec:db:e0:e0:fa:7c:f7:2a:99:9a:0c:fd:
                    fd:da:bb:aa:ca:30:1f:a8:6b:b1:5e:4c:be:d5:74:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B1:4F:52:70:30:09:36:CB:B9:23:96:99:CD:3B:5B:05:FB:0B:37
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:b9:36:c2:94:a0:43:1b:be:bb:bd:71:d2:f6:ea:b7:90:
         c3:c1:00:ed:65:78:85:4a:cf:e2:b5:a9:81:09:ca:eb:cf:6c:
         b1:66:dd:ba:5e:33:ca:8e:c1:ae:27:11:55:47:a9:e3:40:f3:
         97:22:92:35:64:b9:5d:13:c6:d6:58:b2:07:45:62:bc:bd:c1:
         96:7f:0f:f6:49:75:a6:c5:cf:47:c2:58:4f:9d:70:fb:6c:71:
         12:56:84:cb:d4:24:74:d6:51:c9:92:23:36:86:88:12:1b:65:
         11:bd:94:c4:e5:be:9e:9a:13:09:55:dc:a1:cf:d1:60:43:7e:
         57:5e:91:6e:ba:04:b2:fc:17:f0:56:69:ab:d9:43:83:ab:a3:
         9f:54:68:5e:23:44:45:ed:40:3c:d3:f9:97:cb:24:85:27:97:
         06:09:c6:6f:1e:95:c5:57:e4:26:60:fb:22:d1:f5:53:35:d8:
         95:32:37:be:75:a0:29:4e:88:c3:48:ad:f1:76:55:ed:ad:19:
         3b:4e:c5:fe:ad:df:21:43:f5:5d:fa:39:74:91:27:2f:d2:fe:
         6c:80:2a:eb:59:0c:fc:b4:e6:f7:8d:15:7a:c9:b0:1f:e9:31:
         b8:cf:31:35:64:3d:c2:71:7b:6b:b4:41:79:98:a0:73:cb:b3:
         70:36:10:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYusjPzrhstpia+W/N0cGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjYwNDE3MTcwMDIxWhcNMjYwNDE4MTcwMDIxWjAzMTEwLwYDVQQD
EyhlNGIxNGY1MjcwMzAwOTM2Y2JiOTIzOTY5OWNkM2I1YjA1ZmIwYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2M5o1Csvka8NmYerG7ikoEL7Iyw
qGwGaPEkG3c6nmH3GnP0idne0aXs1X4tcienmPcyh7RUCvRYCZ2nR9aYOaJQqs+5
kyQizMePegkEYQnhonZ8jwr1zT9QQeAZlecDAmXxGIAyAg4WzYUwqoBdFQfhG2qV
pF6tHSsS3wDuxhapTmPqk6M7sO2GZfzeE3BySnfBKeQpRvf+D2ewD8Lb7At5l+qB
4pIZcxiIJBb2xk3IyFlKVpN6XI5bVh9jJROI2QPcC6JdAa8r8XwH0G2QYY6w5D2m
FBXaAKotyE3TheZwYIvs2+Dg+nz3KpmaDP392ruqyjAfqGuxXky+1XT/iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSxT1JwMAk2y7kjlpnNO1sF+ws3MB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJy5NsKU
oEMbvru9cdL26reQw8EA7WV4hUrP4rWpgQnK689ssWbdul4zyo7BricRVUep40Dz
lyKSNWS5XRPG1liyB0VivL3Bln8P9kl1psXPR8JYT51w+2xxElaEy9QkdNZRyZIj
NoaIEhtlEb2UxOW+npoTCVXcoc/RYEN+V16RbroEsvwX8FZpq9lDg6ujn1RoXiNE
Re1APNP5l8skhSeXBgnGbx6VxVfkJmD7ItH1UzXYlTI3vnWgKU6Iw0it8XZV7a0Z
O07F/q3fIUP1Xfo5dJEnL9L+bIAq61kM/LTm940VesmwH+kxuM8xNWQ9wnF7a7RB
eZigc8uzcDYQ9g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:20 2026 by rpki-client