Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File:                     dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier:          wCNiX/TcE6yrMxD5RBkk8QHnHx01PKds0CRbPa+Lg/I=
Subject key identifier:   37:C7:BE:15:7A:34:D0:29:EB:D3:57:29:EE:19:CF:7E:CE:1E:ED:4D
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer:       /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial:       019DA48B800491399A935C68E522649EC481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number:          136E
Signing time:             Sun 19 Apr 2026 07:01:38 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:38 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:38 +0000
Files and hashes:         1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: kjgShvSF6wZWaIy3bqaniI8ZsSRXLBKrNKODZXJb01I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:80:04:91:39:9a:93:5c:68:e5:22:64:9e:c4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
        Validity
            Not Before: Apr 19 07:01:38 2026 GMT
            Not After : Apr 20 07:01:38 2026 GMT
        Subject: CN=37c7be157a34d029ebd35729ee19cf7ece1eed4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:d9:72:bd:d5:b6:3c:c0:2a:3c:a9:a6:32:
                    6b:14:a5:e9:53:43:a0:3e:f5:bc:32:6c:f3:82:71:
                    b8:46:fc:a3:83:e7:3c:7a:75:d4:8c:05:a9:42:ea:
                    21:97:54:bb:c2:d3:db:0e:99:1e:54:71:6f:4e:c8:
                    3b:e2:0a:d8:53:38:4d:d0:70:79:f7:e7:64:8b:9b:
                    55:16:fc:43:2a:69:5f:9b:d7:f2:a6:be:1d:33:66:
                    a0:46:b8:72:88:42:8c:fa:d8:07:09:6b:d0:41:e9:
                    ea:65:c3:46:cc:c4:f0:97:4b:3c:06:e3:72:55:2a:
                    1d:c6:c4:55:be:b7:ff:76:98:ef:29:3f:0f:4e:22:
                    1b:c1:e0:0b:e5:74:83:cb:7a:c6:44:b1:b0:02:b5:
                    61:e2:f5:4f:e6:50:fe:6b:1c:1e:4f:c3:c0:8c:8c:
                    f4:57:14:ab:53:44:b0:27:2e:c0:d7:03:59:f9:f0:
                    9d:b3:ad:7a:f7:1c:74:49:21:96:0b:4c:f3:56:55:
                    22:c0:38:8f:fc:5e:8d:e9:f7:64:17:e4:2e:d2:d5:
                    84:a4:82:18:32:3b:d8:50:e1:59:d8:98:c9:4c:be:
                    85:94:b7:41:d3:c1:db:4f:ff:34:57:9d:80:31:ba:
                    54:b6:01:1e:6a:63:da:54:95:f3:93:48:f3:44:66:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:BE:15:7A:34:D0:29:EB:D3:57:29:EE:19:CF:7E:CE:1E:ED:4D
            X509v3 Authority Key Identifier:
                keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:e8:3e:df:f1:36:ad:ed:c5:c3:f8:9b:3c:88:03:e1:0f:
         af:39:e7:18:d0:51:a2:3a:39:7f:70:78:ac:df:e6:45:f3:28:
         75:3f:31:1a:9e:1f:b4:e8:5d:83:29:ac:88:59:56:14:69:40:
         16:cc:c8:70:b1:09:46:10:5e:3c:90:ee:de:db:62:95:7d:1b:
         f7:05:e3:57:37:6a:da:a2:af:c9:3e:34:69:82:4b:61:79:f0:
         45:ec:1f:d6:fb:08:ce:d0:ee:2e:20:cf:2b:8e:69:15:12:31:
         0a:c4:30:4d:1c:81:6f:0c:28:6d:2d:77:f6:b7:1a:1c:73:a9:
         8e:79:7d:38:da:33:cc:89:55:61:ba:23:d4:42:0a:f2:f2:d7:
         02:b2:2e:64:fe:71:41:16:0a:90:ba:47:e1:52:db:43:65:50:
         b2:b9:fd:82:af:11:d9:d5:d6:e8:19:f1:b6:4c:d9:69:79:73:
         a6:0a:e4:bc:67:f7:7c:26:ba:80:a3:ec:7b:1e:bd:67:3d:c1:
         f2:b1:6f:65:6d:59:9a:bc:c4:3c:a4:fc:4a:aa:53:7c:bd:89:
         a4:5e:fd:b1:8a:76:2e:32:1f:4d:43:24:3c:bb:08:31:64:8e:
         b8:08:1a:0d:b3:8a:e8:15:cd:17:81:eb:c1:00:55:c6:48:4f:
         4c:3b:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:41 2026 by rpki-client