Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          wl6Qaw8EUFJZr8BYwjCvxqKJI88V4GZx2v++zHUbD8U=
Subject key identifier:   F6:39:3C:82:09:60:A9:91:D8:77:1B:AC:18:7B:58:49:18:B1:1D:6D
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       019D9AE37596C79FB114DBD7AE03B5E88760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 10:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:31 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: mZBFeNwGpvEUeLE6cHEqyv5mg6NeE2CUvoy62g9RdTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:75:96:c7:9f:b1:14:db:d7:ae:03:b5:e8:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Apr 17 10:01:31 2026 GMT
            Not After : Apr 18 10:01:31 2026 GMT
        Subject: CN=f6393c820960a991d8771bac187b584918b11d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:43:af:c0:ce:c0:89:fc:34:e9:11:ba:d3:
                    c7:19:8a:b7:14:a2:9d:a6:8c:1b:ee:ff:82:a7:7f:
                    35:a7:b2:81:21:c2:4b:a2:93:2a:91:b0:2d:55:c2:
                    59:e0:d8:ed:27:7a:05:a5:68:c1:ac:e2:c2:06:37:
                    44:42:db:c7:34:c9:1d:a7:02:ee:78:92:33:7e:64:
                    07:36:b2:a9:2f:3a:03:61:47:b8:85:06:77:c9:0f:
                    e1:86:84:86:75:8e:37:32:78:28:59:e3:83:e7:cd:
                    83:01:b3:58:6b:81:95:51:93:20:fa:87:e8:42:66:
                    4c:53:d7:69:1e:da:6b:fc:0b:4c:13:3b:83:3a:04:
                    84:3d:bd:6f:51:46:c3:d3:fd:27:58:38:e0:a1:20:
                    29:67:f9:9f:39:8f:1f:61:07:cb:fd:0d:d0:f3:e9:
                    ea:34:aa:1b:16:ac:9f:c4:d4:c0:af:82:5c:62:64:
                    00:1e:3a:0a:77:5b:4f:56:da:b4:d0:85:bd:a9:7a:
                    7a:3c:b6:d1:12:ba:32:d5:2e:05:9b:6b:b7:f2:5c:
                    26:12:4f:b0:e6:56:08:8d:80:b7:44:93:13:f3:fc:
                    9f:03:a9:56:cc:7f:0c:0c:20:4e:14:a5:a8:2f:bc:
                    dc:e0:37:ec:9a:1e:36:00:86:ac:7e:f2:6e:9e:39:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:3C:82:09:60:A9:91:D8:77:1B:AC:18:7B:58:49:18:B1:1D:6D
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:1f:93:ae:c1:3b:2b:c5:66:c3:f2:f1:71:1c:8c:0f:47:40:
         fa:54:6b:3c:d5:07:ef:f8:c7:39:16:01:99:67:fd:25:18:69:
         f1:6a:de:91:b7:df:21:6d:6c:2e:ed:6b:ec:81:a9:db:05:86:
         5f:fe:b5:03:2c:29:52:a4:cb:70:f8:c7:bf:e4:56:f7:11:7f:
         b4:60:5c:0d:2d:34:9d:09:a1:f5:1d:d0:f0:c1:7d:82:3b:94:
         bb:d8:0e:63:bb:2d:ca:8a:44:7a:5c:67:a2:30:65:ab:69:b1:
         e3:a4:9d:3f:d6:e5:7b:49:61:e8:2f:ac:b7:03:71:e2:30:02:
         53:fb:73:34:18:e7:e5:24:ca:42:7c:c5:d5:47:c1:1a:13:2c:
         e2:68:9f:ce:6f:e8:bc:89:70:5a:c1:f9:2e:03:c4:1e:6a:93:
         a1:30:85:b4:e4:dd:72:97:8b:76:11:54:bb:ed:74:b8:f3:a8:
         0d:5c:3f:6e:7e:2b:a2:31:13:b7:e9:b2:06:46:86:e8:71:a2:
         f8:fb:85:a1:89:29:b0:0e:bf:dd:f9:e5:08:94:c6:5b:23:b3:
         96:5c:33:7b:28:ea:d5:03:fd:8d:a5:61:d1:26:c4:5f:51:81:
         4a:bb:ba:05:ad:3a:f0:ec:7a:b4:ba:31:c7:1b:6c:28:0e:54:
         10:69:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:49 2026 by rpki-client