Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File:                     W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier:          fPpAd0fkU0QZDJtXt70gZJp615gO1i2c0IsyhxlIdJE=
Subject key identifier:   FF:B3:5C:A3:E0:BF:5D:C3:ED:6A:AA:B9:7A:B7:F3:06:5E:3B:BB:3C
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer:       /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial:       019D9C2C77DAD2611A9CD43AB4D974C12A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number:          04BA
Signing time:             Fri 17 Apr 2026 16:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:53 +0000
Files and hashes:         1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: 5FvXtRC4juJAqVAqEIt0rA5xfFzEWuHHlOzEtGjtn4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:77:da:d2:61:1a:9c:d4:3a:b4:d9:74:c1:2a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
        Validity
            Not Before: Apr 17 16:00:53 2026 GMT
            Not After : Apr 18 16:00:53 2026 GMT
        Subject: CN=ffb35ca3e0bf5dc3ed6aaab97ab7f3065e3bbb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:2d:a3:7c:43:01:3e:22:6b:32:9e:ae:d2:
                    23:db:21:64:08:ee:1f:65:4c:84:54:93:60:a4:88:
                    a1:77:8b:d2:04:c2:79:4d:97:df:2b:95:1e:45:73:
                    3d:c6:07:fa:73:a3:10:91:78:12:ae:08:75:2a:0c:
                    60:ac:35:0b:01:3f:d9:2f:34:0e:28:4e:54:70:6d:
                    9d:02:b4:10:5d:c5:2d:fa:ab:85:84:d9:8b:a2:9d:
                    26:97:8b:15:2e:4f:e4:f6:d8:1d:73:5b:6c:2c:0e:
                    9e:8e:5c:20:2d:ec:b2:f0:dc:43:b2:d8:9d:51:cf:
                    1b:a0:99:3b:e3:d8:c0:50:32:29:55:b4:5f:55:c4:
                    62:59:bf:50:01:64:21:ba:c0:77:fb:9f:70:f3:94:
                    28:01:81:1a:1e:54:fd:d3:83:9a:43:d5:a8:24:d9:
                    af:d1:b1:19:68:19:f4:9e:6c:20:cd:40:8e:73:04:
                    3b:15:7e:fc:65:b7:8e:3e:d1:f3:2a:a4:d5:9b:9c:
                    e5:2f:eb:07:a1:35:5c:22:34:89:db:93:21:12:10:
                    ed:4c:28:06:28:54:77:63:85:4c:14:9a:93:11:d1:
                    39:95:65:f7:f2:d6:17:34:0b:f3:66:0a:87:6b:b3:
                    a9:a5:20:16:99:df:b6:b2:69:e4:cc:61:a8:bd:2c:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:5C:A3:E0:BF:5D:C3:ED:6A:AA:B9:7A:B7:F3:06:5E:3B:BB:3C
            X509v3 Authority Key Identifier:
                keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:58:0e:d5:f2:da:d9:c2:5e:e9:1b:6c:33:de:d5:43:02:f1:
         e5:38:ed:1e:4d:af:3d:1f:65:fe:b1:6f:db:ab:c7:ca:64:23:
         1a:66:de:72:b9:c3:37:26:2f:08:7a:d6:87:f8:5e:0f:c1:76:
         39:59:e9:d8:11:02:77:cf:7c:6d:44:cd:ae:e8:17:b8:a9:d5:
         55:66:61:02:7f:f5:d6:3d:2c:83:a9:dd:a4:49:0d:7a:9f:c0:
         7c:e1:95:ca:31:54:09:30:b2:85:91:4d:8c:9e:c6:c0:39:f7:
         67:e1:3c:26:2d:a5:a9:89:9c:07:a3:cf:07:0d:28:93:97:ab:
         7d:e0:96:8c:f5:42:7c:80:3e:2f:14:01:e8:c6:c7:dc:b2:13:
         ac:bf:8a:b0:a2:99:e1:ad:37:ba:db:ba:69:db:3e:bf:ca:90:
         65:8a:2f:97:f4:61:4d:9c:cc:ce:f6:b2:9c:a6:43:f5:1a:f3:
         64:6a:27:04:a9:94:14:f6:af:f7:12:5c:b3:7f:a4:16:c4:9d:
         0e:b0:9a:d1:39:5f:e2:bb:e9:c9:83:7d:f3:3f:08:91:09:2e:
         1b:1c:0c:e4:82:a4:a1:2b:67:4a:5c:6e:16:c5:9e:28:41:b2:
         08:b1:08:ae:0d:a1:9c:37:54:31:7c:3b:e3:9e:d8:1b:58:bb:
         4d:26:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:55:17 2026 by rpki-client