Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File:                     jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier:          RJE5fbrMKMSZitrDB5PdvOwvv49pBGirbBugwPHOvlQ=
Subject key identifier:   8F:EB:14:51:E3:60:51:BF:0B:28:00:BD:29:15:D7:25:0E:E8:DA:86
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer:       /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial:       019D9C99FEAD1F3F2022336BA62C28B94898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number:          0BA3
Signing time:             Fri 17 Apr 2026 18:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:31 +0000
Files and hashes:         1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: CRufQX0sCa+agoMO7LcRWGZjB+tz6lNBvLlJVVXrLXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:99:fe:ad:1f:3f:20:22:33:6b:a6:2c:28:b9:48:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
        Validity
            Not Before: Apr 17 18:00:31 2026 GMT
            Not After : Apr 18 18:00:31 2026 GMT
        Subject: CN=8feb1451e36051bf0b2800bd2915d7250ee8da86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:53:c3:e6:8a:cd:c3:70:5d:bc:11:d5:90:
                    c4:89:bb:62:0e:22:9f:52:24:88:33:bd:71:2a:0c:
                    10:00:6e:48:24:ee:15:da:e1:17:44:66:9d:da:49:
                    d7:2b:98:76:60:e2:55:51:66:54:22:b0:d1:cb:c2:
                    6c:b1:59:b5:41:62:22:72:27:3f:15:86:a5:e8:6d:
                    16:e6:6c:a9:23:ba:2f:c1:45:35:6f:9b:fd:7f:74:
                    70:d3:23:fa:2c:fb:41:68:74:e3:fd:da:d3:f8:f0:
                    0d:de:da:d3:ae:7f:c2:25:af:a5:51:af:3b:70:08:
                    99:97:53:22:6d:cf:83:dc:54:4a:66:b2:ae:54:c7:
                    11:fe:19:31:7c:75:27:44:10:fa:8b:88:73:9b:9d:
                    c9:4d:34:44:be:2d:92:ac:de:4e:fa:ca:7b:79:a9:
                    81:2b:07:53:b9:56:34:dd:22:e4:53:06:1a:1a:23:
                    79:ff:16:2b:92:eb:b0:ec:6d:8c:a5:bc:74:f6:79:
                    bf:40:6c:36:39:3c:b3:3b:e2:fe:94:21:4d:6e:78:
                    00:f6:77:c5:69:a0:f5:11:d5:05:bf:4d:8e:d6:83:
                    5e:9c:0f:fd:5f:5d:fd:d0:9a:94:68:ed:ea:91:15:
                    63:d3:98:12:cc:51:c7:33:a5:b8:e7:84:43:61:f3:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:14:51:E3:60:51:BF:0B:28:00:BD:29:15:D7:25:0E:E8:DA:86
            X509v3 Authority Key Identifier:
                keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:35:bf:5b:46:dc:2b:5d:27:93:a8:e4:d6:5e:08:2c:e6:62:
         80:72:95:e2:57:f0:e0:43:eb:01:28:99:bc:3c:fb:63:58:79:
         b1:d1:eb:e6:9d:ef:86:97:72:cc:3c:c9:7a:9e:ef:13:e4:aa:
         6f:20:4c:45:6d:70:81:43:33:1c:28:10:4d:f0:0f:d9:8d:20:
         39:15:43:a0:89:0c:44:57:7f:7a:0e:5d:7f:81:d3:c6:c1:ce:
         42:8e:9b:1c:9c:f5:e3:e1:86:61:b4:30:b0:f1:e2:7f:3b:19:
         8a:ab:f4:a3:aa:f3:36:75:37:14:1b:a3:06:4a:1a:89:45:c1:
         94:2e:fe:61:b6:39:51:6e:40:1e:b6:b5:76:c5:0c:aa:3f:29:
         1f:e4:4a:a3:c7:67:f8:26:29:b4:6d:05:76:0b:60:23:ce:e2:
         e8:21:57:d4:85:79:dd:65:5b:53:b8:5e:2a:84:2b:eb:b4:43:
         a6:a2:9d:54:3f:18:f9:fd:bd:3c:ff:31:78:88:34:45:94:e1:
         63:ea:0d:88:c2:6f:47:22:cd:07:42:c8:ce:a8:9a:cd:58:44:
         43:0b:8d:1b:32:68:a5:a8:fe:78:1a:d2:23:be:f0:c7:c3:f3:
         dd:3a:bb:99:65:fc:3c:f0:47:de:f9:38:55:c8:32:92:51:95:
         0d:d4:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:56 2026 by rpki-client