Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File:                     c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier:          blaX7oSx9sMbKVMHgCjr/mtUuM1NQOkACkbm8jXSXFQ=
Subject key identifier:   73:12:B5:8B:FE:6E:3B:63:60:5A:35:C3:FC:20:D0:FB:7A:5B:74:ED
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer:       /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial:       019D9A06F9F119D8858CEFFD058F326CF6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number:          0548
Signing time:             Fri 17 Apr 2026 06:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:41 +0000
Files and hashes:         1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: Dgn+TRDrDKErQLd7Qqb1diRAj0Zu5fsk6h3EIWi36Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:f9:f1:19:d8:85:8c:ef:fd:05:8f:32:6c:f6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
        Validity
            Not Before: Apr 17 06:00:41 2026 GMT
            Not After : Apr 18 06:00:41 2026 GMT
        Subject: CN=7312b58bfe6e3b63605a35c3fc20d0fb7a5b74ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:21:8b:56:2e:8e:89:f8:75:4c:9a:38:a9:
                    f5:77:0d:af:ef:05:da:d6:84:00:86:98:ce:36:e0:
                    ab:22:bf:7d:c7:32:38:92:96:a3:fa:8e:0d:6d:2f:
                    06:60:56:44:12:4e:5b:26:b4:79:a4:90:02:ce:2d:
                    f4:62:96:e1:a4:b2:b2:81:a0:8b:92:4c:5d:38:b1:
                    c6:e5:1f:30:2b:82:82:d8:5f:fd:53:b8:d4:87:02:
                    31:f8:52:63:11:b7:7f:40:5e:4b:f0:2a:5d:99:17:
                    74:02:48:57:ac:af:91:bb:85:fc:a7:34:c2:47:84:
                    84:a4:ad:78:6b:ca:4a:05:50:42:c5:44:27:4d:d0:
                    ee:33:40:a8:d5:d8:76:ac:a3:6e:2f:4a:f8:f2:59:
                    4b:ba:4a:0c:a9:9e:9c:52:f4:78:37:27:66:29:1c:
                    a5:35:a0:9a:16:0a:e1:d5:65:06:b6:82:a2:72:23:
                    7f:0c:53:1f:b1:20:ef:7c:f8:40:d4:7f:86:6d:86:
                    dd:53:74:64:55:43:a7:92:51:53:4e:a5:55:53:cd:
                    9c:dc:6e:ff:92:c8:d0:68:a4:14:cb:fb:0e:8f:f9:
                    51:d4:d8:58:8b:8d:8d:2b:41:3c:a3:60:35:11:10:
                    d1:64:23:bc:69:78:09:b1:3e:82:2d:0b:42:d6:b8:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:B5:8B:FE:6E:3B:63:60:5A:35:C3:FC:20:D0:FB:7A:5B:74:ED
            X509v3 Authority Key Identifier:
                keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:30:a3:bd:06:24:c9:18:96:f5:8d:57:d0:a0:02:0a:0a:
         a6:16:ab:9a:fa:e2:30:e8:ca:72:81:15:37:e2:c8:f9:7c:78:
         86:1f:80:c3:df:04:d7:70:01:b3:0a:67:4a:10:55:7b:a4:08:
         9b:5a:d6:83:75:f1:e8:37:f8:43:62:cb:b1:1b:0b:54:24:36:
         25:bc:a3:70:4d:62:2f:f5:2c:28:8c:1f:55:d4:fe:be:a4:9e:
         8f:b3:6c:ed:ef:6a:3c:cc:d0:9e:72:53:69:94:9c:38:e9:66:
         da:0c:ac:32:da:17:31:80:58:f6:6a:b9:6c:fe:8f:b1:97:98:
         2b:f4:34:c0:fa:bf:29:a8:c0:b9:92:69:18:1b:2d:e6:cd:5f:
         f1:ef:d3:af:73:ca:4a:2c:37:7f:b9:8a:cf:99:62:78:55:62:
         80:7f:ae:6a:13:ec:49:b7:ad:d9:cf:a1:2f:c4:ed:64:bc:b1:
         8d:07:61:0f:b4:9e:82:1c:70:6b:ed:6c:e1:01:fc:04:60:e1:
         b0:fb:ed:a2:b5:51:ff:fe:35:29:03:34:3e:1a:f8:a3:cf:13:
         8f:e3:8f:15:5c:8c:92:37:bc:9e:43:cf:0a:0a:ad:e4:8a:7c:
         c7:2b:9e:f4:8c:b5:46:23:3e:66:80:03:8f:52:05:00:44:d9:
         47:e4:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:37 2026 by rpki-client