Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File:                     i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier:          G4pTgjDxREgXKhkeNZTROgX4CbdykeP32yUnfUt4Xkc=
Subject key identifier:   F1:B7:1C:F6:33:BD:67:3F:A7:C6:B3:2C:3D:72:52:B5:01:49:A8:9B
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer:       /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial:       019D98F4A95090605738244CCE08A98B04D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number:          075E
Signing time:             Fri 17 Apr 2026 01:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:04 +0000
Files and hashes:         1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: bGQ4kndd4fpW1wr07ApyWm3PLXS+yM7OZ8ZmhnQpVBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:a9:50:90:60:57:38:24:4c:ce:08:a9:8b:04:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
        Validity
            Not Before: Apr 17 01:01:04 2026 GMT
            Not After : Apr 18 01:01:04 2026 GMT
        Subject: CN=f1b71cf633bd673fa7c6b32c3d7252b50149a89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5f:78:95:63:22:18:d6:8d:ca:39:d3:ad:0b:
                    e5:a4:30:85:ef:c8:17:1c:b6:c0:b8:56:b5:e2:73:
                    e0:1a:70:98:46:8e:63:c8:da:36:17:ef:eb:85:d0:
                    c7:af:80:7c:f2:53:a2:eb:6a:55:28:ae:30:c3:72:
                    bb:d0:22:c8:66:a4:c4:90:21:4a:63:b9:76:fd:03:
                    13:f4:ec:77:54:70:6c:90:3e:9f:41:e3:2b:c7:a2:
                    f0:9e:c8:87:f2:a2:0c:f5:0a:57:86:9a:af:45:dd:
                    2b:c7:7c:a8:c4:9f:72:94:3a:0e:13:83:1a:97:1b:
                    b2:e6:1d:44:e9:73:82:09:a0:81:b3:5a:04:7c:9f:
                    ae:92:df:5a:21:bb:24:00:c6:04:e8:25:9d:d6:4b:
                    f3:fe:36:2a:ec:99:44:ec:bc:46:24:b2:f3:2a:33:
                    61:50:27:60:dd:d3:73:5b:92:11:4f:e1:28:cd:f7:
                    70:e3:eb:95:dd:d0:28:1b:f2:e1:f8:a5:81:3b:9b:
                    53:88:d8:74:cd:be:68:47:21:52:bd:18:58:ae:68:
                    0f:f9:e3:d1:ef:f3:3f:09:47:07:39:e1:13:5b:2e:
                    65:da:25:53:83:3e:e5:62:50:8f:a5:00:97:dc:1d:
                    b6:d0:79:1d:9f:39:92:a9:67:a6:33:1d:17:f2:b1:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:1C:F6:33:BD:67:3F:A7:C6:B3:2C:3D:72:52:B5:01:49:A8:9B
            X509v3 Authority Key Identifier:
                keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:9f:ac:07:39:47:dc:e9:80:40:09:28:b0:82:4f:25:5f:
         fd:78:b9:9b:09:e3:7f:35:eb:35:48:d8:d8:cf:d4:5d:dc:2c:
         83:ef:18:05:75:e3:32:b4:5a:40:9b:9b:35:f8:5e:cd:2b:dc:
         2e:7b:8f:84:ff:01:ed:af:23:f0:5b:82:a2:b0:8d:b2:a3:c8:
         7e:4f:d9:67:92:54:aa:61:3f:51:a7:52:2c:6d:21:0b:38:6a:
         91:eb:f4:fa:44:47:b5:0d:12:0e:1f:e4:8f:ba:da:68:c9:bc:
         95:bf:4d:87:85:69:22:23:05:30:cb:eb:8a:1f:65:e4:5f:df:
         10:95:54:cf:d3:c0:66:26:6c:47:66:9a:29:85:b3:91:1e:03:
         71:86:56:14:7c:b7:17:77:5f:21:19:7c:79:9a:aa:2d:7b:f8:
         fb:2f:88:7f:24:44:76:a0:e0:f5:6c:9c:14:15:fa:da:64:ec:
         ea:09:ee:a1:8a:02:cf:53:a8:bf:b9:8b:13:51:1a:42:ba:2a:
         3e:34:5f:d9:46:66:e4:38:11:ea:4b:26:e4:2e:7c:32:90:e1:
         f5:ed:1e:3b:4f:f7:04:58:14:e1:5e:89:87:ef:db:a7:65:53:
         5b:a2:56:e1:a9:ac:a1:9e:de:d9:c8:39:4f:ea:cd:7d:5e:72:
         45:c7:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----