Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          ml3jotj68cvxKkKX0C5c+sYvpW2A3BoXsfhCtudJq9U=
Subject key identifier:   50:B8:13:B3:A3:90:8E:7E:85:B0:C2:EB:72:CD:B8:AF:BC:50:25:F3
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       019D99D002F1F3CA4CF6BB92B2AB3AEDC65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          11ED
Signing time:             Fri 17 Apr 2026 05:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:39 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: xTc9EHpc5FNEqC6lTHfLMoZBZ7rNE6vHJ3zFfpek6dE=)
                          2: qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (hash: N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:02:f1:f3:ca:4c:f6:bb:92:b2:ab:3a:ed:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Apr 17 05:00:39 2026 GMT
            Not After : Apr 18 05:00:39 2026 GMT
        Subject: CN=50b813b3a3908e7e85b0c2eb72cdb8afbc5025f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:5b:2c:0e:e0:15:0a:2f:ee:b3:89:f4:71:
                    ce:0d:67:5a:2e:26:56:18:f9:e2:9a:5d:84:d1:be:
                    22:9d:ac:6b:15:59:e6:66:e2:03:9f:f2:41:7e:fd:
                    98:33:7c:53:44:40:c4:a4:22:6e:bb:99:c2:bb:c5:
                    96:7d:85:41:6b:05:b4:d4:94:e9:aa:d7:56:85:91:
                    fa:2a:7b:1b:f6:60:7d:b2:9d:38:f9:16:bb:f1:c0:
                    04:25:f7:c5:8c:f3:49:ff:83:bc:28:db:0f:35:de:
                    c3:61:71:35:f8:a7:d3:b5:9b:00:76:91:d4:17:f2:
                    6f:25:28:87:82:e8:32:54:4e:df:2d:51:a2:74:e6:
                    58:07:bc:5f:01:75:f8:15:8a:12:a1:6f:33:6a:43:
                    04:3a:a9:aa:57:35:da:bc:32:ee:98:5f:28:da:41:
                    d1:86:31:4d:d6:45:07:c3:de:fe:91:cb:c6:54:11:
                    31:f8:45:5f:cd:b6:59:f0:fd:e8:bb:b7:f9:ff:1e:
                    f9:d7:58:11:1e:ab:e0:8f:12:13:c6:e4:86:a6:b8:
                    4a:60:8d:a4:36:b9:eb:22:36:9b:34:9b:e9:d0:25:
                    88:e4:d0:c0:4b:30:6c:7d:d0:4a:74:b0:fd:94:83:
                    d0:70:fd:89:d8:4e:c4:cc:2a:55:c3:24:e8:ca:f6:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:13:B3:A3:90:8E:7E:85:B0:C2:EB:72:CD:B8:AF:BC:50:25:F3
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:dc:13:8b:9d:17:f6:e8:62:13:c8:cf:63:46:b3:e8:a4:
         b1:ac:9b:98:ae:9d:fc:04:b7:3b:49:52:5f:9b:90:d3:69:ff:
         38:4c:e4:0d:a9:99:70:27:73:6c:67:34:5d:24:64:b4:39:11:
         86:a7:7a:f0:f1:ff:b5:c2:d8:35:02:a8:6b:36:af:e3:10:b5:
         86:5d:d9:5d:2c:52:e5:64:e7:20:82:8e:c4:e7:6f:58:b1:54:
         51:60:1e:2a:8f:e5:b4:e4:b7:15:4f:43:f8:56:0e:2a:64:4c:
         4b:45:b6:f5:f0:12:5c:ad:14:a2:81:db:9f:86:07:37:04:73:
         5c:a5:34:ee:d5:04:5d:6d:7e:5b:d2:39:fa:6b:89:40:2d:50:
         20:76:5f:a2:92:b3:49:5e:8a:a5:0e:2c:16:61:97:9d:ac:4e:
         57:d6:be:8b:39:b9:ce:1a:f1:fe:5d:72:60:b2:36:8d:39:1a:
         d4:e4:bb:fd:f9:22:ce:98:40:5f:70:48:30:59:e9:ac:af:37:
         7c:d2:12:c5:0c:ba:59:6e:9a:93:4b:fe:b4:72:22:dd:b3:a6:
         9f:1d:13:51:16:71:3d:bb:c1:d4:af:cf:1e:1c:08:a3:78:78:
         aa:a0:ec:57:f7:fc:be:e0:1c:5b:df:21:b7:d0:4f:63:df:cc:
         42:ec:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:15 2026 by rpki-client