Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File:                     cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier:          JHHz7IA+koheq/wKBZU4XkHzHMDuIuS0k39DUJOdmus=
Subject key identifier:   C5:90:B6:D8:56:5F:0C:EB:E7:A8:CA:82:72:B0:1F:6E:86:AE:65:61
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer:       /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial:       019D98F531D4FA71E52B46D7F46D903FE14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number:          1852
Signing time:             Fri 17 Apr 2026 01:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:38 +0000
Files and hashes:         1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: /uAHz7LntgNU+gT8Wg2z+21Ykq/VLWySpsgjxy7OoQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:31:d4:fa:71:e5:2b:46:d7:f4:6d:90:3f:e1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
        Validity
            Not Before: Apr 17 01:01:38 2026 GMT
            Not After : Apr 18 01:01:38 2026 GMT
        Subject: CN=c590b6d8565f0cebe7a8ca8272b01f6e86ae6561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:1e:5a:47:9d:d9:0a:9f:1a:b3:fa:86:ae:
                    44:35:0e:3c:83:89:94:6b:0d:51:74:42:f5:47:8f:
                    9f:37:42:46:44:81:5f:ec:22:db:f2:5e:49:34:78:
                    eb:eb:04:87:ce:6c:c9:14:1e:a9:dd:ca:90:04:16:
                    41:86:d6:a9:13:20:b5:ff:cf:13:69:14:94:8e:06:
                    4f:36:af:67:75:2b:3c:48:8b:02:dd:6c:48:f4:f4:
                    97:59:df:ae:59:30:ef:22:84:33:bd:e4:51:ac:b3:
                    bb:b4:89:b7:20:a9:43:71:82:c0:60:b7:70:21:8f:
                    e4:82:a2:1c:ce:ac:4b:ca:cb:85:69:c6:33:7e:cb:
                    54:fb:28:95:48:88:11:87:5b:15:a4:cf:09:55:29:
                    b6:87:f0:02:aa:94:a1:df:b7:7d:41:47:e8:ef:8a:
                    b9:bc:f7:cc:ee:9e:98:19:8b:5c:2c:cf:c3:92:70:
                    3b:58:3e:57:76:0b:6a:f1:5b:89:d6:3b:22:45:39:
                    f9:ad:ca:f2:08:d7:01:c0:1c:e3:5f:b4:4e:b7:52:
                    09:04:51:7b:43:f1:d0:8d:0e:16:0d:e5:ba:6b:59:
                    20:65:37:39:2c:79:f4:fc:37:42:81:57:9a:bf:60:
                    71:9f:fb:5a:0c:2c:6e:43:88:86:5a:22:9a:56:84:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:B6:D8:56:5F:0C:EB:E7:A8:CA:82:72:B0:1F:6E:86:AE:65:61
            X509v3 Authority Key Identifier:
                keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:7f:6e:7f:d1:ab:23:47:6f:13:e3:a1:a0:0e:93:17:2a:
         1e:87:6b:75:f9:1c:bc:37:00:9c:45:68:e4:4f:b3:cd:82:9c:
         ce:f9:59:9e:03:e1:6e:f2:95:a2:8d:27:c7:8f:be:c3:60:f3:
         b7:ac:d8:66:d7:6a:74:0b:97:5c:2e:3d:97:5d:c1:3d:46:b6:
         52:c8:51:fd:5c:a7:aa:4a:b7:8b:18:bb:20:eb:74:da:3e:54:
         96:fe:02:c6:31:92:e5:c1:b8:bb:6d:8f:9a:82:96:e4:90:de:
         1c:60:29:d2:eb:0a:2c:84:f4:6e:ed:82:9d:ef:e5:63:99:38:
         4e:79:59:a4:09:15:6a:7b:77:0e:39:b5:ff:a3:0b:6e:18:81:
         5c:b0:88:2e:d6:3f:21:a1:b1:8f:06:a0:3f:c0:3f:20:0b:2c:
         29:20:a0:02:a3:c1:84:84:26:a4:a8:9e:7a:6b:02:4f:97:83:
         48:6e:fa:36:21:15:9e:a4:c4:b6:39:23:22:d7:1f:ef:43:fd:
         0e:3f:bc:b7:f6:87:5c:a8:89:ab:3e:31:92:03:98:24:42:b4:
         41:d4:12:35:1f:2c:93:92:b4:2d:df:f5:d5:e2:9d:3a:9a:ee:
         a7:57:85:59:55:03:cc:04:98:c8:0a:bb:80:b2:66:48:ba:7b:
         fe:75:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:39:44 2026 by rpki-client