Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          7DHYhCAmsqjGai/YKjcoqH0t2ankdDgSO1hXmEgOEVQ=
Subject key identifier:   CC:06:D3:BC:51:43:5A:05:14:1C:80:81:56:D6:51:3E:38:19:65:30
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019D99630E93CD35E16287D539F84BEBFEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          05AD
Signing time:             Fri 17 Apr 2026 03:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:38 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: 1qxxYPbhFm9K5UilscVcK/bbfQss99EWl+ry8/5J/lA=)
                          2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=)
                          3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=)
                          4: O5W4X-XBYeWAvMUfvIjNuACgFkg.asa (hash: 7Z8pxKRz4YvwT86qT++qRx70dU1ZdttXNNnewjJqgt0=)
                          5: iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa (hash: KlQBY6M94I1QY6KQo3uEfY4PPExUBLB4IqDYeIRa6Gw=)
                          6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:0e:93:cd:35:e1:62:87:d5:39:f8:4b:eb:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Apr 17 03:01:38 2026 GMT
            Not After : Apr 18 03:01:38 2026 GMT
        Subject: CN=cc06d3bc51435a05141c808156d6513e38196530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:0f:5a:04:31:59:f1:47:fc:c6:0b:92:41:
                    a7:26:08:c5:f2:6e:88:cd:94:2b:7b:5d:1e:7c:f1:
                    70:32:4d:93:49:07:0a:61:79:d7:50:85:5e:26:7d:
                    ce:75:c1:4a:79:09:48:02:03:ca:d9:0c:70:bc:12:
                    81:92:f8:2a:e6:cb:24:5b:59:99:ba:18:d1:1a:1f:
                    05:e7:e6:6a:6b:de:85:0b:3a:ba:7e:57:2e:e2:0f:
                    63:06:2b:38:f5:cc:6f:46:13:68:1a:1e:4c:77:bb:
                    01:61:31:75:99:79:48:67:1b:8f:d4:ad:de:cd:58:
                    c7:2a:aa:80:ea:f7:61:fe:31:f7:87:19:87:83:2b:
                    95:06:e7:21:9a:47:ce:f2:e0:a1:24:46:3e:f3:86:
                    c0:8d:d3:83:89:5e:2b:07:c2:91:19:fe:cf:69:a7:
                    2f:b7:e9:52:a0:a4:09:ea:14:6b:1f:f4:19:35:8d:
                    5f:69:43:fb:75:73:c7:e3:06:b6:55:b4:fc:e6:8b:
                    af:52:c9:a9:b5:f7:8b:ab:ff:f8:2e:eb:02:c4:d0:
                    7b:e8:59:02:ea:4a:74:3c:2d:c1:97:bc:0c:9f:c3:
                    f3:6d:df:4e:9b:b8:f1:a4:0b:83:ba:30:52:13:ef:
                    aa:ae:bd:f3:28:05:64:11:5f:aa:75:03:23:80:16:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:D3:BC:51:43:5A:05:14:1C:80:81:56:D6:51:3E:38:19:65:30
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:36:51:6e:00:fc:be:89:f9:7b:fd:f5:2c:20:38:98:15:dd:
         bc:ac:be:16:12:af:eb:0c:7c:20:68:c2:62:48:15:34:e6:39:
         c3:e5:73:ea:45:b2:9a:08:cb:c9:4b:f6:32:f2:84:3b:d3:2d:
         5f:e6:04:33:f3:28:6e:f0:ad:58:8c:b3:82:84:13:99:fb:e4:
         50:f7:42:32:fe:96:42:87:48:43:3a:09:7a:20:7e:19:43:ba:
         d1:95:cf:97:fc:23:34:64:46:5b:81:d9:ef:e2:b9:9a:0d:ff:
         61:98:9c:aa:9d:fb:cd:f4:bb:a0:a6:61:af:26:81:13:af:ef:
         57:34:1e:14:c0:dc:85:2a:fb:b3:75:7d:c2:9d:cb:1a:85:1a:
         01:ef:94:65:6e:18:b6:10:36:b7:1c:1a:d1:0b:60:5f:b9:c0:
         0c:10:09:1f:bc:a5:76:0f:41:67:72:c0:42:52:25:52:a0:fd:
         2b:54:79:01:6a:c9:2d:d3:58:7d:90:e7:24:e9:15:84:33:14:
         9e:6f:ad:2b:09:af:ed:37:2a:e3:ff:27:21:c0:38:5a:3b:dd:
         24:f0:5d:2d:c8:38:92:98:47:57:2b:8a:b6:5a:5e:44:97:66:
         99:ef:93:0a:be:8a:02:05:99:7d:13:8f:bf:60:4f:bd:15:5a:
         ca:a3:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:11 2026 by rpki-client