Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File:                     hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier:          4JWHmYlldz6Hqq/cDmN5/lsx6/02KvOiS9z4l4ej9Bc=
Subject key identifier:   7E:CF:36:3A:99:83:16:E7:A4:2A:52:FE:6A:A3:0A:04:9A:C8:6C:F1
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer:       /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial:       019D9A075BE8269B3A6FF82216EADD1D9956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number:          0C20
Signing time:             Fri 17 Apr 2026 06:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:06 +0000
Files and hashes:         1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: VQfYnNBtlF8ZabvggYHZ62fhb6Ito36lkuHiCOPP8Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:5b:e8:26:9b:3a:6f:f8:22:16:ea:dd:1d:99:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
        Validity
            Not Before: Apr 17 06:01:06 2026 GMT
            Not After : Apr 18 06:01:06 2026 GMT
        Subject: CN=7ecf363a998316e7a42a52fe6aa30a049ac86cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:fc:72:02:07:80:a4:21:fe:e4:39:79:2d:
                    b5:f6:6c:10:7e:8d:0f:a7:ad:f1:fc:5f:29:29:42:
                    65:c2:6c:2c:75:81:79:aa:fc:d8:3e:61:ca:cc:33:
                    9e:65:e6:91:08:2c:cd:61:25:96:67:74:71:cc:d7:
                    ab:ec:2b:86:bf:4e:c8:ef:f5:e7:7c:9e:bf:10:a4:
                    97:57:e6:4f:4f:83:01:95:8e:49:aa:6d:82:ff:7e:
                    b9:77:65:ee:55:12:0f:5a:fb:f3:a8:1c:c3:bb:03:
                    63:14:6f:f2:37:43:13:88:90:f5:00:00:25:4d:84:
                    f1:38:59:ea:fa:1c:e8:59:d2:33:6b:5e:04:af:0c:
                    ea:c0:f4:b4:10:4e:be:cc:ed:41:91:92:e3:9a:1c:
                    e7:95:68:bc:76:d5:38:b8:1f:a8:df:b5:b0:0d:d3:
                    e8:49:0c:af:0e:e9:96:41:d7:e7:11:4f:6e:47:3e:
                    8a:e7:16:de:17:1c:e1:a2:33:fe:d4:93:9a:6c:17:
                    9a:b9:05:ae:f9:68:aa:15:cc:77:e9:0c:06:8a:b8:
                    e1:3a:8c:61:9c:97:ad:36:c0:c7:ea:be:90:00:bb:
                    f1:d9:f4:b4:a0:6a:22:cd:5e:eb:66:9f:95:3e:1e:
                    c0:63:e0:06:31:0f:cf:9d:06:c3:3e:87:d5:d8:87:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:36:3A:99:83:16:E7:A4:2A:52:FE:6A:A3:0A:04:9A:C8:6C:F1
            X509v3 Authority Key Identifier:
                keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6f:04:a0:eb:8e:fb:ec:11:70:8a:1b:8a:08:70:71:76:00:
         fe:a9:3a:be:61:c4:7a:ec:0d:cf:9f:40:60:58:f6:0e:64:92:
         7c:94:de:86:3c:1d:63:ab:4b:58:60:47:ab:e4:c1:24:da:a3:
         c3:12:71:61:fb:59:d4:fc:c1:77:b5:cc:ec:aa:22:b7:14:bc:
         e0:74:f5:a6:66:8c:d4:0d:19:5d:33:50:71:51:9c:b2:5f:8a:
         01:07:db:d5:73:3e:2a:d5:e5:b1:6b:a2:ce:84:62:34:db:db:
         05:6b:b3:25:ee:45:fd:ae:ba:08:47:73:4f:cc:49:6e:8c:14:
         46:a4:21:bf:ff:28:7f:85:86:4c:52:93:0d:79:3e:e5:0e:53:
         d0:54:37:1e:d0:67:c6:82:05:b0:ea:4d:a1:4d:b3:e6:25:8b:
         52:63:17:22:51:74:28:e1:b4:7c:a4:94:2a:bc:86:d5:ed:de:
         aa:22:90:c3:03:81:00:11:27:2e:fe:10:4e:8c:9a:bb:b8:53:
         8e:3b:06:f8:b0:c7:6a:b8:06:4a:20:90:23:5d:49:a4:ea:cf:
         2e:10:24:27:3f:2a:cd:e6:bd:50:ce:9a:f4:a2:a4:df:63:91:
         2e:73:49:6f:40:66:74:ce:87:0c:b7:e8:4f:d9:86:32:80:7a:
         57:a2:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----