Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File:                     mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier:          sV+PQKOZ7WHSRjFaNfTZmLjiT+jhLtMGCbEAmqnndm8=
Subject key identifier:   17:14:CB:F5:85:5A:70:20:DD:19:25:4B:65:24:70:0C:4B:08:2A:28
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer:       /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial:       019D98F449B5B19381F39E2269098B66EE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number:          05C7
Signing time:             Fri 17 Apr 2026 01:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:39 +0000
Files and hashes:         1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: WJlIbMW8H7i8O/q+hTclF8rt9XMnFY4IXLFDI9JGbhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:49:b5:b1:93:81:f3:9e:22:69:09:8b:66:ee:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
        Validity
            Not Before: Apr 17 01:00:39 2026 GMT
            Not After : Apr 18 01:00:39 2026 GMT
        Subject: CN=1714cbf5855a7020dd19254b6524700c4b082a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:67:3a:c8:94:c1:94:a5:ff:8f:23:28:3c:
                    8e:ba:65:5b:46:ec:23:96:94:d9:94:6b:58:46:40:
                    f2:58:ec:c0:1c:a3:7e:81:87:84:98:d7:ad:49:1a:
                    71:03:37:9a:27:05:8b:f5:10:77:5f:d1:1c:99:82:
                    56:26:20:43:8f:55:b1:14:24:64:50:91:86:0b:6f:
                    ea:89:44:a9:4b:d5:c4:d0:eb:aa:70:2a:a0:63:82:
                    bb:73:1d:24:84:01:a1:c4:68:74:e9:7c:46:58:f9:
                    6c:17:0d:1b:3a:d4:09:1a:08:61:f4:25:c0:89:ce:
                    3c:f5:eb:4a:43:d0:a9:f1:65:9b:fe:73:21:8b:72:
                    90:60:d5:9f:71:d1:20:86:c5:3f:a0:f3:ac:45:80:
                    1a:6b:a8:26:5e:2c:71:b7:7f:b8:e1:ec:f7:fd:9e:
                    74:8e:32:31:89:65:4a:12:2d:45:ac:0d:ae:df:db:
                    60:b8:ee:69:3e:30:7a:f5:53:2e:6e:f8:af:f0:78:
                    3f:7d:2d:cd:b5:58:af:42:f0:4b:4b:7b:ce:df:f4:
                    2d:be:22:29:46:6e:3e:e8:e2:6b:e6:6a:45:62:4a:
                    f6:97:4e:e7:f8:87:c9:24:6f:3d:04:86:05:63:4a:
                    7a:27:05:f0:2e:ac:1b:05:54:7c:a8:59:6c:8d:f3:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:CB:F5:85:5A:70:20:DD:19:25:4B:65:24:70:0C:4B:08:2A:28
            X509v3 Authority Key Identifier:
                keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:af:24:33:81:9e:63:b4:0b:6c:78:1f:bd:8e:fb:21:1e:b0:
         c4:d7:2b:de:c9:39:2a:2e:87:70:1e:8f:40:59:3d:e1:7e:fe:
         69:25:12:6f:e2:94:d2:2b:b2:18:f8:cd:04:4a:0f:d8:99:29:
         fd:1c:a7:81:c7:95:41:b0:75:91:1d:91:5f:01:9f:b1:29:87:
         86:87:13:47:27:99:c6:c3:8a:46:a7:e4:9b:79:a0:c2:a8:91:
         23:69:13:79:01:d5:65:47:48:62:a7:4c:ce:f1:08:4e:2e:e4:
         67:20:8e:d0:4d:0d:4f:f7:e7:9d:35:ac:a9:ee:84:80:ae:f7:
         06:30:a3:3e:cc:89:0a:3b:61:3f:53:0f:1c:ad:cd:3e:ca:e6:
         da:58:40:68:76:fc:44:9e:1e:03:ad:68:ec:88:20:fb:87:cc:
         b9:b0:ed:26:57:50:48:61:58:83:4d:5c:ad:8a:c9:8c:99:fa:
         ac:3c:c0:f7:34:60:66:0c:75:b8:04:a5:bb:4c:19:10:fd:ad:
         5f:59:04:2b:f6:2a:17:e4:f2:0f:27:ba:f0:c3:0e:9c:49:84:
         ae:f9:a6:6b:fa:2e:dc:95:98:eb:15:2c:27:c3:ee:31:3d:b6:
         ea:79:71:55:33:ad:99:e2:b3:77:07:a5:58:22:ea:65:f1:94:
         62:3b:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:46 2026 by rpki-client