Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          0cJVhK57wNSbQGNc2BbP2SK0AdnQZUW6DrCQla4Ydik=
Subject key identifier:   EF:EA:10:0A:1D:66:47:EF:1A:DB:4E:1C:CC:AD:2E:F8:C7:FF:46:75
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       019D99628FD9CFA2205D81F6591A3D0FA418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 03:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:06 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: 69leLEob1Fcum2NZoTqB4KG8tsE8R8dUSugLVtA8QjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:8f:d9:cf:a2:20:5d:81:f6:59:1a:3d:0f:a4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: Apr 17 03:01:06 2026 GMT
            Not After : Apr 18 03:01:06 2026 GMT
        Subject: CN=efea100a1d6647ef1adb4e1cccad2ef8c7ff4675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:43:98:72:c1:42:8e:79:39:67:07:10:57:
                    28:c2:5b:ae:8a:14:b0:88:35:12:50:f7:3c:6e:0c:
                    d2:70:5c:53:8b:53:b6:b9:ab:29:c6:9f:81:11:a4:
                    12:7d:2c:be:38:bd:72:be:28:fb:b8:7b:49:cb:66:
                    66:ff:3e:51:00:1c:32:b1:5d:9d:96:3c:7c:17:bc:
                    ba:40:dd:e8:d8:fd:eb:95:87:3f:73:65:3c:9d:49:
                    e7:df:68:e0:72:34:ae:ce:13:76:77:3d:38:29:9a:
                    05:a8:71:ac:35:d7:89:98:8b:a2:7b:0b:eb:a0:4c:
                    89:91:67:d0:16:2c:d4:20:51:71:8a:87:c4:23:88:
                    01:5e:07:a7:51:a9:41:4d:62:59:82:9e:3f:ca:b4:
                    09:e5:80:10:cd:b4:83:05:d3:e0:9f:18:59:e8:15:
                    82:80:b4:8b:b5:26:45:09:69:77:48:b7:c7:10:27:
                    7e:16:a7:40:7b:53:83:44:af:c3:fd:e8:e9:d4:25:
                    1f:5e:55:8c:68:14:40:d6:f4:d7:27:26:73:d0:a5:
                    fe:2e:5a:9c:57:81:dc:a9:51:95:bc:91:5e:60:84:
                    52:81:25:8f:e3:e5:fb:8e:9f:cd:45:ee:b9:74:af:
                    78:7f:f0:4a:04:62:05:c8:08:87:a5:c5:9b:bc:c0:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:10:0A:1D:66:47:EF:1A:DB:4E:1C:CC:AD:2E:F8:C7:FF:46:75
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7d:28:ea:82:a4:8e:c6:41:02:fd:0d:1c:24:df:6b:5f:a0:
         ca:b6:1c:07:0f:9a:c9:db:2f:a4:c6:a0:35:8d:df:58:82:d9:
         93:f7:ba:9f:d3:f3:62:0d:12:e7:b7:79:ce:0d:c5:56:ac:bb:
         43:e3:a2:42:32:65:e2:84:cc:78:5b:4c:ea:9c:bd:a4:43:d0:
         b0:94:fd:fd:22:08:0c:fb:ca:70:ce:d8:b8:55:21:bd:46:a6:
         7e:e3:5e:e1:06:bb:2b:53:7d:84:1f:b5:9b:92:ca:23:50:0c:
         61:b4:90:de:fe:9e:8c:47:81:4f:00:40:cf:b9:5c:49:68:9d:
         ac:27:5c:2f:4d:3c:21:99:14:7a:eb:d5:85:bc:07:31:d9:5a:
         5c:b9:80:92:ee:e1:59:7c:cd:d5:5e:18:2e:b0:c2:f2:9e:aa:
         15:2d:10:26:fa:76:58:22:e6:5c:4f:f6:b4:2c:37:6e:99:9a:
         05:c4:67:64:29:da:1f:4c:c9:84:fd:02:a6:02:96:a1:3b:83:
         d3:bb:40:c0:72:30:1c:74:05:ec:91:f6:58:4f:de:69:d6:35:
         03:5d:b7:42:02:82:3a:8e:49:64:1d:2a:3d:03:74:ed:81:54:
         2d:3e:95:21:7d:78:c6:53:c4:ec:8d:f1:be:30:c0:33:fc:2a:
         8f:fc:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:21 2026 by rpki-client