Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          OicU2QBgU4aPJFmHcuIiWd5SG2ISMHNSPCuGa91UZ2c=
Subject key identifier:   FD:3C:84:A5:CC:B6:AD:E5:46:EA:F4:C1:68:16:98:98:D6:48:19:A0
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       019D9B1993DAA02455647FB7E473D9261362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          0611
Signing time:             Fri 17 Apr 2026 11:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:37 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: GCQqJT+8ujogPhrgVXvHXm4yxe12v0Tqhqo3K8dM+d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:93:da:a0:24:55:64:7f:b7:e4:73:d9:26:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Apr 17 11:00:37 2026 GMT
            Not After : Apr 18 11:00:37 2026 GMT
        Subject: CN=fd3c84a5ccb6ade546eaf4c168169898d64819a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:59:a6:79:5a:04:8f:e8:4d:54:9e:0b:15:
                    87:23:e9:84:61:42:93:94:1a:07:69:66:83:b9:97:
                    38:63:1b:08:7d:cc:59:62:0d:7f:7b:3c:1d:25:23:
                    c4:9e:84:40:c9:ad:b2:b1:8e:a2:9e:25:e5:db:53:
                    15:a2:e5:03:58:cb:8f:69:0a:13:da:4b:28:5d:ea:
                    92:4c:d8:d3:90:59:61:96:d2:42:f1:b7:38:a2:56:
                    31:cb:44:cb:8b:cd:63:cb:db:e2:7e:2d:f2:c5:eb:
                    c0:04:33:bb:8c:37:e6:af:cf:71:df:7b:51:a6:d5:
                    1b:3c:e8:84:40:da:ef:8c:12:58:80:0e:e0:f4:c1:
                    4c:05:3b:f6:8f:ff:fa:d2:45:49:c7:05:3d:82:64:
                    90:c5:e9:c1:19:e5:41:30:51:06:ed:f1:de:99:86:
                    36:8a:57:67:10:1a:24:de:79:2d:f9:9c:1a:4a:d7:
                    0c:95:72:c3:8b:cb:5a:67:4b:b4:35:14:c0:2c:6a:
                    d6:25:7f:2d:20:9c:6b:67:16:19:90:6e:ce:27:d8:
                    e4:ce:a6:7a:89:09:71:f3:42:65:ed:3b:75:11:08:
                    2a:2a:17:64:d1:68:ac:df:06:66:8c:cc:c6:41:39:
                    8e:0c:ae:65:e8:8a:74:8e:e8:66:4d:26:57:81:2c:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3C:84:A5:CC:B6:AD:E5:46:EA:F4:C1:68:16:98:98:D6:48:19:A0
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:26:1e:b9:27:6d:b6:0e:41:df:b7:da:8b:74:c5:d4:51:
         9c:5b:da:9c:85:d8:2d:29:88:91:a1:db:d7:c5:55:0e:58:f2:
         c2:5c:04:f7:ab:4e:c1:22:ad:db:3f:e5:0f:46:23:a7:bf:fe:
         16:6f:ea:29:45:17:d4:70:9c:1e:c6:76:00:5d:ab:02:8b:37:
         ac:39:f8:d7:b2:21:4a:05:8f:cd:09:5e:3b:9f:5c:0e:5e:05:
         9f:35:93:47:3f:bb:35:4b:ac:dd:d8:3a:db:e1:e0:f2:ec:52:
         58:5e:6e:88:b0:d1:e8:b7:0c:e0:2f:4c:0c:d7:26:b0:4d:9c:
         21:6e:b0:d1:26:bb:ee:d4:e3:e6:37:52:b8:d2:98:92:f7:82:
         0c:0d:0c:32:a8:d2:00:22:2e:b9:fd:ec:0a:41:f1:e4:1b:d7:
         24:3b:74:ef:3d:2a:e6:c8:97:40:e1:17:d6:8f:a3:61:6e:06:
         af:42:c3:b6:1b:72:c5:f7:c2:f1:50:ba:52:b2:c8:04:9b:be:
         e6:fc:26:c9:01:4e:7d:5d:02:83:f3:aa:7e:60:0b:e3:6f:eb:
         ed:76:6c:84:ca:8d:01:c4:37:3b:88:e1:c0:71:27:e1:74:73:
         e2:1f:45:c4:08:41:fa:c4:7c:5c:aa:a7:ea:a1:ae:04:f3:b7:
         c1:47:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:53 2026 by rpki-client