Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          5K/iN+0MFzDBhcGe0ahxkP9ZJYivkuEkSaJ++CUM9U0=
Subject key identifier:   CD:20:19:82:38:E0:89:36:0F:2E:46:F6:E0:15:A5:28:13:CE:C0:EC
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       019D9A3F0295F7678EA8873956E8122AD95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          1439
Signing time:             Fri 17 Apr 2026 07:01:53 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:53 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:53 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: 46ErSbi99qMcU7c9tEJJJHhLlZbshaEoD8Lj/QeesQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:02:95:f7:67:8e:a8:87:39:56:e8:12:2a:d9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Apr 17 07:01:53 2026 GMT
            Not After : Apr 18 07:01:53 2026 GMT
        Subject: CN=cd20198238e089360f2e46f6e015a52813cec0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:40:78:ba:f6:61:a7:d4:a6:9d:fb:19:bc:
                    cd:9e:c0:0f:bf:68:0a:ec:a5:27:88:6a:7a:7d:b4:
                    f5:61:fb:6e:7f:b4:65:78:62:bf:0a:5b:5e:03:f5:
                    2e:3e:03:90:df:f5:19:cf:9e:84:83:15:30:78:cd:
                    17:1b:0e:e7:58:5a:b5:de:96:93:33:61:87:34:de:
                    2b:8d:5e:76:8c:1a:94:9a:1b:a0:53:2f:03:89:e5:
                    6c:c4:1d:d5:19:d3:2d:99:23:33:7a:54:05:62:cd:
                    5c:5e:94:fe:3d:0a:8c:e7:cf:0e:b4:20:88:dd:d8:
                    bb:7c:1d:de:32:66:4d:d4:f8:5e:fe:95:d5:70:22:
                    41:90:06:5b:ea:4f:56:ba:49:96:b0:8f:91:36:bb:
                    46:64:d2:43:d5:5a:21:74:d9:cf:3b:db:b3:24:a9:
                    2f:01:d2:04:0a:b7:cb:2b:8a:fe:3c:8b:2e:37:76:
                    9b:d0:24:bd:f5:61:cb:93:a7:7c:d0:c4:1f:34:90:
                    a4:63:4a:9d:25:2f:a7:4a:fd:c2:80:1d:9c:90:d1:
                    bb:15:68:34:c4:45:2b:86:63:5c:07:b7:63:4a:4e:
                    a4:e7:82:7a:e0:a4:e5:eb:94:3c:03:74:67:b8:c6:
                    fc:35:7f:77:82:0e:2c:93:b5:ae:7a:5b:93:54:ae:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:19:82:38:E0:89:36:0F:2E:46:F6:E0:15:A5:28:13:CE:C0:EC
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:05:66:b7:cb:f3:30:d0:01:4f:a8:52:53:49:a0:1b:15:
         68:07:67:4b:7e:45:fd:46:c7:00:d9:cd:50:6c:48:f2:48:e1:
         75:0c:50:f2:a3:fd:f0:df:0e:18:5b:51:98:26:33:d1:51:54:
         93:81:24:cb:42:d9:a0:de:f6:d4:e3:f2:81:87:4c:f2:75:92:
         a4:62:e5:ed:a0:80:71:66:4c:44:7a:13:fb:c2:3a:f9:70:69:
         c3:66:e4:30:aa:39:02:ee:58:a1:7e:73:70:1c:d9:d4:9c:55:
         08:b4:b3:0e:19:80:07:22:d6:be:0c:33:89:3f:db:d4:cf:90:
         d8:ee:2c:e7:c1:aa:0c:b1:17:82:e1:55:22:46:0b:38:6b:60:
         f6:25:04:0f:e7:fb:cc:2c:18:c6:f5:b3:29:22:12:14:7d:e0:
         50:1f:f1:67:0b:ac:96:a9:cd:d1:58:12:a1:1c:bb:ad:67:96:
         fb:8f:ce:57:48:1e:b5:8c:92:d4:9e:41:98:c4:57:17:6e:ff:
         05:b3:f3:dc:ed:d5:a5:9f:4c:d7:03:ec:9b:ac:62:ff:9b:b6:
         79:52:a2:cc:3e:34:0c:fc:b1:fa:57:00:42:09:81:5d:f4:7a:
         99:5d:6f:12:30:e0:50:6b:40:aa:44:53:bc:ef:45:0a:ac:de:
         05:f2:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:27 2026 by rpki-client