Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          iuOBSqzcg+drKTI4Forqkq736TkiiDuzB4xLj+ZP3Yc=
Subject key identifier:   B5:0E:DF:52:93:DF:69:B6:36:5E:34:17:0C:88:FC:4D:14:08:CC:25
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       019D9B5088E6452BC58D5B546CEEA230F365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          1119
Signing time:             Fri 17 Apr 2026 12:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:39 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: GNKPZ+DdkyYDJPfb2lb3VrPFHByBYWX8sW8gfgbRVgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:88:e6:45:2b:c5:8d:5b:54:6c:ee:a2:30:f3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Apr 17 12:00:39 2026 GMT
            Not After : Apr 18 12:00:39 2026 GMT
        Subject: CN=b50edf5293df69b6365e34170c88fc4d1408cc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:9e:1a:31:dc:79:00:68:3d:e1:de:b8:eb:
                    c4:d9:7f:1e:4f:4c:d8:60:1c:b3:23:a3:ac:a2:6b:
                    e1:2f:a1:61:1a:83:f7:3e:a2:d1:30:5c:b5:b0:31:
                    da:92:3e:ef:b5:a6:34:23:5c:ba:28:9c:de:95:ea:
                    b6:f6:d7:c0:69:d4:5d:f9:3a:27:dd:ab:e3:70:28:
                    31:f2:0e:66:b8:a3:4d:66:64:c9:a9:2b:82:2f:82:
                    5e:e3:f0:3d:c0:77:fb:ea:20:b7:7b:32:dc:8c:6e:
                    4f:fa:ef:59:79:c0:27:2f:cb:30:2c:9e:be:0e:c1:
                    a8:fc:30:b9:56:29:d1:96:a3:fb:7f:ef:51:a7:c4:
                    98:19:9c:38:86:1c:94:e7:30:50:2f:4c:97:4d:82:
                    d4:95:b9:3c:7b:07:ff:8e:02:35:1b:e5:d3:bd:31:
                    85:56:77:52:3f:2c:95:30:45:c0:a9:f4:32:41:84:
                    72:bd:e5:77:21:ed:7a:27:4a:f0:2c:bf:cf:ad:5b:
                    78:52:6d:d9:0e:c4:a1:ec:b4:61:0a:00:4a:10:6d:
                    f9:f8:2d:39:9c:7c:f7:c4:37:01:7f:e5:89:4c:64:
                    b4:89:21:25:39:8a:48:11:e4:15:41:64:94:4e:55:
                    63:8e:02:f5:c3:16:2b:2c:3d:f8:a3:16:a6:d1:20:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0E:DF:52:93:DF:69:B6:36:5E:34:17:0C:88:FC:4D:14:08:CC:25
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:89:a3:8b:76:6d:41:ac:6b:52:7d:3e:6d:a5:3a:86:0d:
         68:9a:21:69:89:92:9f:7c:80:a0:8e:2c:be:1d:29:c6:46:55:
         03:8a:eb:13:f1:79:8d:2a:a9:e6:f3:2f:06:67:01:0d:1c:5e:
         0e:1d:2a:98:48:4a:c8:f7:bb:93:f0:9e:b5:73:54:2c:2b:32:
         9d:69:1f:ae:08:78:90:67:52:84:0c:a3:fe:22:a8:f5:cb:b7:
         69:2c:60:fd:ca:c7:b1:74:b9:95:df:09:ef:bf:8c:97:b8:d4:
         bb:bf:ea:34:6c:d0:f6:16:37:fc:04:bd:bd:7c:2e:e2:86:44:
         f3:cc:77:1f:d9:a1:96:14:75:6a:4e:e3:fd:10:bb:71:a9:13:
         75:ce:b8:55:50:f0:d4:c1:24:2b:84:58:25:99:8a:05:1c:48:
         6d:98:a7:6e:09:15:0a:03:44:00:30:0f:7f:1c:eb:41:a2:44:
         60:1a:e1:a4:11:74:c8:e9:e9:f8:64:70:19:54:99:f0:02:7c:
         31:e5:23:e5:cd:06:b2:60:e0:92:5c:bf:4d:89:74:9b:b9:35:
         b2:90:f2:fa:2e:d3:a8:1b:d7:64:45:72:bb:63:9b:b6:06:12:
         32:d5:3c:49:0b:45:88:f4:2f:05:d7:e4:85:e0:b0:03:79:b8:
         c8:33:bf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:01:49 2026 by rpki-client