Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File:                     mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier:          K8vptuh3Ryh/X9VSGEmrbUwmW9Yz0g8VxA7oXi/0XWo=
Subject key identifier:   05:53:7D:7B:8E:86:61:F1:69:6D:41:4A:0F:98:00:D0:27:CE:4F:7E
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer:       /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial:       019DA2D33B1418FCA88DD546A4ABC3597055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number:          079A
Signing time:             Sat 18 Apr 2026 23:00:45 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:45 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:45 +0000
Files and hashes:         1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: jo9kOF0kr0in70fbE1kAc3L2QswOTn5/UUGOMfexETw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:3b:14:18:fc:a8:8d:d5:46:a4:ab:c3:59:70:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
        Validity
            Not Before: Apr 18 23:00:45 2026 GMT
            Not After : Apr 19 23:00:45 2026 GMT
        Subject: CN=05537d7b8e8661f1696d414a0f9800d027ce4f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:02:d6:96:52:c8:db:28:e6:e4:29:18:24:
                    65:8a:d3:54:9c:48:c7:b7:2a:16:46:60:d0:68:c9:
                    98:79:a3:24:21:66:55:d0:b2:44:2f:b3:34:e3:18:
                    f4:46:48:33:98:8e:3a:f3:2a:cf:39:0c:93:82:49:
                    7e:a3:7e:a1:94:28:c7:b2:77:b1:73:73:23:fc:c5:
                    99:a2:f9:56:c1:6b:99:30:d2:f5:f9:20:3f:d7:8e:
                    47:83:21:28:98:56:eb:7c:88:16:a4:34:56:95:c3:
                    e1:7b:a8:ee:74:18:f4:b8:26:5a:27:42:7b:1a:d6:
                    5e:5c:09:80:6c:c8:4e:67:c6:54:2d:03:00:ef:62:
                    99:14:c2:15:f8:92:95:73:de:e6:35:c4:d3:3e:ae:
                    65:84:0c:a4:82:21:da:83:7b:48:e7:63:ff:5e:3c:
                    df:c1:20:b7:da:09:98:63:e9:29:19:6b:99:6f:26:
                    25:54:c2:02:19:3c:7b:58:1e:41:83:ea:fb:a5:ed:
                    9c:83:be:2e:b1:45:32:9b:05:19:2b:60:0c:7e:ba:
                    8d:21:51:6c:92:2a:c2:e2:08:d7:91:00:3e:36:bf:
                    2e:64:ef:df:74:14:58:9a:64:da:69:e5:e7:ee:7f:
                    be:67:8e:63:17:4a:88:82:82:2a:b1:01:27:95:93:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:53:7D:7B:8E:86:61:F1:69:6D:41:4A:0F:98:00:D0:27:CE:4F:7E
            X509v3 Authority Key Identifier:
                keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:53:2c:ae:c5:20:63:64:69:1a:30:6b:46:5f:12:89:75:
         39:f5:63:47:d6:ab:d4:ab:9e:6c:46:d6:29:15:c2:64:28:c1:
         4e:da:89:b7:90:46:0a:d2:1b:43:31:7c:08:b5:8f:e9:c2:a6:
         7a:29:5a:3d:4e:af:b7:7e:e4:3c:7b:41:97:ef:72:33:e0:83:
         a9:f0:a3:2e:dd:a1:b2:23:26:73:47:8b:4e:82:3b:9f:75:ae:
         91:33:57:63:ea:90:67:21:78:e5:31:5c:e2:ef:72:a4:ef:a8:
         3b:45:02:22:4d:16:8f:df:b6:c3:ee:ba:56:7d:31:68:9d:5d:
         49:31:eb:6b:10:9b:7f:45:d2:4c:c7:b4:88:0e:8f:80:c4:04:
         7a:c7:c5:30:9c:01:cc:53:8a:8b:a8:5f:a9:a9:c8:09:43:7b:
         e6:3d:b8:b6:19:ed:40:ee:a2:f4:82:63:70:03:c6:18:dc:1c:
         f2:db:1a:b5:4c:c9:0d:83:bf:ed:62:16:fc:ff:ac:f8:93:3c:
         d8:3e:b8:6c:48:57:81:18:3f:84:a0:48:e6:c1:af:bc:b7:e1:
         37:e4:2a:8b:ce:2f:05:03:f3:0b:7b:91:62:53:30:48:1c:18:
         f6:ef:58:bc:27:54:26:17:b3:13:71:f9:89:e4:8a:3c:49:72:
         d7:62:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:46 2026 by rpki-client