Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File:                     e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier:          rfqi9XVUSw0PEWc6TuMWh3zQg1sFahM5ualVnLqnsYE=
Subject key identifier:   13:A2:39:A7:A6:F9:41:B1:BD:43:CB:7D:01:DB:8C:64:C8:90:CF:E3
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer:       /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial:       019D98F5240E4B26C6B3858A05000F740095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number:          0F91
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: Dn3oSA2X0J7Euqxi4Tf8xaRf0FnvTuC/uturgDZ/dWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:24:0e:4b:26:c6:b3:85:8a:05:00:0f:74:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=13a239a7a6f941b1bd43cb7d01db8c64c890cfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:cf:f7:5a:da:5b:57:03:2d:3e:71:af:2c:
                    97:20:ed:95:d1:c1:14:d1:ed:40:88:af:07:0e:34:
                    3e:c6:4f:aa:ba:58:a6:e0:31:ba:ad:0f:83:94:d0:
                    02:e1:79:d5:20:83:a9:0f:59:ab:b6:f1:46:e2:8a:
                    0d:cf:77:16:e7:f7:f9:46:03:cb:83:89:82:53:cd:
                    4f:7a:86:bc:72:65:48:2b:79:b4:58:8b:c8:1c:db:
                    a2:24:22:dd:24:07:83:96:91:96:9a:95:5e:ee:39:
                    08:68:84:e3:08:40:1d:31:56:9d:74:f5:99:50:ca:
                    41:7b:bf:bf:12:f6:25:eb:be:b0:86:8c:aa:8c:65:
                    17:9a:42:4d:8d:d4:92:d8:d3:2b:8a:fb:14:bc:8c:
                    d0:0d:15:c3:b1:02:35:15:83:0f:a2:33:8a:90:69:
                    4b:e4:66:f1:dd:2a:72:b7:d2:07:ed:73:20:94:df:
                    47:64:46:23:45:ef:71:87:da:c7:05:15:5a:97:56:
                    3a:2a:f7:87:a2:5d:f1:c0:69:cb:a0:ce:d6:c2:e6:
                    84:ff:80:95:ec:3b:c5:83:5d:b9:33:17:3d:76:5c:
                    71:8e:d0:28:03:53:cb:63:6e:06:e5:38:5e:54:e2:
                    95:6f:91:93:f5:83:80:54:fd:8e:f9:a7:80:ae:69:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A2:39:A7:A6:F9:41:B1:BD:43:CB:7D:01:DB:8C:64:C8:90:CF:E3
            X509v3 Authority Key Identifier:
                keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:98:2d:ba:3d:47:2f:94:6f:2f:ca:a8:c8:32:9a:31:5d:0c:
         d0:05:15:c8:14:37:1f:69:64:1a:d0:79:cd:4a:d1:6a:7d:7b:
         4a:25:81:30:8d:3f:46:7a:0f:47:c4:62:00:45:c5:fc:3d:8e:
         db:7e:76:e3:88:af:f7:3c:cc:f6:51:6d:67:86:21:5a:96:79:
         1f:7f:0b:28:a6:dd:e4:cf:7e:9a:3e:0b:47:08:2a:77:a0:18:
         c2:1d:b9:be:bb:3f:e8:92:40:ed:0e:58:bf:70:38:a7:bd:e7:
         05:31:2c:ac:fc:c0:0c:1e:f9:d7:1f:b1:b2:13:cb:74:e7:f6:
         99:5e:9c:18:42:ad:a6:85:13:8b:95:62:89:be:58:2e:ff:1d:
         4c:74:ca:71:db:0c:61:19:1d:8d:c9:73:f7:92:44:11:e9:ca:
         78:50:22:08:b0:5b:d8:85:04:ad:e7:f2:f2:d3:68:cf:0f:c3:
         17:17:21:27:f1:49:fd:cd:74:f4:7b:4f:ce:7e:a4:d0:1f:31:
         e2:87:a7:f0:4d:2f:5b:58:f7:ce:1c:00:eb:51:ad:3b:be:80:
         9a:8f:4a:fe:a1:17:f6:4d:cb:53:8d:88:c6:fd:75:05:91:3f:
         49:2e:34:2f:35:5b:32:64:c3:54:a4:ac:cd:b5:92:a8:02:27:
         3b:c6:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:36 2026 by rpki-client