Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File:                     m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier:          q8qaPDXfj1LiOAjqeRkyPtS35tlVst737/m5SC2uDa4=
Subject key identifier:   2A:D1:57:89:F8:82:83:D8:CC:25:1D:90:A8:D3:06:1B:CB:2F:E7:7F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer:       /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial:       019D9998CD50205A7EE622920E7573C7110D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number:          1332
Signing time:             Fri 17 Apr 2026 04:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:21 +0000
Files and hashes:         1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 3xpMZ2a5D57hNf5IWew8ubHUxfYDFiI8Um3JvYC/LMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:cd:50:20:5a:7e:e6:22:92:0e:75:73:c7:11:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
        Validity
            Not Before: Apr 17 04:00:21 2026 GMT
            Not After : Apr 18 04:00:21 2026 GMT
        Subject: CN=2ad15789f88283d8cc251d90a8d3061bcb2fe77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:00:0b:1e:e1:0c:2a:43:c8:81:dd:9c:4f:
                    69:b7:8a:99:d1:b0:24:00:53:e9:f0:38:3c:7e:9e:
                    17:8a:d3:07:6e:ed:d9:df:0e:f4:54:5f:59:d3:0d:
                    c6:1f:41:11:65:65:d2:db:c4:45:18:df:9c:a7:f6:
                    d7:05:a2:4c:db:d0:1b:c4:0c:42:8e:5a:68:67:d0:
                    07:19:4a:41:c1:b1:d8:dc:25:6c:43:e0:88:af:80:
                    d3:3b:4c:bf:1a:e2:75:1b:db:7f:d8:4f:0f:9c:8c:
                    62:bb:8e:5b:2e:83:3e:a5:a2:0f:af:9a:56:f6:5e:
                    1b:b0:c2:25:c6:c1:90:51:e9:da:22:8b:e3:3a:13:
                    22:95:03:d5:d8:51:7f:c6:20:b4:c8:9d:f3:26:de:
                    74:34:bb:ed:08:c4:0f:80:e4:8a:58:a0:f7:b2:c8:
                    5c:d2:b2:e8:0b:be:54:fc:ca:90:9a:6e:cd:be:a3:
                    c7:2a:99:3e:55:32:88:33:cc:5c:28:ea:bf:85:a7:
                    99:86:1f:8c:0d:93:7e:2a:cb:0a:d0:59:7c:8d:6b:
                    c0:7f:d8:28:6d:b2:16:59:83:0c:4d:93:38:26:db:
                    e7:ed:ad:fb:c5:86:73:e9:97:9a:67:f4:93:0d:97:
                    23:28:30:e9:77:ed:4d:20:22:18:1d:57:35:ae:1b:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:57:89:F8:82:83:D8:CC:25:1D:90:A8:D3:06:1B:CB:2F:E7:7F
            X509v3 Authority Key Identifier:
                keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b1:02:99:50:8e:c2:d5:0e:33:30:52:61:67:67:93:e0:78:
         d9:08:8d:c2:46:3c:f8:e6:6a:e1:5a:a2:a7:f1:c2:5c:44:d5:
         75:e3:37:ba:88:f1:f5:1c:65:13:89:1d:ed:d9:e8:fc:e8:04:
         df:a0:46:d6:94:46:8f:a6:0c:91:8c:e9:47:07:72:4a:5e:42:
         1a:15:70:40:ad:cc:b2:c1:4b:79:91:c8:ce:19:13:0b:3e:bd:
         2c:1b:7b:5f:15:81:3a:d4:28:0c:92:9f:a4:2e:7c:f8:dc:bb:
         45:5d:ac:7c:5b:e6:7d:9e:c6:21:ce:99:46:97:6e:f4:23:b4:
         8e:18:74:b7:b9:e3:d4:b1:63:db:d3:d8:09:99:04:67:70:95:
         c3:03:e3:ad:a6:ba:38:48:b0:1d:fc:2d:d2:4a:3d:2e:98:c0:
         35:5f:30:b1:ae:a9:4f:b4:07:29:34:a8:34:0e:b8:f1:bc:ea:
         36:19:8d:8a:42:c7:9d:a8:02:11:8b:14:d5:91:24:99:d0:f3:
         75:1f:4b:eb:de:f7:2b:0f:9b:94:2a:14:35:bb:27:8d:84:c0:
         b0:4b:a5:29:4c:fb:43:67:66:8e:d3:df:29:63:99:bf:18:cf:
         65:c9:ca:bb:fe:c8:f3:0c:97:a1:95:0d:75:78:91:bb:e4:87:
         28:03:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:16 2026 by rpki-client