Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File:                     4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier:          9KNQ8vZB1X0zKYyDy0BHOUUyfBYiOHFFf4tS5u1NqYo=
Subject key identifier:   A5:47:A5:55:AC:67:EC:32:65:85:32:64:0B:0C:A6:A7:D4:D5:CD:CD
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer:       /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial:       019D9A7547E1E9D2C7506AB09DB276A6A325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number:          079B
Signing time:             Fri 17 Apr 2026 08:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:10 +0000
Files and hashes:         1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: uNZpxw0XRpR6ny6ehXTLo+bF8fXXNnM0Mz2fZRB6XaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:47:e1:e9:d2:c7:50:6a:b0:9d:b2:76:a6:a3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
        Validity
            Not Before: Apr 17 08:01:10 2026 GMT
            Not After : Apr 18 08:01:10 2026 GMT
        Subject: CN=a547a555ac67ec32658532640b0ca6a7d4d5cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:23:49:b2:1a:2a:ee:87:e4:30:29:e7:4f:
                    4a:83:0b:7c:dc:02:b8:41:21:8c:1b:e1:9e:fb:b4:
                    fb:e9:60:7e:7b:e6:47:03:30:8f:7a:f1:58:e6:bb:
                    39:83:df:1f:86:07:a2:52:ef:73:7b:cb:94:37:e2:
                    9b:48:47:f9:bb:6c:c3:01:91:fd:3b:5c:de:36:9a:
                    fb:af:6b:d0:57:e7:40:a7:fa:e2:a9:0c:a7:0a:c0:
                    ee:a0:56:e8:59:82:24:2c:af:b6:f9:95:a5:2a:9b:
                    7b:42:5c:67:eb:4e:91:3b:ca:5e:fc:a0:ea:c6:0b:
                    54:f3:37:04:4c:b1:7c:10:d5:13:b4:23:55:f6:40:
                    98:41:43:62:f7:38:91:1b:64:cf:8b:4a:df:c2:29:
                    a9:c4:be:39:46:ef:c3:c9:04:42:d3:65:36:a9:a1:
                    0d:0b:a6:3d:ce:c9:3e:55:57:bd:89:74:71:38:c9:
                    c1:90:35:9f:d4:48:f7:fe:07:ae:3f:bc:b9:3d:80:
                    e6:34:da:26:52:ea:89:b6:02:33:12:51:07:c3:99:
                    a7:fe:d5:79:85:25:a7:8b:6d:15:d9:84:92:e6:e3:
                    a3:9d:06:3c:83:f6:2d:18:5b:7e:9f:ac:b2:84:86:
                    5c:0e:38:af:74:f5:29:83:aa:8e:67:49:70:de:88:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:A5:55:AC:67:EC:32:65:85:32:64:0B:0C:A6:A7:D4:D5:CD:CD
            X509v3 Authority Key Identifier:
                keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4a:45:ae:e2:ad:30:44:da:f4:88:ed:31:46:21:cc:37:58:
         09:54:9b:11:eb:2d:8b:fd:ad:d8:2e:94:91:be:e8:de:40:44:
         61:3c:11:09:1f:42:f7:96:56:87:ca:36:4d:e3:cc:1b:41:c5:
         0d:23:e0:48:e8:0b:fd:ef:df:54:d2:48:6d:c4:7c:be:5d:96:
         52:27:0f:e8:9d:35:a8:60:c7:3b:ba:7b:87:81:04:e6:04:2d:
         12:e6:f6:de:a5:c8:10:14:2a:68:72:a1:5d:3d:18:1c:56:1e:
         6f:fe:4f:17:1d:b5:ed:ab:6a:64:cb:b1:57:2e:47:86:32:bc:
         ac:24:69:23:42:c4:99:20:ef:e3:4f:f4:24:09:bc:39:ff:0e:
         36:9e:d7:69:75:23:1f:70:3e:2e:d0:5f:fe:10:4a:02:79:61:
         09:7c:e2:05:47:a3:d1:b7:68:d8:86:ff:c4:b3:64:26:2b:96:
         e7:c9:3b:aa:d7:57:46:5e:14:fa:0b:54:dc:26:79:c3:d5:df:
         6c:8d:59:22:c3:9a:6c:41:7b:14:98:87:48:5f:bb:37:2d:bf:
         18:69:94:ed:68:22:22:ce:ed:9d:a7:a6:73:48:6e:45:da:fe:
         b3:39:4c:cf:98:94:a5:b2:87:9c:25:ec:ac:2d:9e:3e:7e:9f:
         77:2d:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:33 2026 by rpki-client