Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File:                     tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier:          grmIsLbjiZP3j5xgNqxhZl1JFDG+RJV70RVvHXKOAn4=
Subject key identifier:   B8:AD:F3:57:4F:18:21:43:B9:6D:7D:65:AD:69:CE:34:15:C5:1B:C5
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer:       /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial:       019D9AE2B100510612A26EE5EEAC2E562773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number:          0A4F
Signing time:             Fri 17 Apr 2026 10:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:40 +0000
Files and hashes:         1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: zsijQvujfs4dSJNrDZcP31B4Q+jZXsI9+q8Qbi5hSnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:b1:00:51:06:12:a2:6e:e5:ee:ac:2e:56:27:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
        Validity
            Not Before: Apr 17 10:00:40 2026 GMT
            Not After : Apr 18 10:00:40 2026 GMT
        Subject: CN=b8adf3574f182143b96d7d65ad69ce3415c51bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:eb:0e:e3:a6:c5:a4:3d:b9:81:f7:0b:53:
                    4a:3f:f0:d3:d1:d3:9e:42:c8:c7:97:b8:2a:a3:80:
                    c8:37:b9:bc:42:ff:9e:52:1b:2e:d5:76:1c:09:57:
                    86:8a:75:3c:64:26:09:63:11:ae:5f:d4:34:6f:e6:
                    99:43:a7:29:ec:48:ad:21:54:57:24:e9:27:be:b2:
                    be:22:b1:89:49:2d:88:6a:c3:b7:38:24:02:58:81:
                    3c:67:65:65:4f:64:5d:a6:3a:26:ac:c2:c7:0f:92:
                    85:2b:06:ae:36:d7:fe:54:97:a4:a8:f9:ce:4d:7f:
                    0f:ff:81:62:30:c5:c3:38:9c:b0:55:18:a4:5b:ac:
                    39:bd:54:14:89:77:6c:9c:f9:61:47:dd:04:97:bb:
                    a2:b2:b7:90:d0:0c:27:ac:20:8e:19:8e:5d:2b:0b:
                    87:61:8a:05:e6:f4:f2:b5:4e:a2:f1:46:e0:e3:75:
                    3f:4e:d9:35:0f:a5:49:5a:83:9d:10:c4:0d:79:3a:
                    6d:72:5a:f3:a7:af:b0:cf:eb:0f:7c:a2:12:a3:3f:
                    f3:9c:a5:b5:0b:70:5c:79:4d:06:dd:ab:f9:63:77:
                    dc:b5:97:04:65:5a:0b:f9:b9:88:f2:bd:f0:5f:a1:
                    50:28:ab:4d:33:52:d3:89:41:24:16:9b:7c:b2:c7:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:F3:57:4F:18:21:43:B9:6D:7D:65:AD:69:CE:34:15:C5:1B:C5
            X509v3 Authority Key Identifier:
                keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fa:c0:22:8f:09:65:33:47:f7:23:a7:f1:36:07:57:5f:09:
         e5:6d:2d:8b:da:30:aa:33:e0:02:78:71:0d:50:bb:1c:82:91:
         1d:b2:23:99:83:f0:4a:16:ca:2b:f0:9e:a6:70:a7:38:ce:c2:
         d0:2d:bb:ac:ba:60:24:34:da:19:de:eb:11:17:cc:3c:ff:21:
         06:d7:10:85:ab:55:13:8d:af:5a:38:46:34:42:c9:6a:31:ca:
         fa:e0:0d:4a:61:b3:66:ff:f2:b5:17:70:04:81:18:9f:0a:1f:
         36:ab:de:26:58:4f:17:0e:02:df:ce:f8:b1:2e:3b:10:cd:4f:
         a0:40:6b:00:8b:5c:26:bf:e9:dc:6e:f5:7a:dd:10:10:92:d0:
         43:89:88:76:1e:f4:0e:3a:3c:e8:89:9e:ab:ad:d0:94:ec:6a:
         85:ab:c9:71:d8:b6:10:87:d3:79:e9:b6:74:83:3b:0c:e1:31:
         cb:54:c7:eb:3a:d7:d5:bd:55:68:93:d8:b8:01:a7:5b:ef:11:
         3c:c7:98:15:d5:6c:57:49:c5:23:91:5d:a7:3d:bf:3a:e1:c1:
         ca:ba:e8:b8:bd:00:3e:75:0c:46:56:6c:f3:15:27:1b:16:2e:
         30:a9:bd:b3:8e:9f:79:8b:25:ad:9f:71:1b:31:86:34:16:bb:
         0a:24:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:12 2026 by rpki-client