Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File:                     zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier:          6YadBjPJ+U3sNvkQQ+mXkWk509NvNBCbPVR0gaeeH+E=
Subject key identifier:   98:73:90:D7:91:D2:D4:81:A7:EE:26:63:A9:13:B2:D3:28:77:40:C6
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer:       /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial:       019D9CD17E499A0C686387D05A1E374BEBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number:          1371
Signing time:             Fri 17 Apr 2026 19:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:08 +0000
Files and hashes:         1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: XH/jVXCCKZ0BU6QnzUHuJUfI/MGuHJQsJHhhcLbcE4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:7e:49:9a:0c:68:63:87:d0:5a:1e:37:4b:eb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
        Validity
            Not Before: Apr 17 19:01:08 2026 GMT
            Not After : Apr 18 19:01:08 2026 GMT
        Subject: CN=987390d791d2d481a7ee2663a913b2d3287740c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:5d:75:3e:32:da:37:40:40:da:f0:97:f2:
                    ea:b9:48:c0:37:4a:f6:ff:4d:85:12:58:83:63:e7:
                    46:a9:df:a8:ac:16:fb:9c:a0:c5:a5:31:3e:26:3a:
                    f9:c6:55:c4:a6:14:d2:6d:70:16:3d:15:fc:91:02:
                    23:22:14:2a:de:ef:b3:5f:17:02:02:01:28:ca:97:
                    ac:6c:3e:8f:1b:d6:52:71:f7:a8:05:94:5e:03:5c:
                    05:fb:bd:e0:35:3b:0a:c2:05:42:af:9a:5d:78:42:
                    ed:2e:b5:a4:d9:33:a0:89:20:b3:46:d8:8e:0b:23:
                    c5:35:94:02:b4:96:5c:c3:b2:5c:2a:40:5a:a8:6c:
                    34:87:0a:a4:75:53:4f:03:aa:1d:e3:7a:89:10:f6:
                    e0:a7:64:39:42:8d:cb:63:d1:b7:ba:43:15:8c:7a:
                    a2:c4:b8:98:f2:48:c1:67:95:b8:23:59:7e:eb:2c:
                    2f:b3:59:ef:93:89:8a:2f:b0:3d:f5:99:cc:d1:66:
                    df:84:18:c2:30:dd:9f:6f:08:dc:76:b8:55:55:3e:
                    83:3c:77:ce:36:60:92:d7:3f:d3:aa:69:73:d0:58:
                    02:bf:c2:e0:6e:20:13:4a:21:79:11:40:dc:06:22:
                    e7:87:78:d8:63:a1:1b:48:c7:95:a1:a4:07:db:a6:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:73:90:D7:91:D2:D4:81:A7:EE:26:63:A9:13:B2:D3:28:77:40:C6
            X509v3 Authority Key Identifier:
                keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:87:05:f6:72:9b:a3:e1:36:57:6b:05:90:ca:fa:19:9e:
         7f:41:a0:93:7a:18:bd:86:c5:9e:08:ea:74:03:90:57:7a:ef:
         f1:a3:9c:3c:6f:cb:5b:f0:4b:5b:1f:04:58:eb:f8:af:9f:08:
         16:6f:0e:8b:1e:0e:b7:ef:3c:44:83:61:dd:28:f8:2a:d4:16:
         0c:09:d6:54:59:89:ec:b8:b1:8d:6d:f1:3a:98:bc:75:b3:59:
         f1:19:f8:d5:e8:2b:dc:9f:bc:fc:c2:66:a3:3f:22:e4:4c:a2:
         ee:02:d0:a9:c9:48:c8:bb:75:20:ef:c0:df:f2:96:40:29:e4:
         d2:a7:37:ed:10:db:9c:f3:69:60:5b:ee:5a:01:d5:ed:e9:ec:
         be:a4:a2:02:b1:2a:37:9e:e8:d0:da:b3:ba:7a:3a:49:cc:8b:
         1f:08:5d:fa:5e:d6:f4:18:30:95:f4:7a:83:a0:bf:02:62:bf:
         19:99:51:bc:32:74:68:c9:72:8d:3a:e7:61:e1:6f:da:d8:42:
         e4:ec:dd:5a:7f:c6:af:60:6f:7d:ff:72:b5:fa:2a:e1:67:4d:
         b0:fb:97:46:46:88:8a:01:6a:b3:ee:d0:33:0f:9e:b9:38:c7:
         5a:91:de:d2:61:fb:80:00:3b:d0:6c:6a:7a:ae:53:93:85:51:
         36:50:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:10 2026 by rpki-client