Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File:                     1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier:          fIjdMMPBmkZHQj/I0lYM+DU7Oe5iKXJ+3foJrJFaOzw=
Subject key identifier:   20:68:70:4A:48:DF:37:23:17:D5:50:E4:F4:3D:DB:5F:43:2E:7C:6B
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer:       /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial:       019D996242D42D9B993319A23FA8093A0100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number:          080F
Signing time:             Fri 17 Apr 2026 03:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:46 +0000
Files and hashes:         1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: qwM5Nm2IO7FQ+EF7Vd3Ly0mfSwFXwb4ZhQtnzk6njlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:42:d4:2d:9b:99:33:19:a2:3f:a8:09:3a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
        Validity
            Not Before: Apr 17 03:00:46 2026 GMT
            Not After : Apr 18 03:00:46 2026 GMT
        Subject: CN=2068704a48df372317d550e4f43ddb5f432e7c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:96:eb:f0:35:a2:42:24:99:17:83:f0:2a:
                    da:5f:40:f9:16:36:2d:34:fb:cc:9d:bf:3e:e6:0e:
                    54:e5:ac:ac:ec:bc:ef:9b:f1:6c:4d:bf:56:47:b8:
                    e2:a5:94:c6:e3:4d:10:c9:dd:49:b7:9f:93:23:e0:
                    cb:7f:91:92:a2:da:5b:8a:df:e8:cb:11:21:25:42:
                    65:85:12:ce:93:68:65:53:3d:07:2e:04:d8:93:3f:
                    38:29:f9:b9:85:4b:56:99:64:19:55:fa:84:19:98:
                    e4:f5:1b:5a:54:25:6d:8e:dd:d9:62:8f:3b:c4:73:
                    f5:7c:3c:72:aa:89:b4:72:15:99:84:53:33:43:1f:
                    8e:19:f9:a0:a5:85:48:5e:d7:b8:6e:c5:98:e4:86:
                    eb:b7:62:a3:ba:34:d7:e2:5e:11:9c:c6:fd:60:b3:
                    dc:65:78:c2:3c:4b:ad:46:df:a2:1c:8a:13:b8:a7:
                    5d:7d:49:37:90:25:4d:9f:24:a0:b8:2d:99:ee:d6:
                    10:2f:ea:e5:ce:c6:b0:57:b8:47:49:dd:4d:a1:53:
                    c8:6b:3e:db:77:8e:92:fc:2e:cc:95:5a:6c:c3:0c:
                    88:01:0c:99:59:5a:3d:e3:3d:60:c7:01:5d:65:b8:
                    c7:ad:ac:94:d0:5c:2d:dd:1f:a7:55:f4:7f:5d:90:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:68:70:4A:48:DF:37:23:17:D5:50:E4:F4:3D:DB:5F:43:2E:7C:6B
            X509v3 Authority Key Identifier:
                keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:45:11:6e:c0:c7:6f:11:da:8b:b8:ce:c2:86:62:fa:da:
         19:1f:b5:36:8b:ca:80:7a:1c:fa:d7:42:f5:cf:fd:4f:97:1e:
         73:62:3f:4f:e6:fe:67:5f:e2:30:0d:50:ba:48:8b:89:bf:c4:
         2d:a9:8f:e8:ff:27:cd:f6:fd:d9:c8:29:4e:53:72:1a:70:9b:
         b7:b1:0b:bb:aa:cb:d0:46:79:4b:ee:e1:11:1c:72:6c:8c:2a:
         36:ed:4e:c6:63:62:ee:f5:72:95:18:f5:0a:b0:d6:15:f3:00:
         7e:c1:97:87:f5:33:ea:6c:2d:be:76:3f:82:06:c8:9d:b6:f2:
         a9:8a:ff:18:37:64:80:85:f9:46:bc:66:ed:41:3f:4f:76:0c:
         a8:5c:06:0b:39:d5:82:e8:9e:50:7a:f0:c6:39:36:15:a2:1d:
         8a:bd:5c:e1:4b:cc:d3:9f:1c:e6:ff:86:ba:c7:51:f7:8a:a5:
         52:15:94:60:52:08:70:1f:2a:4f:da:e2:9f:bb:2d:45:ec:f4:
         22:20:30:49:e7:aa:ba:23:8d:3c:9a:32:80:3f:26:c6:fe:c7:
         5a:03:0b:9a:17:e9:91:77:4c:8d:38:37:6e:6e:4d:76:a2:ce:
         e8:53:54:36:bf:a5:ae:ec:de:16:64:3b:29:62:ab:94:02:c3:
         71:f8:b8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----