Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File:                     v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier:          MMVpUAFG73rjfUmDNhFwbJO+TjZylMqS5lI5esaYuVQ=
Subject key identifier:   2B:90:71:DE:A2:87:6F:0E:6F:2C:DF:31:39:6D:4F:CD:6B:66:35:32
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer:       /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial:       019D98F5152C1C15549517FC8123D7F36199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 01:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:31 +0000
Files and hashes:         1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: tJhPkJkPOaGww8E7pczdIGqjICGdcHcr1xqTLSxE8QQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:15:2c:1c:15:54:95:17:fc:81:23:d7:f3:61:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
        Validity
            Not Before: Apr 17 01:01:31 2026 GMT
            Not After : Apr 18 01:01:31 2026 GMT
        Subject: CN=2b9071dea2876f0e6f2cdf31396d4fcd6b663532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:8d:af:da:70:ce:85:fc:33:82:8a:b9:ff:
                    ec:45:2c:04:bc:c8:22:a2:ca:35:d1:1f:94:3b:96:
                    03:fb:c7:e7:ef:28:42:f5:8f:01:4e:68:b4:dc:52:
                    e3:23:e4:f6:45:bf:a9:0e:e1:9f:3a:1e:49:5d:2a:
                    7a:d5:84:7b:ca:11:1b:6a:80:4f:e5:d5:39:7b:7c:
                    26:3c:de:71:99:1a:f4:dc:0a:c7:5e:3a:67:32:75:
                    74:f1:11:cf:ed:41:11:3a:b9:2d:ce:f7:54:dd:66:
                    cf:5a:3c:0e:c3:0b:fc:7f:30:5b:a0:10:bc:7d:2b:
                    b0:94:85:23:22:65:a6:fd:ab:68:8e:45:dc:75:aa:
                    df:7b:e8:36:08:3f:60:52:cf:e2:0f:78:99:f1:6f:
                    bd:14:1f:e8:0b:c5:8d:c9:57:e5:62:6e:63:cf:b7:
                    e2:c1:e5:83:ed:c6:cc:bd:6c:79:ca:4a:d2:cd:aa:
                    a2:e5:33:84:e4:cf:4b:91:3e:93:ac:80:ed:92:95:
                    91:12:87:63:60:a6:cb:51:b9:4e:85:41:d3:5e:c1:
                    b7:8a:c9:32:9f:ee:fc:d1:a4:e2:24:1a:53:c3:9b:
                    9b:44:5e:15:6d:17:74:63:66:39:4e:3b:98:69:59:
                    37:00:48:fa:65:1a:fa:d0:4c:53:5c:31:eb:96:43:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:71:DE:A2:87:6F:0E:6F:2C:DF:31:39:6D:4F:CD:6B:66:35:32
            X509v3 Authority Key Identifier:
                keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:9e:d8:c0:be:02:37:fc:05:f2:81:6a:df:f6:0d:86:01:9b:
         c7:a1:ac:d7:c8:8f:41:e9:12:db:fc:64:6b:0c:45:4f:c5:24:
         3d:2a:b0:e3:f4:f7:00:12:2b:be:2e:8d:49:07:ed:3c:e2:59:
         4e:9a:18:8c:3f:8c:c3:38:55:61:c9:8c:ea:14:88:62:4a:b7:
         17:96:28:69:8e:66:12:7d:ac:d5:fd:74:b3:a5:0d:85:f9:1e:
         c3:3d:3f:8a:85:84:3c:76:7c:1c:28:dd:cb:42:9e:5a:67:05:
         6c:52:4f:5c:80:8c:d7:42:75:7e:7d:2b:26:ab:f4:d0:e5:98:
         99:72:dc:25:0a:e8:6f:ef:23:84:3c:2d:71:7c:a0:59:d2:5f:
         8b:c1:70:a5:33:6a:a9:62:e0:5d:fa:e5:72:88:c1:42:8b:b3:
         7c:fb:92:46:a2:c8:79:a7:c6:b4:57:a5:4a:08:30:f3:c5:30:
         b3:3c:4f:04:33:e6:54:f9:dc:f3:23:ab:65:96:d2:34:8c:44:
         3f:ca:16:ae:25:f0:a1:42:33:d1:7b:20:e1:0c:b2:5a:78:a3:
         50:af:1f:9f:c4:29:b8:13:ef:0b:20:59:84:13:42:3f:15:08:
         5b:a9:de:2d:1b:0f:17:69:cd:6f:8d:a7:ef:bf:d0:c3:d2:ce:
         b6:7f:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----