Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          5xmbeaN14ZGOvzvTDrFuCqQeie3rAoqN0Bs7W0ZMvFo=
Subject key identifier:   3C:BC:DA:91:94:E8:D9:79:83:BC:81:5F:B3:5C:B8:A0:CB:89:F0:24
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       019D9B87B4C21306C2C87FD7A8A9587A0F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          081E
Signing time:             Fri 17 Apr 2026 13:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:55 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: yegLm+o3oLugSEED8+BTO6kVmR4A8yRTZwbGEM5nLMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:b4:c2:13:06:c2:c8:7f:d7:a8:a9:58:7a:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Apr 17 13:00:55 2026 GMT
            Not After : Apr 18 13:00:55 2026 GMT
        Subject: CN=3cbcda9194e8d97983bc815fb35cb8a0cb89f024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:15:82:55:d0:bb:79:8c:22:c5:ca:b0:6f:
                    d4:2f:9a:c1:b3:4f:52:c1:6a:25:06:ec:13:ba:ab:
                    d2:64:3f:ff:05:55:cf:ea:ff:aa:21:bd:2e:cf:76:
                    e5:2b:ea:59:44:9c:13:83:09:a9:48:ea:9d:c2:0d:
                    1e:88:88:10:96:51:12:33:75:88:c9:4e:2f:7d:74:
                    18:14:f8:e3:0d:a0:db:5b:c0:b5:87:e8:d4:20:ca:
                    c6:28:af:ee:09:24:82:da:fa:54:88:92:cc:ce:4f:
                    1b:eb:22:17:88:d3:42:39:1c:20:49:77:a2:55:46:
                    6d:46:6d:8a:90:7e:c7:38:a8:5a:f4:b7:44:31:fa:
                    d0:e1:07:36:fe:a8:ba:ab:92:78:11:fb:8e:24:77:
                    e1:89:a2:1b:f4:f9:73:85:21:37:16:50:9e:75:f2:
                    6c:c5:dd:a5:9e:04:b7:5b:6d:7c:e6:45:a7:3f:7c:
                    6c:a0:32:a3:66:89:03:ae:d7:3d:ff:97:e2:ff:a8:
                    1c:79:38:32:aa:8f:80:e2:1c:83:5f:0c:dd:9a:81:
                    fe:65:33:f2:a0:2c:3d:8f:2a:52:9e:d7:89:57:b1:
                    e2:24:7a:8f:bc:78:7f:c2:ad:13:c1:05:58:d7:a0:
                    09:ad:eb:1f:2f:da:f0:5a:9c:04:50:f8:19:a2:47:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:DA:91:94:E8:D9:79:83:BC:81:5F:B3:5C:B8:A0:CB:89:F0:24
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8f:ed:45:06:9e:15:f2:4b:de:b3:65:76:fb:86:91:c4:da:
         18:d9:d8:21:b6:c7:56:f4:be:19:0e:84:9e:17:bb:f1:79:ef:
         14:dd:8b:ca:4e:62:05:e3:4b:f2:02:2e:27:aa:9a:7f:0d:c8:
         cf:e4:ae:bb:50:ac:30:ee:70:38:81:62:4d:2b:e5:25:ab:86:
         18:e8:eb:db:75:e0:5b:c1:b4:86:77:c0:d9:83:c8:52:0e:3b:
         47:2f:f2:7f:2e:14:55:21:b1:30:cc:f3:4f:a7:c2:32:b6:ca:
         5b:ca:8e:f4:63:6b:75:cc:5b:1a:5a:69:8e:e2:7b:6a:ee:45:
         ed:ce:46:55:6a:61:bd:d6:e9:e7:aa:81:55:30:ba:1a:18:c2:
         17:0a:b1:86:13:32:b8:39:5d:61:86:77:5a:b6:e1:6d:96:da:
         5f:b2:36:08:34:eb:9d:19:09:30:01:d0:3b:67:0f:2b:6b:d9:
         bf:1d:b2:9a:32:98:a6:7f:8f:ca:d6:9a:51:f2:28:a1:3a:2b:
         38:77:ca:3b:f4:da:b7:95:6c:c4:05:e4:ec:97:df:d3:65:a9:
         a3:13:db:68:7b:3b:17:81:75:98:b5:0e:89:13:f6:e6:73:9c:
         75:d1:3b:da:a0:5b:cc:20:0d:38:b9:4b:3c:6a:89:33:45:45:
         0d:5f:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:53 2026 by rpki-client