Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File:                     d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier:          ++nxv218KgxagagLAUTlRMJ7rtsnbJTl/4KvmuSoGAo=
Subject key identifier:   A8:D6:D8:F5:54:F9:44:84:42:43:98:88:7D:4A:10:96:42:49:BD:ED
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer:       /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial:       019D99D034D176E82E8BA013714A705D05E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number:          069B
Signing time:             Fri 17 Apr 2026 05:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:52 +0000
Files and hashes:         1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: 3UfEDhp6MRc3RAJsq8UYcblsW7kD7pNwDsuIHgLeQGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:34:d1:76:e8:2e:8b:a0:13:71:4a:70:5d:05:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
        Validity
            Not Before: Apr 17 05:00:52 2026 GMT
            Not After : Apr 18 05:00:52 2026 GMT
        Subject: CN=a8d6d8f554f94484424398887d4a10964249bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:36:6d:8c:f9:ec:8a:eb:37:67:fb:9b:55:
                    c8:24:31:d9:fd:df:5a:cb:73:28:ef:b3:40:0c:55:
                    ac:7c:91:6d:12:2a:f7:88:4d:1f:75:67:b0:96:a7:
                    66:40:5c:a5:7f:f7:69:ec:63:68:f8:f0:c0:3f:dd:
                    a2:47:5b:eb:cc:e7:a6:db:f3:e7:7f:ce:62:1a:44:
                    42:1f:b4:3f:cb:a9:a1:0f:77:cc:74:d8:b4:88:06:
                    7f:38:29:a7:c1:4f:94:ab:ce:fd:49:36:aa:ae:6f:
                    2d:c3:fd:19:05:6f:77:b9:f5:fc:a3:06:6b:9a:08:
                    1b:d6:d9:1e:2a:25:4f:b4:c4:e4:b7:c6:66:fb:9b:
                    fb:17:eb:f7:0a:40:60:2c:ca:5a:b2:72:4e:95:2e:
                    2d:24:35:00:ea:fd:ea:b7:47:83:e2:36:3a:0d:b1:
                    7e:c3:66:6b:d7:36:97:d5:94:5a:2b:bf:f3:fb:29:
                    ad:88:f2:56:eb:4c:0e:de:b2:a3:55:f5:1a:68:f0:
                    9d:ec:bc:af:49:68:85:51:28:7f:2e:99:a9:05:e5:
                    d8:3c:23:27:89:25:86:53:8e:9a:bb:44:c8:4f:04:
                    59:35:00:27:c0:38:78:8e:a6:3e:20:ac:03:55:a6:
                    16:3a:58:38:45:c4:44:65:3e:8b:f4:c3:d7:9e:74:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:D8:F5:54:F9:44:84:42:43:98:88:7D:4A:10:96:42:49:BD:ED
            X509v3 Authority Key Identifier:
                keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:59:ca:23:a0:6f:a5:c1:57:bf:b1:b6:d7:14:c2:3b:2f:f2:
         8c:9b:0a:1e:48:97:ea:aa:23:5e:78:d6:4a:66:23:86:d8:85:
         7e:6d:d6:31:d7:6b:e9:25:24:71:c3:92:39:3d:0f:f2:d5:ec:
         25:56:83:33:ba:48:08:ec:ef:2f:46:dd:f8:e0:ad:2d:d2:d9:
         fb:78:fc:c6:2d:80:5b:00:f7:d2:e1:18:20:c0:0f:76:1f:39:
         b5:24:45:ab:e1:5a:1b:9f:1c:67:f9:55:bc:25:25:df:d5:7e:
         2a:de:74:9d:da:73:fe:bd:55:a5:ee:82:23:d7:d4:f2:7e:58:
         1c:5f:a1:7a:40:fc:c7:5b:ca:51:4c:fa:06:3b:90:6c:66:57:
         d7:df:87:01:4c:87:56:25:00:5f:5f:3d:93:7d:89:f1:7f:6b:
         2e:5c:7e:13:3b:c2:08:94:2f:4c:dd:bc:26:a4:87:cd:39:c7:
         8c:59:02:71:fd:3c:5c:5e:a6:eb:59:a1:28:0f:0f:e5:10:ae:
         b5:92:74:a1:25:f8:28:a0:82:51:0b:7b:72:19:bf:0c:82:8e:
         ea:48:65:39:b9:ae:27:60:8b:c8:f7:b5:03:7c:31:4a:10:db:
         d6:86:72:14:16:03:ef:f5:fc:0b:bb:4b:e3:ca:21:31:f3:bd:
         0d:89:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:54 2026 by rpki-client