Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File:                     hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier:          ln1aT+KAqs0d/jGpreWBuMv1NmYo5rhAUgV1aP5iMJc=
Subject key identifier:   57:E4:F9:1D:7B:47:A8:4B:AC:2E:88:E3:A0:B1:FA:D0:17:0A:A9:49
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer:       /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial:       019D996230E720CD3CC6333EAC2B4D476798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 03:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:42 +0000
Files and hashes:         1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: AHGKN+eMFwnq7MQWjbOJJjZmZsxELZpgbAriobP3e1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:30:e7:20:cd:3c:c6:33:3e:ac:2b:4d:47:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
        Validity
            Not Before: Apr 17 03:00:42 2026 GMT
            Not After : Apr 18 03:00:42 2026 GMT
        Subject: CN=57e4f91d7b47a84bac2e88e3a0b1fad0170aa949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:ca:cb:a8:33:fc:c3:43:f8:40:3e:28:07:
                    84:a5:dd:2e:b2:13:82:80:c2:cf:e2:69:9f:e6:ee:
                    6b:77:d0:04:2e:d3:78:88:2c:a4:be:a0:7c:26:ab:
                    df:5c:8c:90:88:bd:2e:a5:5a:73:a2:f8:85:33:d3:
                    d0:b6:2c:55:73:f9:51:20:58:e4:22:1d:79:35:86:
                    79:ef:c5:e2:6e:b1:f3:95:80:b5:ef:11:00:24:b9:
                    67:1d:da:04:4f:9f:da:30:c2:40:13:a3:59:d7:58:
                    e6:0c:a3:df:60:71:15:ee:e3:d9:84:15:42:a9:e4:
                    79:a6:df:d5:e4:85:66:87:c2:9a:8e:36:28:29:78:
                    71:21:46:a6:01:c2:4d:f1:de:c7:88:d2:8d:5f:f4:
                    4b:c8:81:c0:46:de:71:a9:8b:94:5b:7e:04:5b:fd:
                    01:23:ba:89:28:0e:d8:1e:48:87:1d:dc:d6:4b:e7:
                    e2:c7:4e:5c:a1:fe:ea:5d:20:63:23:d8:34:21:ae:
                    cb:8f:6d:2a:a9:02:e6:6a:d2:a7:ee:eb:fb:1e:e5:
                    c8:3f:94:f2:6f:08:24:2e:47:41:99:a6:06:ff:b9:
                    1f:7d:3a:ac:76:d2:ef:97:64:aa:23:0e:6a:67:94:
                    9c:bd:e8:fc:66:d5:a4:a8:c9:f7:7f:08:8d:78:f3:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E4:F9:1D:7B:47:A8:4B:AC:2E:88:E3:A0:B1:FA:D0:17:0A:A9:49
            X509v3 Authority Key Identifier:
                keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:2f:89:e9:cc:61:c4:97:a6:59:43:4c:c9:94:b4:94:c8:
         0a:a0:82:d9:f2:da:39:8b:57:4b:5e:4c:97:ad:3c:af:37:57:
         d3:06:ac:cf:cb:b0:88:6d:b8:15:4b:26:4e:ad:57:21:e5:5f:
         d1:4e:06:10:94:b6:f2:47:2f:5e:cd:cc:da:7a:45:80:b1:56:
         3e:45:6b:b1:97:4c:6d:7a:be:31:1c:a7:96:b4:e2:9b:57:d8:
         48:a2:22:38:2c:98:db:90:4e:e9:68:37:b4:30:b4:02:fd:cc:
         9f:34:87:1d:43:70:60:be:c5:b4:e5:7c:1e:23:9b:a8:cc:c0:
         92:5b:06:ad:1a:60:26:8b:9e:b9:23:db:17:bc:61:f6:43:c7:
         a3:6a:82:7f:48:30:c9:a5:74:c3:40:f6:d1:1b:18:cc:46:e0:
         84:23:31:24:54:84:eb:10:32:3e:be:fd:b8:a9:42:6e:ce:37:
         59:a8:78:8c:64:90:74:bb:b4:46:2c:ef:83:cd:26:52:09:4f:
         50:65:cd:3a:b4:a8:88:eb:19:3a:b8:1b:4a:23:bd:65:1b:97:
         7d:6c:e5:11:2b:7f:d6:80:6b:1c:03:40:14:4b:c8:9b:b2:fa:
         b4:a1:6c:14:16:9b:99:73:36:75:ec:85:e7:22:2a:a8:79:8d:
         be:c7:33:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjDnIM08xjM+rCtNR2eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MWJmOWMzY2QyYjM2NDA3ZGZiZDk3NmZiODRhMjExOTdh
MGVhYTEwHhcNMjYwNDE3MDMwMDQyWhcNMjYwNDE4MDMwMDQyWjAzMTEwLwYDVQQD
Eyg1N2U0ZjkxZDdiNDdhODRiYWMyZTg4ZTNhMGIxZmFkMDE3MGFhOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t3Ky6gz/MND+EA+KAeEpd0ushOC
gMLP4mmf5u5rd9AELtN4iCykvqB8JqvfXIyQiL0upVpzoviFM9PQtixVc/lRIFjk
Ih15NYZ578XibrHzlYC17xEAJLlnHdoET5/aMMJAE6NZ11jmDKPfYHEV7uPZhBVC
qeR5pt/V5IVmh8KajjYoKXhxIUamAcJN8d7HiNKNX/RLyIHARt5xqYuUW34EW/0B
I7qJKA7YHkiHHdzWS+fix05cof7qXSBjI9g0Ia7Lj20qqQLmatKn7uv7HuXIP5Ty
bwgkLkdBmaYG/7kffTqsdtLvl2SqIw5qZ5Scvej8ZtWkqMn3fwiNePOHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfk+R17R6hLrC6I46Cx+tAXCqlJMB8GA1UdIwQY
MBaAFIcb+cPNKzZAffvZdvuEohGXoOqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWIt
ZmExZTYwODM5OTJkLzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWItZmExZTYwODM5OTJk
LzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRwvienM
YcSXpllDTMmUtJTICqCC2fLaOYtXS15Ml608rzdX0wasz8uwiG24FUsmTq1XIeVf
0U4GEJS28kcvXs3M2npFgLFWPkVrsZdMbXq+MRynlrTim1fYSKIiOCyY25BO6Wg3
tDC0Av3MnzSHHUNwYL7FtOV8HiObqMzAklsGrRpgJoueuSPbF7xh9kPHo2qCf0gw
yaV0w0D20RsYzEbghCMxJFSE6xAyPr79uKlCbs43Wah4jGSQdLu0Rizvg80mUglP
UGXNOrSoiOsZOrgbSiO9ZRuXfWzlESt/1oBrHANAFEvIm7L6tKFsFBabmXM2deyF
5yIqqHmNvsczyw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:59 2026 by rpki-client