Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File:                     NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier:          aTWOj0j/c8WKfqfV1jGIcFoqkWw/STT7Qpeh4N6GkGI=
Subject key identifier:   6E:3A:6D:13:A2:9E:C1:5E:F9:34:64:A7:A1:10:D8:95:E4:4D:7C:5D
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer:       /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial:       019D98F4542A1EE08C1C4FC36585093BB744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number:          05A4
Signing time:             Fri 17 Apr 2026 01:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:42 +0000
Files and hashes:         1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: oD3qBISbO1p52GT+AAZKZaWATlLVvfM4/N+bxh3G0+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:54:2a:1e:e0:8c:1c:4f:c3:65:85:09:3b:b7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
        Validity
            Not Before: Apr 17 01:00:42 2026 GMT
            Not After : Apr 18 01:00:42 2026 GMT
        Subject: CN=6e3a6d13a29ec15ef93464a7a110d895e44d7c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:2f:06:fd:12:1b:05:c6:24:77:57:88:96:
                    9b:e0:b9:70:80:3e:c3:05:95:91:97:97:0f:97:5d:
                    b3:91:36:31:3b:67:5e:f0:c5:70:c8:f6:2b:60:a4:
                    d9:92:cb:17:e9:a8:33:19:0b:6d:e5:37:2b:ee:73:
                    74:9d:3c:de:18:14:7e:cc:15:67:10:b7:90:44:52:
                    81:c9:58:93:c5:b1:be:d2:5f:ab:31:d1:7a:e5:34:
                    86:4a:93:ea:f2:0c:15:f9:06:5d:9b:d4:f2:b1:c6:
                    f2:f8:0b:e9:b4:d6:ea:c0:33:36:ee:9c:06:ee:fe:
                    ac:b6:54:c9:df:90:87:d3:eb:c3:6d:30:5b:f7:1d:
                    0b:b1:b8:a7:4a:17:a6:05:0a:92:95:0b:0d:f2:55:
                    ce:ea:4a:07:17:ae:25:79:b1:b1:7c:2b:bd:77:81:
                    14:7e:75:0e:7c:c1:19:32:00:21:54:b0:f2:76:f2:
                    47:9f:b2:6f:73:a7:8a:94:ae:f1:0a:71:4f:fd:34:
                    83:28:4c:4a:18:bd:b2:d5:b9:51:5f:e0:9e:66:98:
                    e6:e1:ad:d7:43:57:3d:ce:1f:9b:a6:17:e1:37:0a:
                    64:c3:e7:26:78:4f:12:2e:3a:4a:e3:2b:ad:f0:89:
                    b5:90:12:cb:a3:b5:23:51:58:d2:7b:40:ac:51:15:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:6D:13:A2:9E:C1:5E:F9:34:64:A7:A1:10:D8:95:E4:4D:7C:5D
            X509v3 Authority Key Identifier:
                keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:18:71:57:0a:ab:ec:84:09:b2:54:e0:e1:bc:dc:38:4a:7e:
         7d:fd:dc:90:ae:0f:5c:13:f7:84:1d:27:98:44:10:c5:c5:16:
         cc:7a:60:f4:9a:de:4d:c9:26:8a:f8:a1:5c:a5:dc:2d:3f:d6:
         50:a1:58:bf:68:62:e4:ac:23:50:4a:31:c1:35:7e:0d:55:5b:
         f6:cc:66:03:44:34:5f:fd:5c:cd:17:2a:39:dd:42:bd:c8:fb:
         83:01:73:8d:5b:22:ae:8e:35:8f:ef:d5:08:21:55:d1:2b:3e:
         15:11:bc:2a:40:51:b2:98:95:a6:27:e6:c8:02:6f:b5:7c:76:
         f0:2a:f1:dd:38:e0:60:7d:b1:b6:33:53:f9:4a:dc:65:52:f7:
         e8:c6:a2:e0:39:39:bd:08:1a:46:85:c3:c2:f5:8b:94:f5:af:
         61:3c:7b:b0:e7:05:9a:ec:38:b5:6d:9e:a0:36:3f:56:48:46:
         b9:e7:80:14:f9:ae:88:ef:c5:cd:68:26:3b:ef:1f:47:25:dc:
         1c:ba:61:06:83:50:60:ff:a8:e5:62:50:1e:3d:ec:37:49:d0:
         ff:a2:e7:b8:4a:9f:cf:14:81:e1:c9:2c:5e:a4:46:1c:13:63:
         d1:35:0f:fc:63:21:f6:db:e5:b9:42:ad:63:40:29:91:7f:c5:
         c6:23:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:20 2026 by rpki-client