Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
File:                     b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json)
Hash identifier:          LbfYUCBc6puU5Mrf1NYQNKgReNnkZtiLcPiBG0tR6ZE=
Subject key identifier:   17:99:40:61:78:E1:CB:A5:F0:4C:50:C5:D5:23:D6:A1:A6:F9:87:4F
Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Certificate issuer:       /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Certificate serial:       019D9B5175D56396BCF50F009FF6150F5BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
Manifest number:          0F41
Signing time:             Fri 17 Apr 2026 12:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:40 +0000
Files and hashes:         1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: lBvgAcnZPqw3nwH+9zAq0QQ/H//kcTWYEy6hrXiMUvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:75:d5:63:96:bc:f5:0f:00:9f:f6:15:0f:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
        Validity
            Not Before: Apr 17 12:01:40 2026 GMT
            Not After : Apr 18 12:01:40 2026 GMT
        Subject: CN=1799406178e1cba5f04c50c5d523d6a1a6f9874f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:92:86:86:40:82:4c:65:c9:68:57:3d:07:
                    76:78:58:cf:0c:b6:ab:91:ff:54:c3:4d:84:25:93:
                    b2:91:88:29:79:b0:f9:67:b1:21:6e:18:3a:dd:0f:
                    7f:67:ba:a5:73:39:dc:1d:e5:01:69:f1:71:b5:fb:
                    9b:43:12:4e:89:45:25:b6:b8:c4:c0:d0:0d:e3:ef:
                    64:8c:9f:e2:63:c8:48:45:53:d0:fe:75:62:9a:2d:
                    b6:3c:4f:87:a7:b5:ca:c4:0d:4b:b0:ba:29:67:d7:
                    ab:ed:71:17:90:f5:5e:94:12:b2:41:fe:7c:79:89:
                    55:8a:0d:a7:f4:05:3b:ff:22:21:7d:ae:28:9b:40:
                    2b:41:f0:1f:d5:2b:43:8e:10:18:9e:91:27:ed:ee:
                    81:4c:15:9d:0c:bf:67:32:46:57:cc:6a:34:bc:e8:
                    5b:ee:63:80:79:ef:ac:87:aa:b5:78:06:0d:83:22:
                    af:ac:60:78:45:d4:70:99:dd:70:f1:65:7b:36:5c:
                    d5:78:fe:d5:24:5f:fc:bc:83:9d:87:68:1f:b4:37:
                    cd:7e:d3:8d:fd:f8:18:d9:bf:14:19:77:04:a6:03:
                    e2:8c:71:84:c4:64:07:30:41:7a:50:ce:d7:54:07:
                    21:ae:74:a6:92:a3:38:e2:1f:95:61:2c:0a:e1:9b:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:40:61:78:E1:CB:A5:F0:4C:50:C5:D5:23:D6:A1:A6:F9:87:4F
            X509v3 Authority Key Identifier:
                keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:51:56:e0:74:36:40:9d:79:3c:fa:33:e8:b1:f4:07:58:d9:
         98:ea:b1:42:0f:2e:bd:f1:e7:07:9f:20:23:1e:e4:0a:98:06:
         74:aa:65:5a:8f:4c:23:c0:9c:49:6d:4f:f4:95:13:52:b7:7c:
         57:fb:e6:a5:53:70:71:66:cb:1d:74:43:5e:90:89:1d:7d:3e:
         61:e1:d5:f3:f5:cd:81:ce:5a:c4:ae:ad:da:fc:77:15:97:4d:
         e9:91:4f:4b:13:b8:8c:49:53:da:ba:f5:f3:82:e7:d8:17:78:
         05:0f:70:53:bb:df:f8:0c:fc:71:a7:7c:96:cf:67:9a:f1:43:
         91:90:f6:c2:4f:00:e7:2a:68:3d:c1:7c:52:ca:6d:fe:f5:c0:
         40:17:09:24:f5:e5:b3:2f:ea:dd:ae:d9:d9:df:a4:ba:a2:93:
         26:53:dc:74:c9:39:d5:ee:41:84:1c:45:41:58:8d:d4:77:d2:
         54:79:69:71:d7:80:b6:b3:f0:df:47:61:22:a9:c2:d8:9b:f9:
         c5:f7:82:bd:9f:25:0b:e4:fa:d0:e4:7b:c9:f5:03:4b:a0:27:
         02:f7:09:1b:7c:4f:79:fd:4f:2b:6c:04:74:b2:d0:8b:af:fa:
         91:ea:4d:b4:58:b4:5c:44:ac:d1:96:c4:63:7e:4b:fa:43:8f:
         90:bf:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:17 2026 by rpki-client