Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          x0HWFbSW225nfQYUoUphAK/3cO3zfznT9GVU12zJsWs=
Subject key identifier:   67:E3:81:16:20:52:16:3A:F5:16:2E:51:89:61:F3:10:B7:A5:20:CC
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       019D9999117A7B6A038E7D5BB63CF7837DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          18BC
Signing time:             Fri 17 Apr 2026 04:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:38 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: 97RbYM2heHD2q3mv3rPMoZc3sE9JKNXKs+cWfxqAx1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:11:7a:7b:6a:03:8e:7d:5b:b6:3c:f7:83:7d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Apr 17 04:00:38 2026 GMT
            Not After : Apr 18 04:00:38 2026 GMT
        Subject: CN=67e381162052163af5162e518961f310b7a520cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:f8:0e:2d:10:75:47:92:d1:e8:61:ad:43:
                    73:41:d1:27:49:ae:ff:99:cd:b8:4a:98:bf:21:1d:
                    51:e7:1b:b1:44:71:71:67:4f:6f:8d:d5:d6:a4:fe:
                    e4:58:b7:6d:8d:96:46:1d:c1:21:0c:45:df:c8:f4:
                    81:1e:0e:fd:81:0a:e4:73:d2:d4:7a:00:62:7e:f7:
                    5a:86:87:f3:45:e6:d0:bc:21:c6:13:02:a1:02:ff:
                    e5:27:8c:f9:c5:69:20:d9:ef:fb:bc:d4:0b:9f:a0:
                    d2:62:66:a2:07:85:2a:45:7c:f4:85:b5:f1:49:a1:
                    ee:96:fe:d4:f5:13:6b:cd:29:dc:31:d2:5f:c8:99:
                    f5:5a:fb:ac:3f:44:03:02:8a:a1:66:a3:e0:f9:9d:
                    ea:32:b2:d6:5f:3f:d5:72:a1:b0:ca:6c:82:17:68:
                    99:5e:68:85:ea:5f:2c:7e:98:a9:4e:3d:04:c3:c3:
                    bc:c6:4f:22:bb:bd:a4:34:97:cd:0e:82:2b:66:2c:
                    0b:42:1f:c8:7d:7b:db:2b:3c:1f:71:2c:d6:1d:9e:
                    97:a9:95:06:ee:dd:be:e8:11:0d:3c:24:0b:f6:df:
                    81:a7:ab:9a:40:77:fb:dc:ba:a4:38:d8:be:54:22:
                    5b:6f:b9:16:57:f6:63:fe:e6:67:f1:3f:ba:fc:f6:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:81:16:20:52:16:3A:F5:16:2E:51:89:61:F3:10:B7:A5:20:CC
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:61:37:22:0a:80:15:82:5f:11:0d:c5:2b:92:33:e9:7c:58:
         df:1f:fe:4d:31:46:7f:e5:7d:65:ea:8d:55:18:a7:f8:c1:06:
         67:1a:91:06:0b:ef:94:d5:d1:18:57:23:28:97:85:80:e4:cd:
         9c:bb:60:40:90:35:ec:ce:88:1f:68:52:44:5f:6f:5b:0b:7b:
         d8:8c:12:28:17:7a:34:ab:0c:e4:85:85:dc:90:10:52:ba:f3:
         76:53:6d:33:fa:59:1a:6c:6d:03:95:88:13:c3:aa:df:ad:1c:
         b9:a9:44:54:62:b3:5c:42:ca:6c:18:4d:85:a6:c8:ec:b9:4f:
         13:88:eb:21:4a:10:6f:02:dd:64:1a:f3:91:d0:67:e0:9f:2a:
         4f:e5:f0:ca:f5:59:7d:02:fd:c9:94:3b:ae:a7:a0:2f:51:df:
         67:20:73:75:fa:d3:e3:7f:9e:b4:9f:9c:57:d3:a5:be:0f:08:
         f7:cf:a1:5e:38:63:46:03:80:6c:4c:60:63:7a:6b:80:48:87:
         34:ba:67:e7:29:91:06:40:68:a8:f5:2d:63:b8:67:71:58:2d:
         6c:a0:da:3f:51:29:34:cc:13:4c:3e:4f:d5:fe:29:5e:a8:c7:
         a2:3a:03:15:07:64:b5:f2:dd:36:23:54:6e:08:c0:1b:60:16:
         33:73:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:11 2026 by rpki-client