Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          EIguSVhIASyTeDUEBacA+8nCamquFe9b7psBjOWMYfk=
Subject key identifier:   96:19:76:40:10:37:08:94:A5:D3:CC:DD:55:EF:40:0C:90:49:83:83
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       019D9AE28D3A41C71588533BD3EAA19160A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 10:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:31 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: o4K7P1xA3Rw5czgl7GQnFnYPYFBZdnyMvf46Rl0yeog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:8d:3a:41:c7:15:88:53:3b:d3:ea:a1:91:60:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Apr 17 10:00:31 2026 GMT
            Not After : Apr 18 10:00:31 2026 GMT
        Subject: CN=9619764010370894a5d3ccdd55ef400c90498383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:18:37:12:66:5c:50:9b:6f:f5:94:6d:69:
                    05:49:38:da:94:8e:d1:24:25:ab:3d:f9:9d:f4:00:
                    15:4d:14:08:96:09:3f:2a:db:9c:1d:a2:de:5a:8b:
                    a2:62:57:e4:dc:26:20:5f:73:dd:09:3f:35:27:5a:
                    d0:08:a7:39:87:2d:fd:e8:54:46:47:5e:2a:c0:c5:
                    40:1d:19:3d:d1:e8:32:d7:13:ed:73:4c:3a:c1:d1:
                    3f:53:1a:f0:55:c8:2b:d3:fd:4c:ff:a3:0d:fe:98:
                    8c:b1:5f:73:fa:f8:e2:d5:97:6f:17:a8:1c:13:73:
                    e4:78:9e:38:e1:26:29:50:9f:49:37:b9:40:df:ef:
                    34:64:74:14:92:fa:8b:8a:68:b1:30:6d:94:88:2f:
                    2a:2d:ae:d2:ec:3e:6a:b1:5b:17:1b:7e:0e:1d:e9:
                    5a:52:37:39:20:4e:5f:59:04:52:a1:72:07:d7:83:
                    ff:76:b1:97:af:b1:33:8d:9f:02:0d:0a:73:ad:6e:
                    43:ad:58:e7:ae:ea:b2:3b:35:eb:27:54:4f:33:6e:
                    ed:50:a7:e2:7b:a6:2d:ae:ca:7b:6a:f6:f3:8f:fc:
                    cf:a1:2d:2c:5e:4d:db:b7:09:42:4c:3a:47:ab:11:
                    cf:0b:65:f7:86:84:17:2e:69:c6:c6:91:19:81:d9:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:76:40:10:37:08:94:A5:D3:CC:DD:55:EF:40:0C:90:49:83:83
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:5c:bd:46:d2:18:33:cd:73:09:b2:5c:b8:e2:82:28:18:
         2a:37:29:0d:10:81:e2:40:94:e2:a4:e4:fe:ad:b6:f9:cd:d5:
         3f:31:5e:60:46:44:26:85:d0:e7:8d:1e:4a:67:99:32:67:a0:
         06:0e:e1:e0:b9:d1:f2:af:06:77:65:bf:5c:6b:58:c7:80:de:
         bd:0c:b2:0d:d9:19:32:0b:40:c4:59:ae:32:fb:77:ed:ec:63:
         e2:8d:94:1b:e7:9b:e0:b9:9a:1b:04:ee:8d:2e:9d:21:3e:54:
         e9:9a:a1:ed:d9:b1:61:ba:da:b3:12:c7:d2:7e:22:ac:c9:cd:
         fa:b7:cd:1b:50:0d:52:eb:1a:11:52:fd:33:59:54:26:55:97:
         d2:94:f3:7b:74:f9:7d:11:dc:c9:9a:19:37:a2:cb:bc:18:19:
         dd:0c:4c:61:55:3e:b6:7c:59:6a:3a:f7:bd:be:82:05:dd:9a:
         4c:0b:ff:ef:aa:be:99:03:f3:de:d6:1d:97:d1:b2:c7:24:79:
         9e:1b:fa:63:88:c5:03:a7:b1:1d:ec:44:a5:e1:79:22:9e:a2:
         a0:4c:0d:0a:1f:cd:51:93:98:1c:c4:6d:04:f0:07:62:86:95:
         e9:d4:42:04:54:04:77:0c:e2:44:3b:0a:aa:d8:32:a8:f1:61:
         53:47:01:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4o06QccViFM70+qhkWCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjYwNDE3MTAwMDMxWhcNMjYwNDE4MTAwMDMxWjAzMTEwLwYDVQQD
Eyg5NjE5NzY0MDEwMzcwODk0YTVkM2NjZGQ1NWVmNDAwYzkwNDk4MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zgYNxJmXFCbb/WUbWkFSTjalI7R
JCWrPfmd9AAVTRQIlgk/KtucHaLeWouiYlfk3CYgX3PdCT81J1rQCKc5hy396FRG
R14qwMVAHRk90egy1xPtc0w6wdE/UxrwVcgr0/1M/6MN/piMsV9z+vji1ZdvF6gc
E3PkeJ444SYpUJ9JN7lA3+80ZHQUkvqLimixMG2UiC8qLa7S7D5qsVsXG34OHela
Ujc5IE5fWQRSoXIH14P/drGXr7EzjZ8CDQpzrW5DrVjnruqyOzXrJ1RPM27tUKfi
e6Ytrsp7avbzj/zPoS0sXk3btwlCTDpHqxHPC2X3hoQXLmnGxpEZgdn1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYZdkAQNwiUpdPM3VXvQAyQSYODMB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnlcvUbS
GDPNcwmyXLjigigYKjcpDRCB4kCU4qTk/q22+c3VPzFeYEZEJoXQ540eSmeZMmeg
Bg7h4LnR8q8Gd2W/XGtYx4DevQyyDdkZMgtAxFmuMvt37exj4o2UG+eb4LmaGwTu
jS6dIT5U6Zqh7dmxYbrasxLH0n4irMnN+rfNG1ANUusaEVL9M1lUJlWX0pTze3T5
fRHcyZoZN6LLvBgZ3QxMYVU+tnxZajr3vb6CBd2aTAv/76q+mQPz3tYdl9GyxyR5
nhv6Y4jFA6exHexEpeF5Ip6ioEwNCh/NUZOYHMRtBPAHYoaV6dRCBFQEdwziRDsK
qtgyqPFhU0cByg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:49 2026 by rpki-client