Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File:                     jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier:          9sjFi2xl9UJ8IECKMOpoLVE4wW/C6syrYMq8jobj8zk=
Subject key identifier:   C8:AC:E1:18:1B:5F:B7:FB:CD:5A:5D:3B:2B:6F:7E:60:1C:9F:F8:6F
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer:       /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial:       019D98F4C0FCD78B5F485008990D16228222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number:          07B7
Signing time:             Fri 17 Apr 2026 01:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:10 +0000
Files and hashes:         1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: 5G/oQL1XGTkgy36NwJOTY9ImoX94HpRTuwyw4YmOl6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:c0:fc:d7:8b:5f:48:50:08:99:0d:16:22:82:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
        Validity
            Not Before: Apr 17 01:01:10 2026 GMT
            Not After : Apr 18 01:01:10 2026 GMT
        Subject: CN=c8ace1181b5fb7fbcd5a5d3b2b6f7e601c9ff86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:ae:3c:65:89:4e:98:3e:3c:f4:e9:4e:94:
                    ad:f0:da:72:1c:07:df:3c:84:9b:ef:20:be:13:10:
                    70:e3:b3:81:24:2f:7b:a0:8e:74:c7:ae:55:d0:59:
                    e9:44:2d:19:55:db:9d:3b:65:11:67:d5:c3:2a:6d:
                    5f:ca:49:47:2e:f9:c1:2b:ff:b6:3a:ab:0a:81:f9:
                    f0:ea:43:fe:12:0d:96:33:37:fc:60:06:46:fb:c7:
                    d0:b2:a5:24:03:92:56:00:57:77:d0:87:d3:58:b3:
                    a9:e5:e0:7c:85:41:f4:45:73:02:45:7b:15:43:88:
                    06:58:6e:0b:34:e3:99:67:18:e5:64:d6:b3:d7:0c:
                    28:fe:a9:7e:46:45:54:6a:0c:17:0d:2f:c4:78:14:
                    e8:49:d4:c8:95:4f:c4:da:5f:cb:cc:b6:8f:fe:d5:
                    5d:de:10:43:26:97:04:1e:2b:52:77:b6:fa:2d:b7:
                    82:78:29:ac:cf:59:e3:12:47:a3:03:0b:d4:26:41:
                    3e:4d:fb:a8:9d:4a:e1:17:28:f4:ac:c1:8d:02:a5:
                    e9:cd:53:1e:ac:09:0e:8d:08:8f:8e:9c:e6:f8:ee:
                    77:d2:9a:27:c0:d3:81:2c:b1:b8:1a:4c:28:ef:39:
                    c6:fd:fd:c3:19:28:6f:7e:f7:3d:6b:2f:06:5d:30:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AC:E1:18:1B:5F:B7:FB:CD:5A:5D:3B:2B:6F:7E:60:1C:9F:F8:6F
            X509v3 Authority Key Identifier:
                keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:ab:e2:4c:42:7e:82:7e:dd:5b:14:54:6c:fa:25:46:1b:
         e4:98:28:ae:58:44:a4:ff:9b:e9:bf:7e:00:ce:79:1d:3c:6e:
         75:fa:e2:8b:82:2a:69:ab:67:13:68:b0:2a:47:04:a5:36:05:
         e1:11:a0:11:c0:20:d8:7e:27:b9:62:c5:f1:9a:fe:47:9e:93:
         6a:71:bf:de:36:2f:52:74:6f:b8:23:8f:9a:a9:ea:dc:88:74:
         56:95:7f:27:57:8f:da:90:0a:34:84:e9:eb:3c:65:6d:f7:89:
         f2:8b:8e:bd:25:1b:2f:ef:3a:4c:d8:5d:36:0c:27:4d:bd:d4:
         f8:5b:cd:74:a1:a0:c7:50:98:14:41:b9:e6:58:02:3b:c2:23:
         9b:f6:c3:13:6d:dc:8b:c6:4f:2f:8f:8c:17:71:17:fc:45:d8:
         2b:b5:89:9e:5f:f4:0f:7c:b6:cb:d7:83:34:1d:58:91:4d:d7:
         69:47:77:08:16:dc:ca:1c:69:46:ff:65:d3:ac:e8:1b:e6:f0:
         10:8e:50:fc:a8:43:d2:4a:cd:6c:f3:ed:d3:ea:e8:2c:5b:45:
         ac:c2:5a:8b:da:c4:f5:77:66:19:87:d3:d0:b6:3b:0a:c7:f1:
         c2:bc:75:a4:8a:45:7e:24:b4:58:d0:65:19:73:28:c8:28:c4:
         a9:4a:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:25 2026 by rpki-client