Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          Wv1OmYRW1BQiJJxrptwHy3N9FEip+8TrZLMxKq2386Y=
Subject key identifier:   7C:CA:C4:0C:62:78:81:BD:F6:36:8C:81:71:02:AB:EE:85:8D:B7:32
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       019D97E1E9397648846E3B285D9FBAC94C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          0F3F
Signing time:             Thu 16 Apr 2026 20:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:58 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: jcETV5IisHeKBy8Xwt7PXdYW/W7p4/GcWi7SvO8gzSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:e9:39:76:48:84:6e:3b:28:5d:9f:ba:c9:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: Apr 16 20:00:58 2026 GMT
            Not After : Apr 17 20:00:58 2026 GMT
        Subject: CN=7ccac40c627881bdf6368c817102abee858db732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:6c:de:de:46:17:e5:11:53:5a:08:1c:a9:
                    77:38:54:d7:4e:d8:45:77:ed:da:ac:bd:3a:2a:fc:
                    27:e3:b2:98:b7:4e:cc:3f:13:2b:f7:3d:a2:5c:7c:
                    e0:81:b9:f0:b5:df:d8:21:5d:c0:f5:58:76:ac:df:
                    20:d7:29:8d:a9:0a:af:52:d7:2c:1f:57:e4:10:0c:
                    0e:52:7f:f3:e9:80:68:e7:96:ad:81:14:4b:8d:3f:
                    04:fe:2c:19:95:c8:8c:4b:ef:8f:3b:5b:c5:c9:75:
                    e2:01:2b:51:8d:d4:82:ed:25:48:2c:4c:e6:d9:93:
                    10:69:55:00:20:ef:4a:09:c2:e6:6e:af:41:1b:bb:
                    20:a8:0f:22:f7:75:93:fe:d6:29:26:8c:5e:1f:49:
                    14:71:69:9c:0d:90:63:6e:ba:2f:2f:8f:76:b0:5e:
                    5f:92:7c:70:66:59:b4:2a:54:42:3f:ae:88:53:ba:
                    70:48:a9:f5:9e:e0:5b:13:6f:50:fb:0f:83:28:99:
                    38:9e:89:62:08:de:2e:95:e3:e0:b6:3d:63:96:f4:
                    2d:43:26:fd:28:58:0c:ea:20:32:c7:8a:3f:a4:f1:
                    da:91:3f:21:2e:12:1b:d9:6c:dc:12:4e:e4:14:ee:
                    d6:f9:8b:df:9e:ca:2c:bb:bf:70:a2:53:d8:26:5a:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:C4:0C:62:78:81:BD:F6:36:8C:81:71:02:AB:EE:85:8D:B7:32
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:fd:1e:51:09:2b:83:fd:5d:4c:b7:66:fe:09:a7:f6:be:
         10:ef:a7:2c:c7:e7:90:25:fe:8f:11:cf:91:d1:a2:4a:52:e3:
         88:26:c8:c8:0a:06:c5:0d:83:57:7f:59:bb:3f:33:04:a0:a2:
         c6:e8:d4:5a:c7:7d:60:2a:80:d0:9d:11:13:ed:5e:64:c5:63:
         11:4e:d0:84:41:42:0f:18:54:2a:f5:20:c6:4e:5c:10:fa:fb:
         3c:a4:80:aa:44:bb:51:ec:22:5a:09:66:44:4a:39:2c:00:6a:
         7b:e3:68:8e:18:7e:b0:5e:29:01:0a:a2:7f:13:73:37:e8:61:
         aa:5b:00:8f:ba:b1:bf:78:d4:05:60:60:35:b8:07:0d:cc:d1:
         4a:0d:e8:48:b8:d9:26:f9:42:a1:ca:65:88:f7:2a:40:7b:7d:
         4e:3c:65:4c:31:0b:89:f3:f2:5d:56:1d:4b:82:7b:32:fc:de:
         9c:66:64:06:f7:cd:10:7b:e2:54:fd:4c:ee:95:c0:a7:c0:f3:
         16:22:34:ec:6d:5c:61:99:23:be:ea:fb:cf:8d:f4:f5:58:4f:
         d2:36:11:77:7a:b2:d4:fc:0f:89:89:24:85:1c:fb:b4:d3:b8:
         64:1f:bd:cd:c6:74:5c:55:25:f3:72:3e:df:a6:72:65:94:d0:
         17:ec:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client