Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File:                     p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier:          Nkb8lL+qMwG+NU5GSjMN3rvnYuTEmayJeOaYAT0/52c=
Subject key identifier:   C2:1C:8F:68:28:EB:2E:84:44:0C:65:FF:6A:DC:A9:65:C0:17:20:E6
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer:       /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial:       019D99621B0A510AEFBE32D05F25101CAA97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number:          06BE
Signing time:             Fri 17 Apr 2026 03:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:36 +0000
Files and hashes:         1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: JnRjUFrXMc91UgafFMP2mWUzNq9T7LEd0C2hGC6GwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:1b:0a:51:0a:ef:be:32:d0:5f:25:10:1c:aa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
        Validity
            Not Before: Apr 17 03:00:36 2026 GMT
            Not After : Apr 18 03:00:36 2026 GMT
        Subject: CN=c21c8f6828eb2e84440c65ff6adca965c01720e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:07:2f:9a:fd:49:55:67:ae:34:7d:3a:54:
                    8c:af:87:3e:97:63:e6:87:86:53:97:8d:f1:18:3c:
                    e8:c2:ad:87:ea:89:c7:bd:f1:0c:a3:af:af:c2:49:
                    9f:a9:7c:43:25:f2:c0:70:c6:06:90:90:eb:19:42:
                    98:a5:af:4d:47:e0:17:f8:59:c8:67:51:f8:4b:4e:
                    cc:f2:de:3e:fb:a1:a6:59:37:18:7e:c6:c2:35:3d:
                    cc:2f:98:4a:a5:c2:22:b3:38:5b:87:e2:e5:76:58:
                    63:0e:25:64:bc:21:42:72:f8:36:81:d0:d0:54:2e:
                    c4:7a:6e:97:a3:b5:c4:43:a9:ae:ae:9c:0f:91:26:
                    1a:18:a2:f2:b3:f6:79:da:d2:0f:ae:0a:0c:90:b3:
                    9e:2b:c4:2a:8a:f7:86:88:8f:f5:1f:9c:5a:5c:67:
                    31:22:da:2f:7e:1d:b4:3f:3f:6a:9f:42:17:a0:5c:
                    97:99:c6:01:d9:3c:81:dd:90:31:77:7d:5e:f3:8c:
                    42:53:39:84:77:2f:00:bb:3a:a0:3b:4d:c6:b4:9f:
                    83:5e:bc:b8:96:55:fb:f5:3f:e4:d3:48:51:1d:f4:
                    1e:09:f0:0f:8a:a2:29:e1:96:79:ee:8d:8e:e0:35:
                    29:df:ec:6f:4e:55:29:35:d1:36:c5:fa:d2:22:78:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:8F:68:28:EB:2E:84:44:0C:65:FF:6A:DC:A9:65:C0:17:20:E6
            X509v3 Authority Key Identifier:
                keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:39:d0:75:e9:fc:06:4c:f3:e0:ae:c8:85:66:57:39:33:
         28:34:cd:a7:5d:1d:1d:48:e4:da:6e:50:60:21:43:7f:20:fa:
         b7:bf:2a:37:d7:18:53:ad:5b:b1:f4:c7:96:45:6d:88:9a:ec:
         d3:f4:bc:ca:a2:ba:6c:80:3a:44:51:81:9c:fe:ea:df:4f:ca:
         c3:f7:ea:a7:73:f0:31:f8:3b:a8:48:52:0e:b8:c6:76:62:7d:
         a5:11:40:7d:0a:5a:71:bb:56:a6:d9:33:66:6f:51:21:c2:1e:
         ae:07:43:4e:7d:88:d9:64:be:a1:15:aa:7f:2c:b2:f4:8c:2e:
         5c:40:ac:1a:46:ce:d6:9a:3e:e6:cc:d4:63:86:ff:23:9e:4d:
         98:2e:41:2f:ad:b5:08:fa:85:77:60:b6:3f:01:99:84:85:1a:
         1d:53:a5:48:09:c1:cd:ef:2d:3d:67:b5:dc:ff:24:20:11:63:
         b6:6e:1d:6d:f4:98:5f:59:b7:7d:c0:99:9e:21:30:9a:5a:25:
         2d:ef:31:e5:50:7e:bf:4f:dc:68:c2:af:0c:d1:15:be:92:11:
         77:67:23:ca:7c:ac:81:99:f1:dc:68:a8:0e:1e:4e:b7:df:6b:
         a0:ef:2c:4a:19:c8:62:d5:20:26:27:39:a8:e4:c6:4f:16:11:
         c5:f7:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----