Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          98+vfFFtdWNpvaf5bLSm92mswHk+GoRD8xVTt2hX/t4=
Subject key identifier:   D4:95:44:76:59:42:B9:23:B7:5A:77:2A:C4:5D:9F:3D:B3:3B:B9:A9
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       019D9AE35B2C8601C413079E2311BD99B22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          12B3
Signing time:             Fri 17 Apr 2026 10:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:24 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: SI+kLa/O3CEXrza0wZhWcUarPRuhWS+uRaLvpebSItU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:5b:2c:86:01:c4:13:07:9e:23:11:bd:99:b2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Apr 17 10:01:24 2026 GMT
            Not After : Apr 18 10:01:24 2026 GMT
        Subject: CN=d49544765942b923b75a772ac45d9f3db33bb9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:60:83:50:4d:1b:ae:cf:71:4d:36:b5:6a:
                    b6:6d:4b:a1:b7:a3:eb:78:fc:a9:9d:28:cc:cb:d7:
                    9a:73:09:3d:c1:af:87:7c:3e:bb:ef:8f:34:61:dd:
                    f6:bd:02:0e:e5:78:0c:14:4f:a8:f9:22:11:9a:cf:
                    3e:72:f0:e6:e9:ce:58:59:b1:8a:bd:09:6f:29:64:
                    46:8b:29:53:c5:e1:4c:49:d4:3a:c7:a2:2d:a0:6d:
                    17:7b:39:d5:bc:c0:22:db:69:e8:ce:13:18:bb:10:
                    88:d0:fe:9b:c7:db:0d:31:62:0e:7f:e7:49:03:2f:
                    c6:0a:a2:c5:b2:77:b7:84:be:29:80:aa:29:b8:b2:
                    df:e1:f3:27:34:fa:88:93:37:a9:27:6f:14:62:fc:
                    be:e0:08:47:2a:4d:aa:23:24:29:83:b5:34:c4:f9:
                    b6:75:7e:54:5a:31:fd:37:80:9b:10:0c:72:15:6f:
                    e3:ee:65:c0:49:13:bf:aa:d1:81:4e:7c:a6:d9:34:
                    ba:63:db:a7:67:82:32:23:79:32:0f:4e:75:c6:72:
                    17:0a:58:1d:78:37:76:a7:12:f8:b7:7c:fe:15:b3:
                    34:cb:dd:6b:b5:82:05:12:3a:2d:08:f2:f6:cc:e9:
                    97:bb:5c:bf:ff:82:c3:d4:cd:d5:e3:06:e6:a0:81:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:44:76:59:42:B9:23:B7:5A:77:2A:C4:5D:9F:3D:B3:3B:B9:A9
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:dd:a4:73:7c:96:4e:92:0b:ea:10:6f:86:15:67:ee:6e:
         a4:74:29:eb:90:82:ad:d7:cd:8f:d1:96:0a:fd:65:5f:cd:5a:
         59:4b:65:51:53:6d:1c:7b:08:af:db:c8:f2:a7:7d:89:c4:39:
         d5:2f:e4:12:bd:5d:c8:4c:c3:8c:eb:75:08:c3:63:f2:db:ff:
         b7:51:c9:fa:77:a8:f7:08:a2:71:d9:7d:21:5d:a4:78:53:7f:
         82:5a:39:69:f9:77:8f:7e:a0:32:3f:28:4f:22:24:31:39:e4:
         fb:8e:1d:b2:d8:55:be:d6:da:6f:f4:32:c1:88:2a:c9:6b:ff:
         65:c0:d4:c5:8c:08:a6:96:f2:41:c3:fe:0c:9b:53:30:8f:a6:
         cf:12:e1:ca:e8:0e:90:ae:2f:61:35:cf:d5:50:29:3a:e7:c5:
         18:4f:21:32:5d:16:8c:67:aa:6e:94:72:af:06:4f:ff:ba:7c:
         41:2e:6d:9f:cf:0c:d1:fa:81:98:1f:5e:8a:a4:48:76:c1:b8:
         2a:d1:5b:f7:3d:48:71:89:49:e7:cc:0c:40:55:58:7b:6b:b5:
         67:96:0e:2f:aa:a5:e1:28:08:49:7f:5a:fb:be:c6:25:6a:7b:
         72:f2:33:73:aa:ca:68:ff:fb:40:c0:d8:67:b1:fc:fb:ea:c2:
         e5:6c:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:41 2026 by rpki-client