Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          omG48N//nQ2T+uJFzwKtJuZUadypGd2VEIQOPEzsVrI=
Subject key identifier:   C8:0D:FC:2A:EC:27:A0:1C:6B:02:1A:06:62:52:C7:1D:81:D8:1A:64
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       019D98F5686D169749109E80F15D972CD632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 01:01:52 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:52 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:52 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: 8P8avBxJN1ikHH09Mlq7UZPPmHfCwJC8XN0DIYmKUaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:68:6d:16:97:49:10:9e:80:f1:5d:97:2c:d6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Apr 17 01:01:52 2026 GMT
            Not After : Apr 18 01:01:52 2026 GMT
        Subject: CN=c80dfc2aec27a01c6b021a066252c71d81d81a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:82:00:67:81:1e:2c:03:9f:ca:71:48:28:
                    ca:a9:be:6f:a5:3b:43:5c:4a:17:64:f3:17:2b:2b:
                    da:1e:7e:a1:a3:0f:a5:01:48:f8:71:4f:be:e6:f4:
                    ff:0b:47:a5:dc:03:b7:33:55:a7:50:d1:f0:29:6f:
                    24:57:92:a0:c3:34:e7:10:7b:c9:63:1e:8e:78:74:
                    34:10:a5:44:b9:13:26:0c:a1:af:36:de:07:2e:b0:
                    dd:b8:95:ed:79:b3:ee:b0:a5:53:3f:28:a4:c9:9d:
                    56:a2:9f:4b:8e:49:51:3d:13:a0:df:ff:86:c8:f9:
                    cf:5d:86:7b:c3:9b:41:c3:2b:e3:c3:44:74:7b:ac:
                    d8:4e:1b:7c:0b:4f:62:fc:5d:1a:b1:90:2c:25:8b:
                    69:08:4d:ae:c8:e3:d5:f1:4c:d5:9f:15:9c:96:35:
                    d9:a5:d0:b4:04:71:cb:dc:78:09:65:7e:9e:1e:fd:
                    6f:38:a6:d9:2b:85:6b:41:96:15:dd:b7:4a:cd:b9:
                    26:0a:0b:bb:79:45:47:ce:cd:07:fe:20:36:32:f2:
                    eb:f0:62:78:f2:cb:93:d5:37:0f:ed:f0:7b:8a:9d:
                    c1:f9:23:c0:41:21:75:6e:46:06:05:73:eb:98:c6:
                    a8:1e:78:45:d0:3d:a0:44:b9:5e:db:ca:96:b7:ea:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:FC:2A:EC:27:A0:1C:6B:02:1A:06:62:52:C7:1D:81:D8:1A:64
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:60:f5:75:0b:2f:74:34:8d:21:29:8e:cc:e4:b5:ef:1c:
         29:29:81:34:8c:ae:ee:88:aa:24:e5:48:ff:35:30:67:de:52:
         c4:5b:a5:94:77:d6:1d:c8:25:25:4f:fc:82:07:70:8e:b3:5f:
         44:ab:5b:90:96:7e:1b:2d:2d:3d:5d:00:37:1c:c7:32:85:ac:
         83:39:45:02:07:72:b5:30:c5:e8:fd:c3:9b:2c:3d:fe:88:33:
         5c:3f:b7:d7:e1:30:b3:72:10:7f:96:24:45:73:96:8c:b2:bf:
         28:24:a6:78:e9:a9:ad:a2:8f:e3:e7:05:3e:da:f4:91:53:d6:
         74:66:51:aa:b7:8c:a8:5d:66:90:e7:9a:45:5f:fe:70:18:f2:
         23:92:76:cc:9e:89:29:36:22:15:23:8e:d2:cd:95:32:7c:e9:
         4e:d2:41:9f:54:1c:99:c7:c1:2b:0c:82:22:8e:2b:0f:10:c0:
         f1:a2:77:86:c8:73:ac:a8:f4:31:47:eb:ec:04:45:fa:db:f6:
         55:3a:b8:05:7f:f3:f2:fe:e0:48:54:a2:0a:73:09:f6:c4:aa:
         69:3c:c0:9e:aa:25:ce:42:8e:9c:df:5d:8b:e0:87:c1:5a:28:
         09:86:4f:7e:3f:97:48:e1:1d:1b:c5:af:c5:18:98:75:17:5e:
         dc:38:8b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9WhtFpdJEJ6A8V2XLNYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NGIzYWI5OWY4NjQ0YWNkNWU2OWE5YTVmMzg1NDZjZGNj
NmU5NzQwHhcNMjYwNDE3MDEwMTUyWhcNMjYwNDE4MDEwMTUyWjAzMTEwLwYDVQQD
EyhjODBkZmMyYWVjMjdhMDFjNmIwMjFhMDY2MjUyYzcxZDgxZDgxYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng6CAGeBHiwDn8pxSCjKqb5vpTtD
XEoXZPMXKyvaHn6how+lAUj4cU++5vT/C0el3AO3M1WnUNHwKW8kV5KgwzTnEHvJ
Yx6OeHQ0EKVEuRMmDKGvNt4HLrDduJXtebPusKVTPyikyZ1Wop9LjklRPROg3/+G
yPnPXYZ7w5tBwyvjw0R0e6zYTht8C09i/F0asZAsJYtpCE2uyOPV8UzVnxWcljXZ
pdC0BHHL3HgJZX6eHv1vOKbZK4VrQZYV3bdKzbkmCgu7eUVHzs0H/iA2MvLr8GJ4
8suT1TcP7fB7ip3B+SPAQSF1bkYGBXPrmMaoHnhF0D2gRLle28qWt+pEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgN/CrsJ6AcawIaBmJSxx2B2BpkMB8GA1UdIwQY
MBaAFERLOrmfhkSs1eaaml84VGzcxul0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMt
ZDkxNGJiNzllZWRjLzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMtZDkxNGJiNzllZWRj
LzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASflg9XUL
L3Q0jSEpjszkte8cKSmBNIyu7oiqJOVI/zUwZ95SxFullHfWHcglJU/8ggdwjrNf
RKtbkJZ+Gy0tPV0ANxzHMoWsgzlFAgdytTDF6P3Dmyw9/ogzXD+31+Ews3IQf5Yk
RXOWjLK/KCSmeOmpraKP4+cFPtr0kVPWdGZRqreMqF1mkOeaRV/+cBjyI5J2zJ6J
KTYiFSOO0s2VMnzpTtJBn1QcmcfBKwyCIo4rDxDA8aJ3hshzrKj0MUfr7ARF+tv2
VTq4BX/z8v7gSFSiCnMJ9sSqaTzAnqolzkKOnN9di+CHwVooCYZPfj+XSOEdG8Wv
xRiYdRde3DiLDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:14 2026 by rpki-client