Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File:                     e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier:          hSPqzuJ7B3vQ8TmUsB4Ug8BQAvuesbYJ2nCX3gdTqyQ=
Subject key identifier:   2F:34:44:CF:B3:4F:DA:DF:C9:E1:61:9F:44:6A:41:F8:BB:AB:C6:91
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer:       /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial:       019D98F51F0993081E6328CA59A099702A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number:          18BB
Signing time:             Fri 17 Apr 2026 01:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:34 +0000
Files and hashes:         1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: rqTatQddA1kpjBBLsVjS6EU/QR4zigu+3NRHcaKVAeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:1f:09:93:08:1e:63:28:ca:59:a0:99:70:2a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
        Validity
            Not Before: Apr 17 01:01:34 2026 GMT
            Not After : Apr 18 01:01:34 2026 GMT
        Subject: CN=2f3444cfb34fdadfc9e1619f446a41f8bbabc691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:ff:26:f5:42:3d:63:6a:fa:6b:30:ec:41:
                    65:7a:5b:e9:b4:3e:7b:d6:8e:07:54:2a:c1:cf:b3:
                    c6:e8:0b:fe:9c:37:3c:c5:a9:fd:25:48:dd:2a:ae:
                    39:7b:28:23:e1:c5:77:db:cf:fb:ae:0e:53:b5:ec:
                    5d:dd:c7:d3:4e:06:f8:ca:d5:f9:4d:c3:d8:3d:07:
                    de:a1:6d:13:a8:17:a6:b9:68:db:5e:03:df:73:28:
                    25:9f:c2:89:d2:a5:44:37:62:33:1d:d5:de:95:24:
                    d0:1c:f5:8a:2b:7d:7b:da:dd:ea:77:6a:37:3c:63:
                    81:da:46:47:1b:fa:4d:18:8d:06:30:3b:c2:b4:2c:
                    c9:2a:b9:9b:c4:f7:0a:82:57:d9:89:2a:c9:97:4c:
                    ec:11:a6:f8:7d:d9:ca:bb:17:a4:16:73:e9:0e:15:
                    a2:29:d7:2e:a3:1f:e3:e7:f6:79:e0:4e:d3:6c:8e:
                    e9:7f:af:dc:30:e3:bb:fb:33:b2:77:68:95:38:cc:
                    68:53:af:25:12:5b:b4:83:3c:30:d5:bc:12:d1:9e:
                    6b:ce:5a:c0:e3:51:5f:b8:4a:bb:bc:7a:fc:ba:9f:
                    0a:e7:af:d9:4e:18:2b:cd:f1:2a:b7:c5:9b:3c:a6:
                    49:21:39:c6:46:9d:b2:13:61:c7:3f:c6:8b:bb:26:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:34:44:CF:B3:4F:DA:DF:C9:E1:61:9F:44:6A:41:F8:BB:AB:C6:91
            X509v3 Authority Key Identifier:
                keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:20:fc:9b:84:fb:5a:c2:98:bc:f4:a4:99:01:0c:44:ed:59:
         da:72:e3:08:f8:87:fd:50:38:e1:83:77:4e:c7:4f:06:9d:d3:
         76:fc:21:bc:ce:af:7e:fc:33:58:e9:c7:b6:9f:d3:54:57:c5:
         32:60:4d:33:ec:5c:c8:74:a7:70:5d:aa:8b:01:7a:08:d7:f9:
         d6:b6:ba:69:0f:46:2d:88:2f:a4:f3:86:c9:ae:5c:84:00:c4:
         4a:7f:6a:7e:dc:f2:25:b1:a8:e1:bf:76:0f:43:ac:69:d6:b4:
         04:18:ca:7c:1b:38:f2:cd:5e:99:38:6d:ab:8a:79:48:44:57:
         8a:70:01:6c:e6:55:38:0a:da:52:c5:01:9d:74:b1:2b:62:41:
         c2:d8:6f:88:54:84:ac:02:b8:62:fb:fd:30:3c:0a:a3:f5:af:
         14:06:e4:5d:ea:fe:47:f9:75:09:d3:3b:8c:3d:87:fe:80:4e:
         13:69:ad:5e:de:a1:42:d7:a6:e7:c4:84:2d:16:bb:85:eb:96:
         82:d4:b5:dc:c0:4b:57:bb:52:5e:99:38:c1:41:cf:c8:ab:42:
         5f:6e:03:a4:9b:b5:bf:98:81:ca:04:be:1c:0e:1e:41:51:f7:
         f4:63:59:d3:85:4b:7e:0f:b3:c1:19:2c:d0:9d:fc:73:44:71:
         0e:87:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----