Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File:                     a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier:          chT8hWTKm/OrzLdOYl+je2vUFDzr5TzOiOjGMmsG0ck=
Subject key identifier:   F4:B5:18:C3:78:1B:8A:C9:0D:51:A9:8B:A3:EA:CE:F1:FF:DB:0B:01
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer:       /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial:       019D99991F8BA46A9050DFB3150F30A34E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number:          0766
Signing time:             Fri 17 Apr 2026 04:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:42 +0000
Files and hashes:         1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: NWF3vYdUHgcE4f6b8BCq8c1K6gApU833TQaplOigBzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:1f:8b:a4:6a:90:50:df:b3:15:0f:30:a3:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
        Validity
            Not Before: Apr 17 04:00:42 2026 GMT
            Not After : Apr 18 04:00:42 2026 GMT
        Subject: CN=f4b518c3781b8ac90d51a98ba3eacef1ffdb0b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:85:10:a1:a8:94:90:a9:60:c6:b9:11:0a:
                    42:93:e2:6f:09:51:5f:3f:71:88:9e:f2:d4:a2:1f:
                    63:74:4e:8d:95:6b:90:33:ac:31:8e:65:e5:7b:97:
                    57:a7:28:fa:25:6f:d2:00:50:8f:28:c0:4f:a9:39:
                    f0:07:ff:86:54:69:b6:e4:31:1d:77:f0:86:ce:de:
                    15:8e:de:ed:0d:70:5c:84:82:10:28:4c:0b:d4:7d:
                    10:98:74:9e:3a:88:8b:ee:4d:33:5d:a8:c1:32:40:
                    4b:6c:82:b5:7f:96:3b:28:aa:ac:f7:67:06:ef:1a:
                    ff:cf:c9:ec:e1:b7:0c:3c:69:17:f8:57:25:d9:ec:
                    7e:06:9f:89:14:5a:8a:71:f9:89:11:06:3e:2e:a4:
                    91:74:9c:a9:e7:0d:d5:35:f4:d3:55:7e:e2:56:d0:
                    78:5d:4b:17:f5:3a:df:e4:5a:8b:c4:66:2f:6a:e6:
                    e7:11:49:fa:36:37:47:4c:8d:1f:cc:6e:6b:eb:f1:
                    a8:b8:13:3f:7e:e6:f1:0c:e2:58:39:8b:5e:f5:42:
                    ef:54:d5:96:bd:ef:22:a3:d5:28:d3:c9:78:10:30:
                    65:f9:34:74:6f:0a:e0:42:58:9c:f9:cc:d7:c2:b6:
                    0d:b5:1b:27:f4:dd:e5:54:06:81:a4:62:fc:79:c5:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:18:C3:78:1B:8A:C9:0D:51:A9:8B:A3:EA:CE:F1:FF:DB:0B:01
            X509v3 Authority Key Identifier:
                keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:76:f8:f5:cc:70:a5:71:2a:22:b6:47:11:6f:75:76:a4:0f:
         93:4c:4a:ed:cd:d3:86:c5:90:72:6f:a4:9d:b4:0c:1d:9e:1e:
         e6:fb:bc:67:87:12:1d:64:f9:45:21:b5:6d:96:96:00:bd:e6:
         00:ea:ce:98:b6:0f:7a:5d:a5:af:fe:30:e4:d5:fb:fd:d8:17:
         7f:85:60:e9:9d:27:1e:23:e1:67:8f:57:91:b1:62:fa:8e:f9:
         2f:49:e4:3b:3d:42:73:1d:79:9a:10:dd:99:f0:47:b7:b0:39:
         c6:2f:4c:b2:d2:07:58:9c:85:0e:18:4e:20:4f:bb:29:fa:69:
         b5:68:cb:33:fe:af:ea:1e:9e:1c:4e:be:b3:9a:9c:da:62:ba:
         67:ac:fe:41:c8:22:8b:ca:65:bc:2b:0c:e0:eb:e1:31:57:22:
         39:df:c5:ea:2c:23:7b:cb:98:5c:a9:b6:06:19:fc:2b:33:b9:
         08:b0:dd:40:63:10:c6:0e:f6:e2:f7:84:64:51:4b:64:09:7a:
         a4:68:46:86:a1:b6:6c:44:93:1c:2e:49:ff:fe:09:c8:a0:a9:
         89:7e:7c:b3:ce:e1:21:67:35:82:1d:89:ee:ae:88:a2:b3:5b:
         73:c0:05:ed:98:f3:65:ce:94:00:d1:70:48:29:4e:5a:9f:a8:
         df:66:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:41 2026 by rpki-client