Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          ZpzWN7qlgyOOc/N1DQg/axXIQ6vFj2tsUh7CEXe323w=
Subject key identifier:   74:17:A1:F8:8F:CE:D6:A6:49:5C:45:1C:01:6A:28:20:A3:81:A1:9B
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019D9AE34DB05D18A504538E52F327EC6A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0EBC
Signing time:             Fri 17 Apr 2026 10:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:20 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: LpM60Bs4vC345u5x3dixze+R1bw1WY8OOCN4LWHoxe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:4d:b0:5d:18:a5:04:53:8e:52:f3:27:ec:6a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Apr 17 10:01:20 2026 GMT
            Not After : Apr 18 10:01:20 2026 GMT
        Subject: CN=7417a1f88fced6a6495c451c016a2820a381a19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:39:88:d2:af:00:a5:1b:bb:be:35:a8:cd:
                    a5:0c:7a:a2:16:e9:cf:5a:ac:b1:94:26:b1:4b:53:
                    b0:24:82:cc:09:b6:6e:b0:21:92:6b:24:a9:a5:8a:
                    69:df:f4:7a:bc:7c:ae:86:a2:3e:3c:d5:2e:a0:77:
                    44:62:44:90:f4:ee:c6:79:ef:f9:b0:c7:0d:10:30:
                    fc:a6:75:81:40:64:b8:22:3e:ed:df:31:b8:74:39:
                    21:4b:d1:66:81:0c:79:3c:7b:fe:12:e2:c1:12:64:
                    ce:fa:28:89:25:84:a5:a1:27:19:8a:78:10:ab:b5:
                    00:b8:9f:85:7d:3c:f4:66:0b:6c:9f:26:db:77:22:
                    e1:f0:75:22:a0:6d:ac:87:ad:9a:62:b9:a4:01:7a:
                    40:13:be:44:05:4a:31:4b:b5:16:cb:a2:48:ca:13:
                    b0:40:6b:ac:0d:e6:47:57:8b:cb:81:f9:db:1d:bd:
                    59:a0:ba:bc:22:33:6a:de:62:10:38:84:cb:88:1e:
                    c3:7c:40:a5:cc:8d:d7:4d:09:7c:2e:b2:9b:d5:7a:
                    69:97:8f:52:f6:a8:9b:72:06:4a:0e:50:ef:34:3b:
                    a6:bc:98:17:69:f3:6c:42:c8:46:6b:bd:9b:ba:39:
                    ad:f3:a1:cb:8d:de:0e:e7:0d:27:5c:7d:e3:b8:12:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:A1:F8:8F:CE:D6:A6:49:5C:45:1C:01:6A:28:20:A3:81:A1:9B
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:99:0f:82:74:8c:4f:0c:01:ce:27:a9:a5:b4:44:2c:e0:
         fd:46:14:74:8d:e3:7c:34:40:52:16:26:f6:ea:df:8c:44:bf:
         01:29:e1:0c:43:a5:74:7f:b1:e3:e1:b6:13:f5:34:5e:2b:2e:
         bd:14:d6:ca:07:2f:83:87:e5:22:a8:f1:79:00:a7:93:ea:bf:
         b9:85:7e:72:ec:19:12:41:f7:ef:f6:c1:29:77:62:c6:f6:e8:
         98:fe:30:b0:d4:ce:27:ec:c3:ef:5a:39:66:b5:08:a5:98:ed:
         9a:04:9b:08:bf:89:c6:ee:eb:7f:25:39:42:8d:50:02:25:e0:
         e2:03:5c:c8:cd:01:74:28:26:bf:14:62:f6:9c:7e:72:d4:a7:
         a6:59:c9:7b:a6:17:9f:31:4d:db:40:44:be:b9:34:53:b1:dd:
         24:12:c1:8d:f3:53:34:3e:5b:2a:11:d5:a2:6f:7a:de:90:d4:
         65:3a:34:61:67:e2:89:7a:09:a0:5d:23:bb:0b:79:67:6b:2f:
         0b:e5:f5:42:f5:29:78:64:61:cf:34:ee:c2:32:f6:37:d5:ca:
         ad:db:99:94:97:8f:c3:9a:d4:91:dc:0b:cb:d0:82:3d:c0:8c:
         fe:a4:e2:0a:4b:aa:4e:3d:a6:73:ce:36:0c:4a:fb:72:c5:cf:
         37:8e:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:59 2026 by rpki-client