Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          5EQMngzHZ+LN1DVyDNL8W+ZehruV+vlR1ADFZ86iI24=
Subject key identifier:   53:3E:B2:61:A5:D6:B4:7D:05:D4:D5:6E:35:71:DF:DF:81:54:C5:83
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019D98F469186881ADFAB7E202A9DED80808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0EBB
Signing time:             Fri 17 Apr 2026 01:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:47 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: MgLaT9aQ2ocrAR2okj6XpDfnRFUJlj2tBApGVX0ijtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:69:18:68:81:ad:fa:b7:e2:02:a9:de:d8:08:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Apr 17 01:00:47 2026 GMT
            Not After : Apr 18 01:00:47 2026 GMT
        Subject: CN=533eb261a5d6b47d05d4d56e3571dfdf8154c583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:14:1f:cd:b0:c0:35:08:c0:3c:84:bd:74:
                    a7:9f:07:e9:dc:cb:ce:6a:b1:a0:8d:ea:05:e8:79:
                    0d:d4:e0:20:13:cc:2d:5a:70:10:c6:11:09:83:ec:
                    e4:08:61:77:bb:8b:9c:65:d2:c8:a6:83:33:fd:9c:
                    c7:3b:94:16:79:87:e8:cd:2e:63:4a:b2:98:1c:67:
                    b4:3d:a4:e7:30:2f:12:0a:32:d8:cd:97:e9:09:6d:
                    e5:e8:9f:d8:3c:ae:95:d3:7d:cd:c0:ae:fa:c6:0e:
                    c6:96:f9:4c:29:c2:54:14:e6:81:61:75:76:ee:22:
                    98:f9:97:0f:d6:c3:7c:93:3f:a7:21:6b:73:6b:66:
                    8d:28:d0:95:0c:b6:ce:31:ed:a6:db:88:ed:d5:9e:
                    e5:aa:01:47:c8:1e:48:c7:3d:02:e3:84:8e:00:22:
                    a6:11:d6:3f:b9:94:f0:1f:e0:83:3f:a7:92:1c:cd:
                    aa:5d:5f:c9:77:c2:18:f6:84:32:ef:57:d0:de:d4:
                    c7:1a:cd:a0:ca:61:65:57:4f:f2:a9:ff:c9:b5:64:
                    82:d3:63:ce:61:bd:b0:de:6f:8a:fa:87:9f:da:0f:
                    18:67:4f:40:f8:66:35:78:cd:80:03:44:46:8b:78:
                    d9:53:2f:2f:7c:22:a6:c0:8b:8f:17:43:ac:ac:41:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3E:B2:61:A5:D6:B4:7D:05:D4:D5:6E:35:71:DF:DF:81:54:C5:83
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:ea:f0:08:58:d9:1f:cd:69:67:21:19:dd:b1:b2:2d:c5:
         eb:3d:6d:57:ac:38:c4:1c:89:b9:1c:af:ff:d0:e0:06:da:7c:
         af:92:92:4a:52:43:56:07:c4:ea:d7:00:0f:b5:59:77:d1:ad:
         62:5a:11:e7:fb:74:2e:b8:e3:0f:6f:ef:36:12:39:b3:5f:5c:
         c5:7a:15:18:31:29:68:b1:1c:97:8c:25:4d:d4:65:72:fb:9c:
         11:1d:78:1d:82:09:13:1b:2b:24:c9:75:75:df:05:c0:16:2c:
         13:f3:c1:9a:07:53:52:7b:7e:31:b2:61:1e:33:8d:19:2e:36:
         5a:04:c7:a4:a9:51:0a:cf:93:ff:88:38:b3:ca:21:15:04:b5:
         ea:e4:85:52:54:de:1c:ff:dc:91:60:6c:64:40:92:82:7b:c7:
         9d:26:d2:8a:5c:9a:89:e9:95:dd:70:15:a0:0c:1f:ae:9e:64:
         06:f4:01:b0:66:a2:41:08:63:f2:7e:9e:f3:98:7c:5e:5d:62:
         72:06:39:2e:8e:e4:20:03:53:09:d4:94:a8:ec:f7:7f:ed:51:
         07:ef:3a:89:fb:33:31:d2:9e:55:24:35:d1:9c:ee:e0:db:39:
         80:ed:88:c2:44:82:64:99:5e:ba:a6:24:47:e9:cb:3f:d4:2b:
         fd:4e:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:53 2026 by rpki-client