Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
File:                     rmmejy1W6TrqTaYW2HK2VX1w35c.mft (raw, json)
Hash identifier:          7/WXMCbioSEk9mYr3QrlqxCxB8FQ/UKZEh6g6bhF9U4=
Subject key identifier:   0F:BA:60:E5:1A:0F:74:93:C2:69:B8:05:63:E0:4D:A6:B1:72:5A:F5
Authority key identifier: AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
Certificate issuer:       /CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Certificate serial:       019D9CD10CDB77759D5F61F7A4CF1E3B7385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
Manifest number:          08A7
Signing time:             Fri 17 Apr 2026 19:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:39 +0000
Files and hashes:         1: rmmejy1W6TrqTaYW2HK2VX1w35c.crl (hash: iWopEHW5qO2HvW9fMnM5JjASfJQUhLMcGKLGeXeM6UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:0c:db:77:75:9d:5f:61:f7:a4:cf:1e:3b:73:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae699e8f2d56e93aea4da616d872b6557d70df97
        Validity
            Not Before: Apr 17 19:00:39 2026 GMT
            Not After : Apr 18 19:00:39 2026 GMT
        Subject: CN=0fba60e51a0f7493c269b80563e04da6b1725af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:6a:56:e5:2e:c3:f3:6f:44:c5:dc:2a:0b:
                    1e:e5:67:76:25:09:83:a4:e7:26:51:80:c0:ee:90:
                    76:d9:9a:b4:08:51:ad:12:3f:5b:41:51:1e:91:da:
                    33:90:02:95:86:11:c0:a6:6e:c0:4f:d6:2a:41:2b:
                    8d:b5:52:68:29:20:e6:e3:03:03:7b:8d:3d:04:cf:
                    0a:a5:0f:c3:57:ac:5e:a2:29:56:32:2e:0e:ce:32:
                    1d:e6:09:76:ff:03:2d:f8:d7:57:43:a5:89:32:f2:
                    3c:ec:9c:57:d1:07:2c:93:e7:51:c9:99:ab:af:81:
                    fc:1f:c9:8f:dc:7a:38:e7:ec:71:b9:7a:c7:5f:ce:
                    1c:11:07:1f:96:e6:89:a4:37:7a:b5:82:87:f9:c6:
                    ce:98:e3:fe:8a:e5:9f:6f:b9:07:de:36:a0:e4:59:
                    7b:dc:b5:86:f3:f9:fa:cb:e3:d0:b0:91:16:ae:5c:
                    01:68:07:1a:0a:9f:c8:5c:07:ba:92:5d:c6:00:d1:
                    c1:b9:14:e8:90:9c:2f:f2:b4:b5:0c:b7:c1:31:2d:
                    73:d6:58:c7:db:0f:f2:7d:c0:74:c9:f8:a3:e5:f9:
                    2c:02:08:0e:50:08:0a:27:dc:15:f8:56:3c:22:29:
                    a4:17:3f:a1:d1:6c:aa:23:15:5f:01:6b:98:da:2a:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BA:60:E5:1A:0F:74:93:C2:69:B8:05:63:E0:4D:A6:B1:72:5A:F5
            X509v3 Authority Key Identifier:
                keyid:AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:9a:0e:9a:91:30:dc:08:47:d6:26:c8:5c:19:f8:c1:5b:
         0c:05:e3:26:cd:ae:a1:86:87:8e:c1:97:fe:5b:63:bd:e2:29:
         65:e3:1c:f4:ed:e0:f4:09:83:ef:36:02:83:af:10:9a:3f:84:
         db:d8:be:c1:4a:2d:81:77:30:0c:12:d7:1b:e5:4a:be:4e:51:
         4e:c8:d6:a4:59:c6:82:d8:b3:ee:86:dc:a4:c2:45:7b:67:2c:
         e2:74:7c:c5:69:39:70:ae:b9:c5:c2:58:a3:f9:05:fb:4d:3d:
         9a:6a:09:4e:70:16:2e:39:b7:73:50:b9:bd:5f:b8:6a:af:89:
         0f:9e:ca:ab:b3:9a:16:aa:0c:77:73:d4:c5:1b:d6:dd:83:55:
         1e:bb:eb:ae:e5:a7:db:04:ff:3e:79:33:05:2c:3e:75:30:e5:
         dc:b4:04:84:f0:09:5e:e6:9f:c2:26:d4:d1:b8:f5:2d:73:a9:
         d4:b0:e0:2e:72:ca:e9:ee:0e:8d:a3:bf:d5:10:cc:66:c7:ae:
         3e:db:51:6e:d2:40:ea:5d:f3:b9:e3:8b:3b:5a:ab:e3:b3:2a:
         81:3d:08:a0:b6:b6:47:38:59:35:74:93:ae:1b:b0:18:3d:6b:
         f0:f6:a7:48:2e:27:09:05:34:bf:a2:6b:45:bb:ee:86:02:ec:
         84:6e:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:09 2026 by rpki-client