Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File:                     e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier:          bTfBgzYbax3OQi+drhcWIm9WhRTr7zxjSt8aG242ZUs=
Subject key identifier:   76:AF:B7:E0:65:C9:3F:D0:A5:23:9A:A4:EA:82:07:31:29:82:0E:06
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer:       /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial:       019D98F40C189A9A545B49113601BF9B4C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number:          0947
Signing time:             Fri 17 Apr 2026 01:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:23 +0000
Files and hashes:         1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: yWv3ENuo4OhPnUVBsxxIpyYGNjgT5OXX87SXiZ2pZoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:0c:18:9a:9a:54:5b:49:11:36:01:bf:9b:4c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
        Validity
            Not Before: Apr 17 01:00:23 2026 GMT
            Not After : Apr 18 01:00:23 2026 GMT
        Subject: CN=76afb7e065c93fd0a5239aa4ea82073129820e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:8d:17:14:89:bf:82:0a:47:e4:0f:de:61:
                    72:32:80:31:94:d7:1f:11:9c:39:56:e9:27:41:da:
                    ee:19:13:c2:51:75:5c:e2:44:52:2f:b4:93:aa:7d:
                    f5:c8:d5:ff:8c:83:2d:14:13:51:0e:ac:c4:12:63:
                    32:6a:bc:85:d0:5b:e0:d8:14:9d:64:3e:33:a6:a8:
                    cf:64:95:b1:72:a3:68:b5:8c:1e:b1:18:be:0b:ad:
                    9f:17:39:c6:7a:c6:1c:88:76:24:4a:16:e2:cd:38:
                    fe:7a:70:d2:96:97:33:af:5c:05:91:2d:ac:00:f8:
                    cb:c4:83:74:dc:d9:fd:40:8d:06:9d:db:10:81:00:
                    9a:d4:07:19:4d:b7:0f:71:4b:d7:68:af:30:5e:bb:
                    35:c8:11:e9:00:a9:7c:59:9d:49:a0:05:fb:ea:84:
                    c8:71:c5:23:f8:f2:a4:cb:ad:f2:3e:81:41:ef:2b:
                    fb:c3:07:62:6b:40:47:d1:38:23:f6:e1:b1:c6:c4:
                    e0:87:83:f9:3d:96:e7:1a:bb:61:8b:d8:d7:ff:3d:
                    98:a0:fa:ec:b8:9a:8a:c0:f5:e1:02:e1:d8:17:7e:
                    2a:d4:37:b1:f9:20:5d:22:1d:51:4d:0f:57:41:03:
                    14:ba:97:6b:f9:ff:8b:65:f9:92:8b:21:1f:3b:92:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:B7:E0:65:C9:3F:D0:A5:23:9A:A4:EA:82:07:31:29:82:0E:06
            X509v3 Authority Key Identifier:
                keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:54:3f:ff:7e:39:80:c5:12:46:f0:2c:2c:bc:2f:2c:af:1c:
         aa:4b:ab:49:46:11:29:30:8d:ad:fe:c5:7f:ea:c6:3c:6b:27:
         b2:0a:48:87:1d:b3:6d:64:fc:40:8e:3d:e9:24:3f:b8:29:80:
         85:f6:3b:a7:83:99:45:34:1f:e9:b8:00:d5:53:bb:ff:67:08:
         87:b5:06:f8:1e:e6:a3:d4:63:85:93:91:9e:f8:77:45:5f:ca:
         16:f0:69:87:49:bc:4c:43:19:50:ff:c1:f5:99:fa:82:f3:51:
         e5:80:d2:1c:d6:5a:f6:5a:12:32:6c:89:79:b1:24:66:28:70:
         79:51:05:b9:32:37:cb:fb:02:20:f4:2c:47:9e:53:5d:b1:fa:
         ed:ab:3b:17:94:78:65:f4:bd:45:4b:4b:90:3a:46:ed:d6:d0:
         3e:7c:73:e5:70:64:8c:d5:d6:61:e0:62:db:b6:cc:43:7a:a7:
         48:be:e4:19:02:71:2a:19:3e:52:97:3b:01:e5:8f:d7:72:bf:
         da:b9:ac:7c:af:20:4f:36:80:ed:8b:64:5b:aa:25:f2:9e:d5:
         44:73:83:71:38:b0:d5:9e:00:95:14:ca:85:35:1e:c0:dc:e6:
         5f:4b:d9:84:20:27:37:83:27:d5:80:75:60:42:9c:0c:67:ac:
         b2:02:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:25 2026 by rpki-client