Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File:                     Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier:          0G/GsWMk8dQ237P/tS168s75XUnfBaavOUdq0MuhUjg=
Subject key identifier:   7E:A1:CD:C1:EA:33:30:9E:84:B6:8E:E3:92:5C:1F:FB:2B:54:4E:53
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer:       /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial:       019D9A3DF7B6E621B5C9E17AACF45E6ED63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number:          118E
Signing time:             Fri 17 Apr 2026 07:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:45 +0000
Files and hashes:         1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: LkuivItBZS3HunlJ7g+sRUqzJ9YJKOIpGgZzCuEDLiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:f7:b6:e6:21:b5:c9:e1:7a:ac:f4:5e:6e:d6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
        Validity
            Not Before: Apr 17 07:00:45 2026 GMT
            Not After : Apr 18 07:00:45 2026 GMT
        Subject: CN=7ea1cdc1ea33309e84b68ee3925c1ffb2b544e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:99:17:26:96:d6:ee:0c:0d:ca:b2:33:f7:
                    d8:99:66:bb:3e:83:04:b5:08:b3:76:f8:14:64:48:
                    fb:b8:ca:93:0c:62:c9:38:43:2f:3d:bd:55:13:f8:
                    96:ff:73:64:6e:1b:ef:9d:9e:2d:a7:c3:18:77:ea:
                    32:71:bf:b6:d6:ff:9d:19:5e:f9:b0:8c:4b:58:dd:
                    69:80:c3:45:d8:09:1d:c6:3f:e1:ca:45:71:dc:8f:
                    8a:af:ff:87:d4:c9:5d:85:ec:cf:23:19:67:0a:cc:
                    55:47:2f:46:93:8f:c2:da:f6:be:3f:c1:ed:7d:be:
                    d3:4a:7f:a1:41:55:9c:fc:60:55:f3:ee:c2:2f:f6:
                    a5:d8:c8:6a:c5:df:43:13:08:ab:14:f2:3a:fb:50:
                    99:42:57:6d:41:a1:9a:df:1c:c2:0a:51:92:63:78:
                    ea:79:4e:d7:4c:48:cd:89:29:00:6e:b2:5d:8f:21:
                    4f:94:67:1e:24:e0:89:7a:c3:3f:1c:df:ab:32:5b:
                    d6:df:50:16:b2:f9:5f:99:a9:eb:04:d9:a8:d6:a6:
                    69:37:90:cf:09:4e:9a:6c:d1:33:b7:f7:26:4c:a0:
                    65:8c:d8:1c:f9:a9:f0:a5:cf:dd:b5:7a:c2:b1:00:
                    f5:d7:06:dc:d8:3b:28:d7:c1:c9:97:b2:0a:e2:de:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A1:CD:C1:EA:33:30:9E:84:B6:8E:E3:92:5C:1F:FB:2B:54:4E:53
            X509v3 Authority Key Identifier:
                keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:c9:d9:e1:61:ed:a4:60:14:27:34:37:27:7d:13:35:58:
         22:29:42:dc:b6:24:2c:e4:21:29:e1:cd:84:7c:1d:81:84:a7:
         23:a2:8f:3d:2b:62:59:6d:68:36:d4:1e:46:4a:5a:56:e5:a3:
         d9:3d:65:77:b4:82:66:3f:89:cf:a0:cc:71:c2:9c:1b:9e:51:
         ba:0c:c7:df:90:85:fa:61:3c:4f:64:69:3c:18:bf:c4:80:22:
         c5:d8:b3:e4:7f:12:20:ab:e8:df:00:6c:99:94:c8:5c:08:f4:
         a1:fa:c1:eb:67:48:91:dc:38:51:fa:f9:90:25:e5:7d:3f:14:
         ad:22:8d:70:b6:3f:5c:77:31:04:74:fe:38:1a:a2:ab:26:bf:
         0a:15:e1:31:db:63:99:4a:c4:d2:84:7d:1b:40:b1:df:68:80:
         a0:52:a4:ba:96:c1:03:b1:ec:79:67:a8:21:8b:1b:dd:c5:e8:
         05:03:c6:67:97:4b:34:55:15:78:b0:e9:4f:66:61:a6:61:1e:
         bb:a9:f7:d3:9e:48:aa:6b:00:3f:2e:8e:89:9f:a8:2d:32:e0:
         76:61:8c:d5:eb:10:93:60:ff:f8:22:88:89:c6:00:6c:da:d6:
         24:d6:90:8f:38:08:8f:45:9f:9a:98:2e:c1:c1:3a:2f:79:1c:
         98:80:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:24 2026 by rpki-client