Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File:                     1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier:          Z9KAc7ztoaeSP4yhnOGxq4kLHUIZOenrgOprO7dGkwk=
Subject key identifier:   5E:24:83:EB:D9:04:90:08:27:0D:F3:89:7E:B9:D7:B9:BC:55:F3:3E
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer:       /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial:       019D99D066A44F69E49F543D30B23C2647ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 05:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:04 +0000
Files and hashes:         1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: 4Rh8moGVs86GiMLPpFiMiOShe04gGjSjEZqTapkZOMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:66:a4:4f:69:e4:9f:54:3d:30:b2:3c:26:47:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
        Validity
            Not Before: Apr 17 05:01:04 2026 GMT
            Not After : Apr 18 05:01:04 2026 GMT
        Subject: CN=5e2483ebd9049008270df3897eb9d7b9bc55f33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:fa:42:84:ea:9e:7f:47:a4:c9:d9:53:26:
                    70:87:74:c2:97:fa:51:da:a1:b3:7b:28:3c:4a:4a:
                    b2:20:b9:a9:09:ee:7f:74:81:44:0b:33:97:48:ad:
                    85:ee:3a:ed:f7:96:49:4a:79:7f:c7:e2:05:49:b4:
                    79:97:10:ea:47:f4:0f:75:6a:50:3f:24:15:e6:50:
                    10:65:1a:fd:28:b0:2e:3c:7a:5e:31:62:09:fc:d1:
                    6b:a0:2d:d5:c9:b2:12:12:b7:f0:15:66:91:0c:bd:
                    40:e7:06:6b:b3:08:88:db:09:f8:b5:0b:0b:90:6c:
                    b4:ec:56:63:ef:3a:95:6c:44:5d:d4:e3:95:01:26:
                    78:ce:21:3f:91:26:17:58:4e:54:e7:df:82:f9:19:
                    07:16:57:b4:c1:ba:a3:88:8c:f3:46:81:03:92:75:
                    ab:35:93:fb:55:86:9b:32:a6:0c:4f:c5:4f:39:6d:
                    17:1d:f8:33:12:67:ad:7c:a4:4a:13:c0:b8:1c:f3:
                    b9:82:cb:22:58:08:7c:00:30:a4:95:ae:20:75:89:
                    b3:c7:c7:2d:c2:76:e2:27:7d:85:19:d9:85:ac:bd:
                    7e:a2:35:57:38:f6:87:90:26:49:bd:0e:6a:a8:62:
                    65:2a:d4:60:0a:44:48:d1:19:fb:94:07:d3:03:83:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:83:EB:D9:04:90:08:27:0D:F3:89:7E:B9:D7:B9:BC:55:F3:3E
            X509v3 Authority Key Identifier:
                keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:9e:0c:a0:95:23:43:d5:b5:bf:d6:c3:a5:95:9b:d5:64:
         c5:d2:b8:3d:54:3d:5d:6c:f5:f3:1c:05:a6:ff:ce:a4:94:4a:
         99:b4:ad:35:83:dd:83:dc:2c:f9:27:cf:2b:55:e9:5f:32:9c:
         6b:32:68:51:dc:53:5f:61:90:62:d5:ab:e6:99:e6:73:c5:1c:
         71:33:e0:9c:39:40:b6:d4:b7:f9:ea:4f:8b:b0:f2:3b:b6:f8:
         37:82:24:42:77:d4:1b:38:6f:b5:3e:be:e7:8b:2d:98:a5:62:
         87:f3:39:66:2b:0d:f6:1d:b9:0c:9e:33:b1:65:15:da:cf:20:
         2d:30:a9:c2:29:1c:d9:3f:99:51:2a:e1:1c:79:c2:20:0f:7a:
         e5:62:ff:81:9d:59:5c:0c:bc:31:33:b6:3e:0e:83:14:30:94:
         d6:bb:fd:e5:f6:5d:b9:29:7e:38:83:67:94:42:91:0a:15:f2:
         5d:cb:13:fb:cc:f7:74:76:de:59:cc:25:82:06:78:91:49:ef:
         b2:9f:6d:55:65:d3:5c:1e:0e:d1:17:19:66:73:f4:80:be:87:
         de:db:a9:eb:34:7e:af:ce:7b:69:70:5a:fb:87:33:d6:16:a2:
         f0:fe:04:65:00:65:e2:78:b1:5b:56:eb:41:dd:31:87:1a:bf:
         fb:94:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:03 2026 by rpki-client