Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File:                     Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier:          pSxdCyGw4ohQML/PLRbAPNgnAu8Rrry7hm8mGPvrzIQ=
Subject key identifier:   16:BE:04:B1:C0:FE:B4:BD:59:93:07:B3:00:71:A1:B5:4E:95:B2:0C
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer:       /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial:       019D9AE2680818BB1AD464672C46CD47DA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 10:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:22 +0000
Files and hashes:         1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: 7yJaIO/iu57WPXXZEHRyhvJFxprLHorFIlTr7Kx5yS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:68:08:18:bb:1a:d4:64:67:2c:46:cd:47:da:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
        Validity
            Not Before: Apr 17 10:00:22 2026 GMT
            Not After : Apr 18 10:00:22 2026 GMT
        Subject: CN=16be04b1c0feb4bd599307b30071a1b54e95b20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:44:69:82:6c:3a:00:25:8c:ea:bb:44:d0:
                    31:3a:87:a2:3f:19:3a:7f:26:5a:34:f2:12:c3:a4:
                    b0:76:7b:66:50:fe:bb:61:89:2a:b9:c5:db:2c:5d:
                    3d:b1:66:31:91:4e:df:d0:5e:1f:ee:c8:d0:0d:0d:
                    bb:5d:11:dd:0a:e3:d3:9c:c1:61:54:81:3d:e0:08:
                    9d:ed:25:98:cb:a8:fc:a4:78:23:93:44:fb:43:52:
                    2d:62:a1:9a:5d:79:7c:1d:30:61:41:56:9b:72:72:
                    da:48:c6:88:7c:6b:58:e7:f8:87:a4:90:2c:69:52:
                    cd:e9:12:a9:27:3a:7a:81:23:07:c7:a9:c6:55:e2:
                    bb:f1:c7:82:28:c8:c4:0d:ad:92:3f:96:e8:6b:e9:
                    ae:73:38:29:1c:ab:50:aa:b4:24:a6:72:c8:3e:16:
                    cf:bc:c1:0a:8c:e1:9d:a6:7c:56:b3:39:22:7d:5a:
                    3e:f9:57:ef:e0:77:d8:97:93:ce:a6:48:46:a4:88:
                    8d:a3:b3:c2:1a:a0:9f:be:8b:9e:18:9b:76:7d:c6:
                    e1:16:5e:8d:c8:c5:ae:ec:ae:72:36:d6:4c:bf:31:
                    81:c3:70:b7:8f:a5:e3:be:77:c3:ae:65:52:23:d4:
                    75:b7:da:90:47:40:1f:3a:51:36:28:08:33:3e:48:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:04:B1:C0:FE:B4:BD:59:93:07:B3:00:71:A1:B5:4E:95:B2:0C
            X509v3 Authority Key Identifier:
                keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:84:c0:fc:c5:ff:90:3d:47:6d:a8:a2:0c:b0:4b:eb:0b:8e:
         7d:82:79:b0:97:8f:a7:fe:3a:c7:2e:55:4e:fd:57:d8:5e:0c:
         54:c1:10:40:9d:2a:cf:63:e6:f9:5d:c1:54:c2:91:f3:f7:c2:
         09:25:98:4e:b0:47:b4:4b:02:7e:c8:ab:34:f7:69:78:fe:86:
         34:f5:55:71:2b:40:64:df:a5:02:ae:d2:62:8b:53:44:42:ed:
         69:c0:04:e1:0e:e5:87:9d:3b:f7:2b:d4:24:5a:30:78:2d:37:
         89:48:68:6d:b0:2d:2d:aa:19:66:05:ec:81:01:94:04:72:a2:
         f8:ea:f7:ed:20:04:3e:8a:b7:9e:61:e9:f5:60:c1:70:a8:84:
         aa:79:b6:4d:19:59:27:83:be:0d:d9:26:7c:ac:c4:c7:38:89:
         13:44:80:57:7f:60:2c:f0:23:4f:0c:c1:97:e5:a8:7c:4c:3e:
         c1:ec:96:cd:f3:76:40:2e:b7:ee:6c:31:c9:b5:8b:b8:6d:06:
         e6:87:2d:be:2a:74:be:78:1a:05:94:0c:d8:78:28:16:1c:10:
         10:ce:ce:5b:ce:1c:ae:0f:76:90:ba:1f:01:80:cc:6f:3d:63:
         fd:30:77:98:80:5a:af:35:f9:c5:99:1a:3e:d4:21:45:48:f2:
         08:4e:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:42 2026 by rpki-client