Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File:                     c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier:          n7Cg/uOoYzTKINCoh6zwK8vF0ojnu8gLk/qtGoBpTp4=
Subject key identifier:   62:82:F9:9A:74:55:60:91:0E:9B:3B:31:86:BB:9B:D7:49:9B:0F:E7
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer:       /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial:       019D98F4AF2A7119961746BA7D47A8AD8380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number:          095F
Signing time:             Fri 17 Apr 2026 01:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:05 +0000
Files and hashes:         1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: +lx/j4OYp0Dvk/OWbspEzZqKDDqhwE+iemhCWV8/k7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:af:2a:71:19:96:17:46:ba:7d:47:a8:ad:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
        Validity
            Not Before: Apr 17 01:01:05 2026 GMT
            Not After : Apr 18 01:01:05 2026 GMT
        Subject: CN=6282f99a745560910e9b3b3186bb9bd7499b0fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:06:11:5e:e8:65:e8:6b:5e:bc:ed:d7:a9:
                    bb:54:33:92:e8:55:66:48:8a:60:dc:61:7f:58:ae:
                    f3:a8:c4:be:ff:35:3e:1b:99:a4:0a:10:2e:01:bb:
                    97:75:c3:ba:0e:41:ed:6f:01:b0:02:5c:f2:76:e7:
                    88:a7:25:40:db:88:8f:24:35:51:f5:6c:f7:9f:17:
                    f7:53:a5:60:08:55:2e:1f:ac:ef:ee:83:8b:ce:67:
                    1c:8e:6d:ad:a5:fe:b6:31:02:88:40:55:f4:ba:b2:
                    e7:5b:61:60:38:9a:73:83:3f:cc:fb:8d:67:d3:71:
                    b1:7c:77:6b:6b:59:e0:c4:ca:05:c4:3d:53:f9:7c:
                    b6:09:c6:03:cf:a7:ae:36:40:02:70:7c:96:bb:3d:
                    71:4f:f1:b0:24:e2:e9:5f:9f:8e:f2:5a:8f:1b:23:
                    27:20:b8:7d:55:67:9b:98:c3:10:b6:f3:06:0f:55:
                    7a:74:67:ae:47:cb:7d:a0:21:c8:54:fa:e1:e4:6e:
                    c2:e1:99:39:63:15:e9:a3:f0:b0:e8:f5:61:5d:e1:
                    14:92:80:69:1c:75:31:0d:e1:dd:26:d4:10:7c:55:
                    14:c5:85:b7:be:80:3e:3a:46:3d:36:7a:ad:73:87:
                    a8:70:a8:33:cf:59:6a:94:4f:f6:b7:ce:ef:16:3a:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:F9:9A:74:55:60:91:0E:9B:3B:31:86:BB:9B:D7:49:9B:0F:E7
            X509v3 Authority Key Identifier:
                keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:f7:96:c0:dc:89:62:e6:49:cf:59:cb:cc:92:a1:af:6d:
         f3:2c:9e:42:27:e3:0a:40:a0:4c:75:f1:30:89:d6:7d:29:01:
         70:3a:0d:21:e7:c2:f9:bb:9b:df:4f:a3:52:53:ce:eb:60:48:
         2c:d5:e9:34:c4:6e:4e:9b:bc:d9:6c:c3:be:fb:62:98:fb:ea:
         43:23:e9:d0:78:54:d8:e9:3f:49:cc:c3:be:2c:bf:44:37:ec:
         3d:02:81:40:27:02:ea:fc:7e:c4:01:1d:98:14:93:6f:25:14:
         03:d7:3f:91:bc:b5:78:d3:7d:80:ca:c3:86:d1:03:f6:eb:dd:
         79:98:af:6b:00:15:e5:10:1d:2b:57:36:83:37:33:1c:be:0f:
         36:5d:5d:5c:59:b5:9e:43:91:a2:25:dd:ba:ca:26:c8:3d:d7:
         f5:7d:c2:ca:56:28:10:f5:d2:23:37:bc:9a:b5:f0:0b:71:e0:
         14:51:aa:1a:ae:14:40:c5:1f:1c:5b:f8:ca:96:f0:7a:63:c0:
         d8:fa:7d:c7:0b:1a:1e:7a:51:e9:50:a6:ba:d4:99:14:c8:54:
         7b:f0:c6:26:33:8c:00:d0:96:83:b0:e4:71:6c:db:3c:20:96:
         85:4e:5e:b0:06:01:c7:b2:19:f1:a3:b2:a6:8f:05:d8:75:6e:
         df:cc:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:53 2026 by rpki-client