Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File:                     1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier:          ORT39l4n+SR/lHRgGlTyzcK3NDk5lxIaXCbGlBYiErQ=
Subject key identifier:   CC:A4:22:1C:2B:65:09:E3:D5:45:3C:22:C7:88:17:D5:75:63:51:1C
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer:       /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial:       019D98F411280B5F21482304DA6CEAA54288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number:          0833
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: m8ue6o/IExDKLjDqoYJSCQ1Q2nGRkA97f3RmBL+Jqo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:11:28:0b:5f:21:48:23:04:da:6c:ea:a5:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=cca4221c2b6509e3d5453c22c78817d57563511c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:af:f7:33:e5:e3:8e:32:06:a5:fa:b1:3b:
                    3f:dd:56:84:58:40:c5:35:a1:ef:92:49:32:67:c9:
                    1f:c9:17:2e:a9:ca:0e:92:7d:99:9d:ff:5f:8b:f9:
                    68:1e:08:cf:42:57:04:1e:34:e1:8a:3b:0d:47:d5:
                    11:3b:14:29:b1:35:26:da:00:b9:53:d9:99:44:c1:
                    34:dc:85:06:49:34:f6:dd:19:1a:18:ee:c4:91:5e:
                    8d:9e:b8:91:c0:11:c9:fb:14:e0:80:8c:85:f0:d7:
                    ed:27:c4:6d:8f:e9:70:90:0b:87:d0:ea:ef:15:fd:
                    a1:eb:77:6b:8d:4f:32:64:59:76:1b:9f:2a:72:88:
                    ba:fe:fb:11:00:6f:7d:a1:d3:23:34:24:e7:a3:50:
                    d6:1d:1f:49:95:4c:7f:b6:a0:a3:6b:0a:21:4c:b6:
                    8e:8e:7e:1d:b2:4c:5e:7a:17:a6:23:a7:9e:d9:87:
                    9c:68:80:fa:b9:2d:3a:cc:39:e6:35:e4:cc:60:d7:
                    15:a3:cd:36:69:a1:44:b2:32:1d:b4:be:61:43:29:
                    e3:bb:69:a9:b6:6a:0b:27:1b:5b:66:6a:ba:0c:1a:
                    4a:4e:c9:63:ee:fe:3e:13:62:70:ea:18:67:45:c6:
                    73:60:d3:aa:ed:4f:de:5e:55:44:cc:29:2d:dd:85:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:22:1C:2B:65:09:E3:D5:45:3C:22:C7:88:17:D5:75:63:51:1C
            X509v3 Authority Key Identifier:
                keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:f0:28:4b:ad:49:a5:45:69:61:95:26:21:35:69:bc:b6:
         50:7c:55:2f:85:fa:de:9a:cb:63:4e:a1:45:b3:b1:ee:db:f3:
         a1:7b:a5:9c:ff:5d:d0:b6:7f:1d:21:8b:65:c4:f0:e9:6a:df:
         f1:d2:09:da:08:eb:a4:68:7b:bb:1f:28:fd:97:5e:1e:b2:76:
         cf:02:df:40:b1:cc:de:c0:47:9f:ca:cd:76:5b:d0:be:2a:25:
         65:e2:96:11:a3:1f:94:cb:c3:c4:f8:da:82:af:85:0e:bf:c5:
         9d:f6:ea:d7:9d:04:da:3d:72:b2:a6:86:6c:4c:22:3d:16:6b:
         16:09:d7:b5:0a:43:83:9b:7a:06:32:6e:89:56:99:0c:f3:4e:
         ab:9a:c9:66:3e:f5:48:78:f4:54:be:7b:dc:7c:fc:70:69:c2:
         58:cd:f3:2c:0c:74:d7:b8:a3:6e:7c:b2:35:04:91:14:18:81:
         00:1c:74:8a:88:7f:2c:f7:f7:2e:f2:41:21:40:55:7b:0b:b3:
         d8:4d:53:a2:9d:c3:24:9b:97:5d:fb:e6:e2:7a:13:e8:b2:0a:
         6d:68:32:6b:b4:6d:54:8e:eb:65:17:80:50:d6:fb:a8:e5:cc:
         3f:2d:bd:55:08:1b:93:93:ff:7e:3c:4e:fd:bf:5a:5d:3d:1b:
         a3:34:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:35 2026 by rpki-client