Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File:                     MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier:          rg7GXynYeOIQurrO4a6x2MBRpjApCiEY3Q5Pb03Bz5o=
Subject key identifier:   6D:C0:A7:3D:70:2C:2B:EA:C5:8F:BA:B0:15:46:93:E3:AB:5A:DE:FB
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer:       /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial:       019D98F455734C4C40616F8336A739D82130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number:          1569
Signing time:             Fri 17 Apr 2026 01:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:42 +0000
Files and hashes:         1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: lVg/zeZ/fXl8TrkYDW7Qdp68mQQsgfc6jvbDgZ77skc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:55:73:4c:4c:40:61:6f:83:36:a7:39:d8:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
        Validity
            Not Before: Apr 17 01:00:42 2026 GMT
            Not After : Apr 18 01:00:42 2026 GMT
        Subject: CN=6dc0a73d702c2beac58fbab0154693e3ab5adefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:2e:a7:2c:c4:d0:64:a9:f1:44:8c:99:d1:
                    84:ca:e9:93:42:c0:4f:ac:32:0c:5d:5e:d9:be:60:
                    d1:20:6a:1c:b0:6e:a4:16:2b:28:f1:c9:47:7e:65:
                    3d:4d:6f:46:5b:14:a6:d6:1a:cd:a7:0f:2b:42:f5:
                    3d:77:b4:41:f1:0c:e2:ac:3a:ad:d6:bc:12:fc:7e:
                    a4:5a:93:52:75:2c:dd:1b:54:3e:49:ea:22:2f:0f:
                    d6:e8:ac:23:5f:ae:ee:20:8c:4b:5e:48:08:98:86:
                    8a:98:48:00:a1:b9:73:e7:a6:e9:da:49:d7:27:86:
                    6e:2a:ac:25:b6:f8:1c:8e:9d:7d:da:7a:f2:4b:7b:
                    d7:57:bc:0d:87:2f:e8:f3:06:e2:3a:88:ae:28:a3:
                    42:32:28:f0:16:5c:65:16:40:6f:88:76:d3:59:fc:
                    79:9c:0f:40:c4:cf:42:97:f6:06:4e:e1:28:27:80:
                    ac:4d:17:93:51:26:fa:8c:2d:22:e7:d4:c6:0b:11:
                    72:de:09:29:69:61:b8:f8:01:ab:99:f1:98:79:9b:
                    5a:54:a7:e0:8b:4a:b6:06:78:4c:74:72:df:0a:20:
                    ee:7a:d8:96:b8:16:c2:b8:b7:81:a7:fc:de:dd:ee:
                    00:1d:eb:9c:60:d2:e3:26:2b:d6:41:4d:02:cd:58:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:A7:3D:70:2C:2B:EA:C5:8F:BA:B0:15:46:93:E3:AB:5A:DE:FB
            X509v3 Authority Key Identifier:
                keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:82:1e:b0:09:55:b3:ee:a9:13:02:21:7e:15:25:5c:fe:
         89:50:47:2e:0f:1a:bf:68:b6:d5:b7:48:2f:1f:dc:9f:94:fc:
         ba:4a:5f:26:db:bc:b1:02:65:11:80:00:74:a1:8f:ee:2e:b6:
         67:69:61:20:c5:f0:ab:e6:32:95:77:62:ae:d8:42:41:14:2e:
         21:d4:25:76:39:e3:18:86:e9:f0:bd:e2:f2:cd:c2:d3:27:f7:
         61:10:ca:2d:de:26:83:3e:58:68:3e:0a:f1:95:1e:5c:e9:37:
         a1:6e:d4:df:c0:d2:aa:9e:b3:0e:6a:44:33:3e:df:66:99:11:
         f8:4d:07:9f:77:78:f0:f5:e6:a7:3d:74:df:2d:2a:5d:7d:85:
         ff:74:f2:24:53:51:be:d5:87:22:19:6a:06:1e:d1:17:cf:94:
         c1:c5:ab:30:01:8f:dd:58:71:c0:e2:da:3a:db:2b:4e:39:03:
         df:15:3d:21:0c:64:54:79:dd:58:cf:67:54:9e:f1:64:fe:eb:
         99:30:d1:54:e1:1e:0e:f1:58:72:14:21:fd:22:2b:f9:7d:e2:
         d8:b9:e2:95:4f:dd:f2:b9:a3:31:17:a3:2c:31:f8:4c:0c:a1:
         98:95:5a:39:c7:7d:0d:04:d1:8c:a3:60:a9:12:f1:5e:13:e8:
         e4:cf:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:29 2026 by rpki-client