Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File:                     cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier:          NxtaZzuEiE8I8SX+95K1zcjFeJ1tEcfBR4+3wUczpuU=
Subject key identifier:   E7:B9:A7:62:6E:91:D0:19:0C:54:1B:2F:7B:79:79:5F:38:CC:C7:D2
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer:       /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial:       019D992B1FEE0B07B3717F6356AFF228215A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number:          1729
Signing time:             Fri 17 Apr 2026 02:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:33 +0000
Files and hashes:         1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: p1D+GYS7txKWyyt1oX3lhg01eFIiRn82yqI/ku2jeQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:1f:ee:0b:07:b3:71:7f:63:56:af:f2:28:21:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
        Validity
            Not Before: Apr 17 02:00:33 2026 GMT
            Not After : Apr 18 02:00:33 2026 GMT
        Subject: CN=e7b9a7626e91d0190c541b2f7b79795f38ccc7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:55:ae:e9:80:40:48:29:04:fb:76:db:a4:
                    a2:c0:92:b1:ed:79:43:14:2b:61:9e:6a:1c:c0:03:
                    b2:15:ad:40:c5:9e:d5:46:f7:57:3a:9c:15:1f:ca:
                    1b:6f:04:09:ec:1d:70:73:ff:f0:77:79:ae:ab:41:
                    6a:b5:a0:11:f2:bf:fa:e5:a9:4f:f0:3e:21:11:d1:
                    87:d7:7a:ae:ad:8c:bc:0e:7c:6b:ed:a5:02:b3:c9:
                    dc:35:7a:97:6c:19:d5:e4:5e:0b:14:c1:47:4d:76:
                    25:29:78:1f:08:d1:06:80:cb:cb:89:e6:bd:6a:8d:
                    a9:60:47:0b:5d:5b:55:fe:ae:0d:e8:cb:5b:27:4b:
                    f4:dc:33:09:33:34:7f:0a:c8:20:44:f8:fa:1d:a0:
                    58:db:02:9b:84:ed:16:6e:33:80:bc:74:09:45:c0:
                    4a:6f:6c:9c:ca:51:06:41:df:49:e7:ac:36:ac:34:
                    1f:75:91:b5:08:7f:dc:90:fb:cc:81:bc:64:95:d5:
                    48:94:5e:94:01:00:fb:91:30:f0:b3:76:3c:9f:27:
                    96:1f:22:89:d3:93:6b:dc:a3:0d:c4:06:8a:1f:dd:
                    5b:32:e1:fd:0d:76:f0:75:c3:68:23:56:93:db:a1:
                    c6:05:b4:7e:5c:a2:56:20:1a:17:86:74:8e:09:7c:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:A7:62:6E:91:D0:19:0C:54:1B:2F:7B:79:79:5F:38:CC:C7:D2
            X509v3 Authority Key Identifier:
                keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:e1:eb:63:84:6f:dc:37:5d:5b:d3:99:30:63:ef:da:b0:
         c4:0f:8f:7c:36:f2:5f:90:ba:3a:c7:cb:9e:a5:9f:10:04:ff:
         b3:87:f1:51:7e:fa:87:b8:7c:b7:54:c1:cc:5a:0a:89:b6:f5:
         82:22:cd:cb:24:da:2c:62:f3:da:a6:30:ff:27:b1:e5:14:f4:
         97:34:3a:72:13:26:f0:e4:a9:d9:22:f1:35:00:c0:10:ca:77:
         b3:46:53:f0:60:c3:08:79:6d:51:16:b2:4d:b4:41:64:3c:5d:
         a4:77:27:fd:ba:cf:a6:bb:95:07:d7:0b:21:c6:8b:a6:64:17:
         15:71:50:19:cd:99:e8:eb:b6:20:27:b4:15:47:c0:d1:ee:ed:
         fd:c3:d9:1e:b2:b8:e1:cc:e5:7e:c4:f0:f9:12:3d:11:b3:f8:
         66:60:3e:c7:9f:e9:f0:21:bc:e5:74:2f:a1:eb:0e:27:e6:45:
         ee:c9:fb:04:6e:d8:cf:90:2d:c6:6c:3f:c9:55:11:1f:fc:e0:
         0f:8a:10:86:85:7a:e0:0a:b5:53:41:07:47:d7:0f:5b:df:c7:
         9f:3d:11:ee:27:a6:90:64:c6:c5:6c:b1:45:5a:b6:89:28:a4:
         eb:66:3d:cc:fb:f7:fc:b9:79:e1:6e:e5:2c:28:a8:c2:1b:ad:
         5e:7e:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----