Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          gFeSdJC8up8z30H+t0zJzpPdWXasL9uTmsJWJxYpwtc=
Subject key identifier:   AB:73:77:F9:FD:25:01:DA:9D:35:F2:4F:CA:20:9A:81:30:A7:2B:B7
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       019D98F435CDB0D17A606B20A580E0B916CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          0840
Signing time:             Fri 17 Apr 2026 01:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:34 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: pY7bl+/L4pOZGnjO5Y7wsI3BnWKnSnAHVk0NStIiUdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:35:cd:b0:d1:7a:60:6b:20:a5:80:e0:b9:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: Apr 17 01:00:34 2026 GMT
            Not After : Apr 18 01:00:34 2026 GMT
        Subject: CN=ab7377f9fd2501da9d35f24fca209a8130a72bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:f0:49:0a:3b:70:b8:13:39:dd:e5:0e:93:
                    51:e3:78:ce:51:0d:02:c9:ab:ef:6c:94:56:60:60:
                    f8:78:78:9d:fa:44:f6:6f:5b:fe:3e:4b:93:39:d2:
                    0e:ed:ce:d5:b4:92:e2:f3:e9:dc:f6:74:c8:0f:d6:
                    7e:2c:e2:c7:ec:05:fd:14:ad:e3:c4:e8:b1:c3:a5:
                    d5:a5:88:75:12:98:7c:44:49:7f:16:f8:71:9e:89:
                    6f:56:0a:c3:8a:19:08:06:cf:00:1a:73:af:b2:94:
                    71:bc:cf:0b:15:59:a3:f7:71:14:ca:a6:bc:9f:a8:
                    81:e0:22:7e:6a:4b:65:43:6c:a4:6f:0e:8c:6f:bc:
                    35:07:f4:f0:06:4c:c7:c8:b2:17:12:dc:55:86:cd:
                    a5:7b:44:b5:8b:68:59:46:65:5b:93:4c:36:0f:d7:
                    22:f1:2c:43:68:6a:3c:12:a7:33:0d:6f:34:22:24:
                    5d:25:81:1a:e5:1d:e4:0b:8a:c3:4c:71:4f:07:81:
                    27:21:8e:dc:66:40:f3:66:8f:93:36:2c:ad:aa:6a:
                    60:89:a3:6c:77:33:ec:60:fa:de:c8:29:aa:fd:90:
                    7d:1b:43:18:8d:ec:52:6b:d9:ef:4f:de:22:ab:09:
                    60:2b:42:83:68:8f:2f:2a:7c:eb:97:cf:0b:aa:f8:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:77:F9:FD:25:01:DA:9D:35:F2:4F:CA:20:9A:81:30:A7:2B:B7
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:0c:66:41:d0:ff:28:8c:9a:e3:0f:a9:b7:c1:62:0d:00:
         a6:ea:7d:d6:0e:03:a9:ab:90:2a:6e:f8:12:dc:25:42:77:dd:
         28:31:17:ab:97:cc:2f:d7:7e:c2:aa:dd:b6:4a:0c:5d:90:1b:
         61:15:7a:62:bb:99:67:d9:e6:5c:f3:4c:2a:82:a0:4f:e5:6a:
         93:08:94:96:f6:94:6d:53:ff:47:65:c8:58:a7:c3:7e:cd:60:
         fd:db:ac:a1:5b:f3:4a:69:6e:4c:ad:4c:64:98:e1:c3:55:ba:
         1e:a3:4e:2e:d3:7d:d2:5e:a7:37:80:96:59:28:e1:43:5c:dc:
         8a:fe:15:bd:b0:73:f8:94:12:93:e5:93:85:79:ac:65:18:a8:
         2f:df:83:a6:56:f9:bc:f4:8d:e8:2f:52:93:2f:a6:a3:00:83:
         ae:84:10:55:25:00:01:48:7d:0f:24:5b:b1:f2:cf:02:11:61:
         14:67:ab:49:97:7a:6a:f6:44:d4:25:8a:93:de:37:89:78:4b:
         a6:c0:84:10:b8:3a:fd:d4:82:6f:0c:a8:23:65:72:45:47:2b:
         68:46:c5:21:c5:f4:14:6a:5f:fc:03:61:e9:5e:93:72:03:23:
         3a:25:95:c9:5a:23:58:4a:60:f4:ac:0c:32:63:06:6a:8e:d9:
         7f:f5:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:59 2026 by rpki-client