Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          TV5gW5b7s3RTmHORLlPDHYCfGOcxgoDgP7KeqsuSymk=
Subject key identifier:   73:EF:88:21:4B:E6:E8:A2:30:3B:EB:BA:27:B9:FE:E2:1E:3D:2D:60
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       019D9AE27A1427A654B7A83A49978ED8CB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 10:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:26 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: 2E9mRWPMxIDU1PAk7lB3AlZJA0gNQGf2x4zFqj2JXhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:7a:14:27:a6:54:b7:a8:3a:49:97:8e:d8:cb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Apr 17 10:00:26 2026 GMT
            Not After : Apr 18 10:00:26 2026 GMT
        Subject: CN=73ef88214be6e8a2303bebba27b9fee21e3d2d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:2b:1e:bf:05:ad:9f:23:ae:09:7f:ff:4d:
                    61:06:0f:b5:0b:76:40:92:64:54:44:47:38:30:41:
                    a5:34:29:63:63:9e:cf:c5:eb:da:5a:36:5c:9f:db:
                    94:28:59:3d:b2:77:c6:46:c4:e9:c2:e3:07:5b:f1:
                    c8:1d:7b:65:7b:fe:57:cd:84:ca:c6:11:ac:87:70:
                    5e:a1:a6:12:4a:9e:f2:e9:08:78:77:6b:4f:8e:cd:
                    3c:a5:ad:01:1f:bf:2e:e7:f6:9f:a5:e9:7d:37:09:
                    56:37:0f:9b:a1:c6:f4:bc:7c:66:25:78:10:d9:b5:
                    fa:fc:c7:94:48:1f:2e:36:04:58:a0:e2:d8:e6:8c:
                    05:d4:96:3e:d6:6d:23:64:e7:89:98:fa:13:e4:a5:
                    87:38:ac:14:47:c9:f9:98:f9:cc:95:1b:61:fc:14:
                    82:66:ed:05:50:0f:ca:9d:77:81:3a:24:fa:cd:90:
                    d1:ee:f7:96:01:af:d7:3c:10:8f:c2:5a:22:55:a3:
                    33:d6:0b:3f:2d:31:0d:f2:11:ea:10:28:af:eb:11:
                    ca:0d:12:9f:ba:70:2b:42:09:cc:ab:4d:e1:f4:06:
                    81:59:23:06:ec:81:2b:0c:14:fe:39:12:00:47:a2:
                    f5:d4:f2:e6:5f:29:c7:25:7a:9a:3e:d3:54:83:f0:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:88:21:4B:E6:E8:A2:30:3B:EB:BA:27:B9:FE:E2:1E:3D:2D:60
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:29:4d:69:09:6d:61:02:d8:75:7d:00:20:52:ad:78:3c:
         65:e4:27:50:d1:f0:2f:fe:d3:6a:fb:bd:82:0d:1f:10:44:78:
         f2:4e:a6:ed:4d:d8:7d:00:f2:c7:00:20:a3:8d:d9:32:ff:df:
         bc:2e:df:68:98:a3:81:ec:07:7e:cb:54:dd:53:b3:5f:a3:44:
         1d:34:a9:ae:70:ab:37:40:f7:cf:95:e1:ba:ae:bd:4e:dd:eb:
         8c:66:9d:7f:8c:b1:f4:10:96:83:ee:cf:51:85:cd:c1:58:76:
         bc:b2:1b:98:67:e7:b1:27:85:aa:95:39:52:8f:a1:dd:53:fd:
         b2:b0:63:b2:f4:84:b8:ee:78:30:33:8d:6e:76:d8:b0:20:8b:
         58:64:4a:f9:b5:08:00:36:58:b5:07:3c:b6:db:2d:60:a5:c3:
         8d:57:7b:dd:9e:ee:20:88:d7:5e:26:78:36:5c:e8:02:07:d9:
         cd:61:35:17:5e:70:9d:f4:43:15:34:18:1c:63:f4:dc:f9:e5:
         bd:24:3a:53:76:73:56:94:40:ad:d6:8d:79:4d:33:40:e5:60:
         ba:84:dd:af:55:3e:c2:6e:30:d6:77:c6:f1:cf:3a:bf:d6:35:
         4c:85:6a:e9:06:9f:fd:57:de:56:94:88:e4:03:67:3a:da:72:
         d6:69:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:53 2026 by rpki-client