Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File:                     B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier:          CpcxoIMhXQyqsZaBuap4lPq++ScCwavtKSQgmCsybyI=
Subject key identifier:   4C:83:7A:D9:79:15:4D:05:B7:57:D0:1A:D8:2D:29:E2:F9:23:6F:F1
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer:       /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial:       019D97E1BADC1F85A11BCBEA1BD6ABA1BFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number:          184F
Signing time:             Thu 16 Apr 2026 20:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:46 +0000
Files and hashes:         1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: vlgQH/5xHtIBjkNJyvo0y9ov6zMhkxMROeqi0s37BmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:ba:dc:1f:85:a1:1b:cb:ea:1b:d6:ab:a1:bf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
        Validity
            Not Before: Apr 16 20:00:46 2026 GMT
            Not After : Apr 17 20:00:46 2026 GMT
        Subject: CN=4c837ad979154d05b757d01ad82d29e2f9236ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:50:08:12:71:96:dc:54:56:b5:32:98:3f:
                    d3:51:5d:a6:47:79:bf:80:6f:c9:bc:bf:05:7a:89:
                    c3:cc:14:d2:d0:7c:8a:f0:f8:80:77:50:97:d3:72:
                    98:ce:ec:73:ba:49:1f:ab:9c:ae:6f:8c:e5:20:be:
                    07:ee:7a:fd:45:8e:d9:94:cf:83:62:df:97:da:5e:
                    48:a3:c8:49:ce:22:52:e5:eb:e8:1b:42:a6:42:f1:
                    0a:0f:f7:91:be:fe:74:2b:7e:2d:79:42:59:b1:be:
                    2e:e6:90:e0:05:ca:04:9a:ac:0b:b8:a8:ec:65:2f:
                    6d:2a:cf:a0:ae:28:88:bd:bc:92:b7:e8:29:56:ad:
                    c2:b2:90:17:80:8a:00:d1:3a:13:2b:2a:68:14:98:
                    c7:0c:20:a2:9e:42:a0:c5:9c:3c:1b:65:05:ab:3a:
                    62:aa:a1:a6:c0:73:c8:75:ff:eb:34:3c:58:67:c1:
                    e6:ce:3a:06:9e:9f:5b:cc:dd:7f:4c:7e:f8:54:c3:
                    75:e9:74:59:23:94:c2:9d:a1:c9:e3:37:1b:48:87:
                    0b:5e:8e:d3:29:eb:fd:55:d3:03:54:78:b2:a7:9b:
                    ca:33:c4:7c:03:cd:85:ce:d6:44:ef:4e:94:40:3a:
                    73:2d:a4:a2:b9:56:45:6a:87:75:a8:28:a6:fd:a1:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:83:7A:D9:79:15:4D:05:B7:57:D0:1A:D8:2D:29:E2:F9:23:6F:F1
            X509v3 Authority Key Identifier:
                keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0c:61:a5:f7:1f:32:89:af:e8:75:7c:c5:aa:a7:01:ce:44:
         9c:cd:33:60:36:f8:f0:6b:c0:c3:1a:de:be:17:ac:07:fd:d3:
         15:55:93:73:66:3a:3d:cc:18:08:da:cb:46:e3:75:75:6f:df:
         20:e5:27:72:51:0f:a1:6a:fa:4d:e8:1b:c1:19:86:4b:38:54:
         43:2f:9c:9d:12:80:88:65:07:95:d8:38:4c:b2:a2:8a:2d:92:
         4c:20:75:82:d7:cf:53:05:08:75:74:7a:1e:bf:80:b7:cc:76:
         4e:2b:53:0b:fc:66:45:f0:0a:ea:22:91:67:fb:fb:97:c4:45:
         8d:39:01:37:bf:cd:68:e9:f0:e9:d5:ab:12:62:ba:25:a0:8c:
         f1:17:8a:30:68:2e:32:a5:f7:05:e4:05:4b:3f:60:94:70:23:
         aa:9c:91:98:0f:49:1e:33:0b:ba:37:51:ba:63:88:3e:89:92:
         56:54:a3:c4:91:3c:24:e2:50:59:1c:da:47:e2:59:7c:fa:2c:
         54:e8:29:55:8a:c3:a6:4a:95:f4:82:90:7f:e1:44:92:44:2f:
         c4:d1:a8:50:89:b4:af:ac:03:e0:84:d3:49:49:45:f1:bf:cb:
         ce:46:c8:e1:01:f9:bc:67:80:b9:13:41:7a:78:f7:22:69:5b:
         18:39:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:41 2026 by rpki-client