Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          jrz4r9/vgJqjeS1aXfh0VNxJ+cDf7+08NIg51xiwpvg=
Subject key identifier:   40:01:CC:66:F4:0C:95:72:29:8B:E7:4C:DE:A2:3A:AA:E6:4E:17:2F
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       019DA341C18CD814F4777FBC017C56F14FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          1173
Signing time:             Sun 19 Apr 2026 01:01:28 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:28 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:28 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: ENsV73GMc48oSodlVU3VOUMH+RkHrKFdREG0lkqvdTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:c1:8c:d8:14:f4:77:7f:bc:01:7c:56:f1:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Apr 19 01:01:28 2026 GMT
            Not After : Apr 20 01:01:28 2026 GMT
        Subject: CN=4001cc66f40c9572298be74cdea23aaae64e172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:23:16:1d:74:51:ee:8b:ad:b8:c0:32:a5:
                    6c:59:cf:0b:da:a1:3b:45:a4:49:3b:be:9d:ed:b8:
                    ad:a4:c9:59:5a:28:ec:1f:94:62:99:23:18:47:c1:
                    44:31:d4:92:07:4a:32:1f:40:8c:94:49:0a:da:02:
                    38:bc:dd:13:6d:df:77:37:50:4c:98:f6:79:3f:0e:
                    0a:99:52:eb:d7:7b:eb:64:7f:46:16:31:b6:66:27:
                    39:8d:aa:f7:d5:e6:7f:69:b5:fe:f9:e2:f0:a4:28:
                    78:1c:39:20:05:8e:23:33:d9:58:8f:f2:d8:ff:53:
                    f9:7a:53:69:a0:49:b5:34:93:6c:15:ef:7d:71:67:
                    dd:a8:ff:7a:a5:6c:3a:b3:51:7a:dc:56:a5:0d:77:
                    56:a8:2b:49:89:17:97:24:9f:7e:08:60:b6:43:5a:
                    b7:21:93:88:b2:dd:c3:32:f4:ea:84:43:d5:1d:60:
                    e2:a9:32:52:ce:bc:f0:8d:f2:4c:34:78:7e:3c:7e:
                    6f:54:15:5b:16:95:54:b2:17:01:c4:4f:56:52:2b:
                    2c:54:2f:da:df:cd:9a:16:9d:43:26:74:2c:a5:80:
                    d5:5f:f0:56:1c:82:8c:f5:40:4e:97:3a:30:b2:7c:
                    85:36:8a:5b:c9:25:5a:42:e9:2f:0a:00:b7:d1:5b:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:01:CC:66:F4:0C:95:72:29:8B:E7:4C:DE:A2:3A:AA:E6:4E:17:2F
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:7f:00:a2:73:56:db:f8:dc:e5:d4:e1:1c:a2:55:02:8d:
         a4:1d:1b:86:3c:fe:2f:e1:5b:ca:f4:d4:4e:46:15:14:df:e6:
         4b:ef:71:38:18:3a:96:86:fb:30:2b:bf:29:be:a5:29:4c:1c:
         08:25:0b:7f:e9:45:05:b2:8e:a0:aa:40:0b:5e:4e:28:72:83:
         04:6c:41:ef:f1:36:cd:8b:d6:e7:19:a7:a6:27:67:37:1d:a1:
         c2:c0:e7:7b:91:a1:96:28:42:34:6c:fb:fe:c4:e2:16:22:77:
         90:fe:2c:77:d2:b9:c5:de:62:40:6e:95:88:65:26:31:20:ba:
         1c:80:f0:4c:a0:a1:fb:60:8c:b2:2f:05:f6:3c:19:b2:34:68:
         ae:77:41:c4:d6:10:70:b2:9d:5f:17:ae:91:2f:3d:73:a8:2e:
         89:1d:b2:35:69:48:af:9b:8b:48:ca:a9:c6:be:17:99:1a:3c:
         5a:eb:21:98:57:9b:41:74:01:d6:ba:e0:25:95:99:4c:ff:bd:
         a0:c5:f1:e5:e6:1d:3e:76:17:50:90:00:2d:42:a1:fa:7c:d9:
         83:2a:8d:e0:ec:b4:8a:b1:56:7c:c7:82:91:f3:f3:f8:e2:92:
         9f:bc:43:b0:bf:d0:2f:c5:4b:bf:44:40:34:63:6a:6d:66:6b:
         23:8d:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:10 2026 by rpki-client