Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
File:                     RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json)
Hash identifier:          z4MlPIdDd1NszLUyy9jWP1FD/9dQcDy9AA/RvtblKNA=
Subject key identifier:   47:5D:E2:79:FD:27:FD:12:E3:5D:DF:11:BA:65:6A:EC:EF:10:B8:74
Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
Certificate issuer:       /CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Certificate serial:       019D9A075AB3CFF6BC8D27F48428BA610CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
Manifest number:          0A90
Signing time:             Fri 17 Apr 2026 06:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:06 +0000
Files and hashes:         1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: PNDCG4Xucqk6vyD7K1aNitNQRlTAX3V4zZiPvoBqJTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:5a:b3:cf:f6:bc:8d:27:f4:84:28:ba:61:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206
        Validity
            Not Before: Apr 17 06:01:06 2026 GMT
            Not After : Apr 18 06:01:06 2026 GMT
        Subject: CN=475de279fd27fd12e35ddf11ba656aecef10b874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:c1:42:fc:4e:ed:9e:50:28:9b:ac:96:40:
                    b7:c1:34:41:f2:ee:48:5a:8f:be:55:36:25:e0:cc:
                    6e:aa:ae:8e:81:d8:10:c2:41:73:e6:8a:86:19:5a:
                    c2:49:c4:89:6e:c1:e3:15:2b:5b:70:26:60:ba:47:
                    21:bf:28:62:15:c6:74:e9:02:a8:d3:b8:fc:02:ae:
                    09:ea:1d:35:b7:80:57:ce:b4:96:83:0c:be:68:f5:
                    8d:38:54:0d:d5:d3:9f:f9:13:ee:f1:f1:eb:38:77:
                    9f:64:10:58:1c:e8:c8:b1:dc:ac:b1:ce:fd:01:53:
                    49:24:d1:ca:ac:75:35:5d:ff:2b:9d:b5:16:2b:46:
                    a0:5b:e6:f8:e0:6d:4c:44:17:03:f0:cf:7a:d5:01:
                    09:c3:b7:61:5a:1e:82:94:8a:9a:c3:cc:2a:02:9c:
                    d6:11:50:ac:46:a0:e1:7f:ee:ea:4b:e4:64:2e:6f:
                    da:d3:8b:dc:20:69:58:b3:3a:2d:4e:db:a4:f0:63:
                    6b:6b:a3:62:a5:0e:c1:b8:44:0f:74:ef:95:cf:2c:
                    49:e3:38:c1:09:c0:b1:d7:3d:3c:a9:72:54:fe:f2:
                    af:85:96:d6:68:df:f5:62:09:a8:c9:03:6e:4e:85:
                    cf:25:ef:90:7e:a4:a8:cf:b2:90:1b:1a:26:0d:85:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5D:E2:79:FD:27:FD:12:E3:5D:DF:11:BA:65:6A:EC:EF:10:B8:74
            X509v3 Authority Key Identifier:
                keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:f1:c9:7f:61:0d:4f:9a:9c:ef:81:59:b0:80:19:a5:4a:
         75:b3:32:07:68:d9:d0:2e:8f:e7:97:ad:c8:a1:8c:ad:a1:61:
         9d:3a:0f:41:1f:48:e9:99:59:0b:e6:ed:be:9f:41:b4:08:3f:
         cf:35:9f:f4:53:50:2e:b1:c0:b3:17:0e:e2:da:97:41:ec:1d:
         68:77:63:ee:0a:74:0f:b4:d6:fe:83:24:33:13:48:d7:a1:c7:
         4c:a3:f4:0d:01:cd:66:49:b7:c1:2f:8f:c3:ea:34:0b:67:e1:
         a1:de:f3:5a:f5:2d:5a:65:f0:55:d4:b8:44:7e:00:83:cf:36:
         3e:9d:08:df:58:4f:c7:d1:cb:84:a1:5d:de:41:aa:36:a5:52:
         38:2e:e4:98:d9:c1:c7:84:44:4a:ab:9c:7a:07:e2:33:43:b2:
         3d:d3:ce:41:c9:8f:4b:07:8e:55:df:ad:6e:55:9d:3f:cc:ed:
         28:af:3f:3f:99:71:19:bf:eb:ea:da:cc:4e:91:f8:75:29:86:
         c3:8c:39:cb:4d:da:45:9b:c2:39:c2:58:f1:98:00:93:da:fb:
         44:4f:f0:50:f9:94:53:96:ce:0f:98:3c:ec:04:71:ae:8b:9d:
         77:20:b2:8a:e0:43:e7:bf:c7:f1:51:8d:1c:67:d8:b4:78:87:
         d8:f6:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:17 2026 by rpki-client