Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File:                     xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier:          32V3cJeaGEdcJwaNo59GS7otGaPKv4NjtDcZ84sNQoU=
Subject key identifier:   DA:DA:2A:23:FE:81:E0:67:04:96:D7:74:1B:29:3E:7D:91:E8:35:02
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer:       /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial:       019D9AE375568FA8DFE389B67C6CF4851E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number:          161A
Signing time:             Fri 17 Apr 2026 10:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:30 +0000
Files and hashes:         1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: i+fFz4cg7vTUFEWaPecobPuPXt/g5OnUxAPsn9qhDig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:75:56:8f:a8:df:e3:89:b6:7c:6c:f4:85:1e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
        Validity
            Not Before: Apr 17 10:01:30 2026 GMT
            Not After : Apr 18 10:01:30 2026 GMT
        Subject: CN=dada2a23fe81e0670496d7741b293e7d91e83502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:74:29:99:24:7b:f3:d4:14:85:1b:c0:2c:
                    75:3d:0c:09:3e:77:b5:ed:46:5b:d2:fa:42:40:39:
                    68:5f:fc:16:0c:09:50:19:71:0c:74:bd:dd:e3:53:
                    df:d5:3c:92:36:1c:a4:d2:83:26:7a:db:7a:5e:37:
                    36:17:c7:f2:36:c9:6c:6b:c0:f8:7d:0b:34:e1:24:
                    6d:93:75:bf:97:b1:2c:8e:80:fb:98:4c:5c:18:d7:
                    d4:ca:44:61:85:8d:70:a1:04:5b:e5:a1:5f:77:ba:
                    9d:ec:ae:0e:b5:56:d8:f3:e8:e1:97:c4:fb:87:10:
                    96:60:2c:0d:b6:cf:22:5e:67:29:ca:12:ee:c9:fe:
                    10:ca:62:7f:fb:8e:8a:a3:d1:d9:f6:11:7a:25:f1:
                    7d:6e:72:bf:89:0f:0c:e2:8c:a2:18:50:22:3b:d0:
                    8a:23:f0:d1:a0:62:72:cf:01:97:1f:92:52:8a:7f:
                    69:b4:da:b2:34:81:2f:e9:e7:19:c4:db:1c:f9:4e:
                    17:07:1f:cf:ed:83:d8:b4:65:e8:7f:fa:66:4d:0a:
                    45:fa:8b:e9:56:74:51:4a:47:76:35:fd:bc:2d:2f:
                    03:2a:26:ac:a4:e8:0d:0a:4d:d8:da:9b:68:53:53:
                    73:1e:a1:67:69:eb:9f:08:e0:2f:9c:83:36:d8:d9:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:2A:23:FE:81:E0:67:04:96:D7:74:1B:29:3E:7D:91:E8:35:02
            X509v3 Authority Key Identifier:
                keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:74:49:f4:dd:46:28:e5:b3:fb:66:d8:7e:22:2b:59:0a:
         21:d7:19:c2:ec:c3:2e:60:1a:d4:b1:42:cc:5b:11:16:23:8c:
         bd:36:38:06:ab:d9:63:b7:f2:23:e8:e4:4a:86:7f:a3:e6:4c:
         a2:2a:64:2e:fb:e9:94:7e:0a:0b:07:a8:3e:b1:bd:70:84:ad:
         d5:28:b6:6c:5d:ee:5c:c3:5e:0f:9e:28:cd:ff:9f:40:5c:9c:
         c0:2f:49:24:c7:5c:0e:84:a5:79:71:75:b5:45:98:7b:38:c8:
         e9:8c:62:a0:18:0f:3c:f8:04:87:d0:1d:90:94:58:79:4e:10:
         c2:28:47:d3:8c:ad:27:1f:f2:0b:f1:b1:77:54:0c:c6:30:d8:
         77:ac:00:60:13:78:5f:23:be:7c:7f:2a:dc:e4:37:da:b1:22:
         50:9f:70:c8:1b:5b:35:65:52:e7:f3:60:7a:44:76:c4:6a:15:
         81:cd:c9:17:01:47:f4:ef:af:19:b0:df:49:30:9a:ef:c2:92:
         40:fe:cc:8e:b7:3b:5c:b3:84:41:0a:78:91:49:48:e1:54:a2:
         20:8c:78:5d:80:dd:e0:37:d9:e9:83:35:5f:ae:86:a0:b2:c0:
         c4:b6:fd:03:2b:96:31:d9:1b:f2:d4:88:84:f9:05:77:23:44:
         18:79:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----