Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
File:                     u8v1S15m1hoXV2yMc2vyZy47mho.mft (raw, json)
Hash identifier:          qs1mqy4uSxTQrg7UpyZpvdKKizpDz8XjF7yCzAiXJB0=
Subject key identifier:   A6:F2:70:D1:ED:92:4D:F5:DE:EC:A2:A8:E8:9F:8D:65:5D:CF:39:30
Authority key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
Certificate issuer:       /CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Certificate serial:       019D9BBEC042D6AA5F679461BA5F8317E393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
Manifest number:          0A24
Signing time:             Fri 17 Apr 2026 14:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:02 +0000
Files and hashes:         1: u8v1S15m1hoXV2yMc2vyZy47mho.crl (hash: 334vNVG+FxBSEcznhNcXRsMBcVIczBUJrs9v4itwPAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:c0:42:d6:aa:5f:67:94:61:ba:5f:83:17:e3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
        Validity
            Not Before: Apr 17 14:01:02 2026 GMT
            Not After : Apr 18 14:01:02 2026 GMT
        Subject: CN=a6f270d1ed924df5deeca2a8e89f8d655dcf3930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:af:79:53:3a:bc:f8:8b:b9:c9:a6:b1:78:
                    bb:25:c8:36:8c:e6:ea:0f:95:3c:dc:93:3e:b2:48:
                    37:95:38:32:f8:fc:f9:bd:2b:13:38:61:6f:c6:ed:
                    ba:3b:c8:19:db:2c:4e:36:f1:ea:e9:4c:73:73:c4:
                    31:e8:ce:67:96:a8:59:95:ed:fa:5c:c5:ad:d9:ba:
                    72:55:84:1a:94:14:d9:d5:09:7c:20:6c:bf:36:86:
                    54:f4:ac:9f:2d:e7:02:b9:5d:51:d2:8f:9d:a5:cf:
                    74:58:55:2c:10:52:ea:cc:f9:cb:a4:28:8c:2b:fb:
                    bf:ef:fe:c6:65:91:96:dd:68:71:a1:8a:b2:11:86:
                    63:c2:05:5a:5b:0e:2f:a1:7a:22:cc:5a:dc:af:f8:
                    ee:10:03:43:20:67:09:60:90:23:fa:6f:b5:a8:69:
                    87:d4:44:db:a7:34:a7:1b:58:98:6c:c1:dc:09:42:
                    79:b9:d7:8a:d4:b6:ad:05:99:14:a4:2b:7a:10:ea:
                    ba:c3:ec:dc:d3:50:98:4c:83:a6:55:fc:26:74:40:
                    84:77:cd:e5:d4:0c:1d:8a:81:5a:fc:fe:12:ba:81:
                    b9:9b:3f:40:51:de:b8:2a:fc:48:37:3c:1d:86:8e:
                    9a:7a:42:2d:10:ed:5d:90:eb:ec:67:c7:ae:51:f6:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:70:D1:ED:92:4D:F5:DE:EC:A2:A8:E8:9F:8D:65:5D:CF:39:30
            X509v3 Authority Key Identifier:
                keyid:BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:7d:cd:fa:6f:ad:03:f1:f9:d6:e0:e5:77:f1:26:79:96:
         aa:b2:3a:78:d8:3f:f3:ce:33:fe:b4:b5:0f:e4:d9:ca:72:de:
         b2:74:50:35:0c:a7:44:4d:19:64:17:57:2c:a5:30:fd:2b:04:
         96:57:a1:be:ca:7e:6b:41:1a:ef:05:e6:a7:f0:6d:cd:a4:19:
         90:7d:c4:25:58:20:03:6e:1a:9f:30:06:69:f4:31:13:f3:d3:
         21:10:5a:f3:1b:35:1f:45:b9:cc:be:5c:9f:ac:c3:98:a0:ae:
         84:f9:f8:2d:21:b1:09:b6:58:56:3e:f6:1d:d2:5c:74:c8:b5:
         70:d3:7f:04:ce:cd:c0:f0:c3:53:10:f3:82:38:13:05:f3:44:
         4a:ba:f1:4c:ea:fd:e6:8f:9c:40:1f:06:53:52:55:45:d2:a8:
         43:8e:02:3f:3e:0a:69:b5:e4:5c:b7:6a:bb:08:29:58:ea:fa:
         d2:24:0a:f2:c8:dc:2d:ef:5c:c2:7d:cb:50:c6:a7:32:18:d7:
         3b:c0:0c:60:cb:b8:36:63:f9:87:66:9d:b2:49:25:ac:10:30:
         94:7b:01:f3:07:7f:f7:85:31:e5:4f:08:3f:0c:08:c1:6f:92:
         df:0e:22:2f:99:1e:95:a1:6e:fb:40:f5:24:25:72:52:f5:06:
         3c:36:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----