Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File:                     mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier:          LftnnYzj/a8wl1fYffqEvG2KuG8zNJAdH2Qv8lhIxww=
Subject key identifier:   48:C6:0C:50:C4:70:FB:CE:C7:0C:68:90:26:C7:E2:7A:3E:D1:47:0C
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer:       /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial:       019D9AE3929D14B6168C5A249295EC0A6D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number:          0996
Signing time:             Fri 17 Apr 2026 10:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:38 +0000
Files and hashes:         1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: xpw0n90EbeGHqYUd/J6e1bSFMnKYZDZw0NghaN7Q8PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:92:9d:14:b6:16:8c:5a:24:92:95:ec:0a:6d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
        Validity
            Not Before: Apr 17 10:01:38 2026 GMT
            Not After : Apr 18 10:01:38 2026 GMT
        Subject: CN=48c60c50c470fbcec70c689026c7e27a3ed1470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:f9:28:ff:f1:fb:5d:bc:ff:bd:7a:87:a0:
                    8b:52:6e:07:02:1c:bb:21:80:f4:35:12:8e:70:60:
                    56:f9:d7:9e:3f:be:43:7c:81:ec:86:1f:06:29:3c:
                    5e:34:a1:b3:2d:d0:f2:a3:d7:4f:72:0b:fb:f8:01:
                    99:95:5d:3c:36:a4:5e:da:e3:55:ce:86:08:d7:00:
                    b2:f5:35:3d:fd:d4:79:87:8d:4d:ec:1d:c9:c1:33:
                    a6:be:6a:79:59:17:93:75:79:85:60:e4:79:e7:73:
                    34:5d:16:b8:d2:62:d4:c7:4d:56:1d:af:b3:3f:e7:
                    be:f8:36:e0:49:bd:1a:ba:a8:fd:7e:d0:a9:04:6b:
                    67:3a:ab:6d:65:ac:bc:41:29:be:95:d3:3e:c6:0b:
                    aa:8b:87:6f:5b:85:41:54:7f:13:4f:ed:55:42:54:
                    6c:58:fa:27:f5:d6:66:be:f6:18:79:18:a3:69:bd:
                    42:09:fd:35:d2:09:0e:48:d2:c6:e0:58:c5:be:8e:
                    0c:1c:b4:f1:b3:e7:7f:86:17:8d:51:16:a2:dd:f8:
                    a4:ae:96:fc:fa:17:7e:eb:b1:d2:dc:39:9d:b1:c2:
                    da:b1:70:82:c2:5c:d9:ea:c4:52:95:5f:79:a2:9d:
                    8f:6c:66:ce:2a:9e:19:b1:7b:67:db:23:0a:22:95:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:0C:50:C4:70:FB:CE:C7:0C:68:90:26:C7:E2:7A:3E:D1:47:0C
            X509v3 Authority Key Identifier:
                keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:5d:7b:43:8b:c7:a0:2e:00:de:a6:64:1f:cf:5e:d4:0f:
         cf:ce:cf:98:ac:e6:e9:5c:c9:16:7d:62:6a:15:6c:ce:1b:1a:
         78:6a:db:09:f9:03:33:a8:31:c8:7e:7e:cd:3d:b9:9c:c2:50:
         0c:66:23:cf:75:6e:55:b8:f2:f0:0e:e0:66:4a:da:53:1a:f1:
         b5:37:0e:65:ca:b7:48:ee:c6:f1:d3:4d:99:b4:96:48:54:a1:
         d9:4a:af:8d:9a:21:fd:34:d5:cf:61:a6:12:a6:95:ae:d1:c9:
         c7:1c:08:d9:ad:3e:dd:82:e9:83:7c:ed:8b:7f:8d:bc:0a:03:
         31:07:5b:5b:22:f0:0d:b2:e1:a5:68:fd:4c:6a:56:91:2c:a2:
         37:94:2f:59:d5:dc:b8:5c:dc:9f:a5:4c:03:ee:bb:8c:80:dd:
         1f:aa:00:98:75:26:3d:37:c0:cc:bc:b6:da:65:21:c7:77:2f:
         55:1b:67:df:01:74:6d:5d:d9:96:ef:94:97:5b:7f:f9:0f:78:
         02:ab:65:64:b5:4b:70:b6:7c:84:29:26:4e:1e:01:58:8c:53:
         aa:a6:06:72:34:52:c4:47:7a:bf:76:11:2e:5d:26:dd:71:33:
         9b:c7:68:97:ba:4f:bd:e7:51:13:dd:f3:41:bb:26:c9:e4:c4:
         59:ea:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:04 2026 by rpki-client