Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          sttjaTggeA5MFzFaM+u2cUoRIct9JL4yjm1FVTB9Xgk=
Subject key identifier:   4F:58:C4:1E:77:A0:28:E4:73:C8:FD:9D:3D:01:7D:CB:BB:C3:26:12
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019D99629B49E4BD1433460A7286087E421E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          184F
Signing time:             Fri 17 Apr 2026 03:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:09 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: 3DO2V6MlPTQcnjGlE065tTdRdRDvFFWaxZscOoUiONk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:9b:49:e4:bd:14:33:46:0a:72:86:08:7e:42:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Apr 17 03:01:09 2026 GMT
            Not After : Apr 18 03:01:09 2026 GMT
        Subject: CN=4f58c41e77a028e473c8fd9d3d017dcbbbc32612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:b6:5b:48:7d:e6:61:d2:b5:ea:7c:a5:58:
                    d2:06:a9:e8:37:1a:d7:b9:e5:a4:2a:48:3a:ac:ac:
                    fe:2c:40:7b:06:ae:1e:de:8e:da:40:cb:d0:34:c2:
                    47:62:03:3c:2f:1c:80:2d:ed:ce:6a:64:5f:f7:00:
                    d3:ec:c9:9d:77:b6:89:8f:8e:34:5c:28:7e:82:02:
                    36:c8:32:cc:69:d3:c3:3f:82:41:a5:21:43:2f:68:
                    08:0e:ce:b5:ba:4a:e2:6e:bf:25:fb:a0:a5:63:23:
                    27:2f:4b:7d:13:96:9e:d0:a8:da:57:76:86:a4:b8:
                    91:58:3f:a6:52:a6:f7:4d:fb:be:8d:d9:54:ca:68:
                    8e:a5:63:e0:b1:e5:9a:2c:5b:d8:ce:73:f0:38:01:
                    25:8c:31:d5:4b:81:60:56:9a:ac:2b:58:b5:2a:6c:
                    fe:3f:66:e9:36:f9:e9:7e:b4:cf:af:7f:d2:2b:d5:
                    3c:8b:ac:0c:bb:89:b9:a2:6a:f5:ac:51:39:31:a9:
                    a9:6c:1b:06:92:a2:e3:ac:78:c6:09:0c:2f:5f:6d:
                    2c:b3:a2:fe:9a:a9:1c:ce:16:71:a6:1d:cb:08:4c:
                    09:d9:2d:d5:8f:e1:2f:29:64:61:87:e8:87:93:da:
                    b6:5f:fd:a2:7c:e9:0b:de:a3:dc:ca:d2:b0:cf:a2:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:C4:1E:77:A0:28:E4:73:C8:FD:9D:3D:01:7D:CB:BB:C3:26:12
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:3c:69:b9:38:b5:ef:da:9a:dc:7e:37:87:a2:3e:e6:27:
         bf:24:dc:4c:cc:f8:f7:93:ca:17:44:b8:31:80:e0:2c:40:cc:
         2a:76:d8:ac:03:7d:18:a7:02:84:20:4c:d3:f3:4a:d1:b7:17:
         f9:9b:44:af:bb:01:c0:7f:0f:eb:5d:d5:a0:0d:ff:0c:57:95:
         2b:dc:03:f6:97:59:af:69:7e:34:bc:7e:e2:30:85:c9:5b:32:
         6f:e4:e1:e2:59:46:27:49:09:3d:0a:6f:ed:9d:22:e8:bb:11:
         40:73:94:e6:65:11:bf:bf:31:73:05:e2:6b:2a:04:11:f1:15:
         6b:68:e8:0c:0e:9c:e5:75:0d:a1:47:82:9c:4d:20:6f:63:5a:
         ae:e2:8d:a3:f7:e4:6e:0c:b2:d2:fc:28:f5:e1:fb:7f:3b:01:
         08:c0:d7:3a:05:30:b2:cf:72:56:c0:d7:ca:eb:f7:3b:3e:64:
         a7:62:2e:be:0c:51:5a:5e:9d:ce:1a:cc:51:f3:fd:22:97:bc:
         1f:61:79:58:dc:8a:13:2a:37:d6:b3:2f:b1:84:e5:00:9b:53:
         44:69:dd:fc:39:31:0a:76:21:de:62:a7:ee:1a:b3:2b:c2:19:
         79:8d:cc:0e:92:f1:c4:42:9d:94:ac:52:bb:73:72:31:43:bf:
         f9:95:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:35 2026 by rpki-client