Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          ZmLX1a6Qxr1CvoSeLZww1JJCbZGHf7tpaIzqXwj/5/k=
Subject key identifier:   A1:F2:86:81:06:0C:25:5D:99:86:8F:A3:34:10:A5:C7:74:F8:54:EF
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       019D98F4E9F3C697E8407A7111F2C7D9AE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          18BB
Signing time:             Fri 17 Apr 2026 01:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:20 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: 7WBQi+0AIWmKXoFKVp7i4sZV0NmdjNJCrLJYGobTbnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:e9:f3:c6:97:e8:40:7a:71:11:f2:c7:d9:ae:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: Apr 17 01:01:20 2026 GMT
            Not After : Apr 18 01:01:20 2026 GMT
        Subject: CN=a1f28681060c255d99868fa33410a5c774f854ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:9b:6b:fe:34:fc:35:19:59:b6:3f:5c:4a:
                    1a:7f:c1:81:4e:72:ad:72:94:c3:5a:11:a6:af:ca:
                    8e:7a:cf:5f:d8:13:19:96:62:c7:a2:1f:cc:63:41:
                    d3:1e:e7:06:73:d5:a2:40:e2:7f:f1:45:70:68:4f:
                    98:ce:70:d7:29:a6:34:01:2e:f2:41:8e:8c:09:45:
                    05:3d:74:f7:64:55:87:e8:e6:c1:09:29:1e:3d:94:
                    a1:52:72:b9:c8:cc:fb:fa:b2:db:95:d7:c1:73:67:
                    51:07:bf:26:a2:32:61:dd:30:46:3e:8d:14:db:ce:
                    eb:0a:f7:09:79:a8:12:f2:58:ac:d3:77:05:e2:5c:
                    b2:29:b6:cc:2f:3b:18:6a:48:3a:2a:ac:de:40:b0:
                    6d:6d:a8:fd:52:71:a5:82:ff:ac:7a:e0:db:74:88:
                    4c:4d:c4:6d:45:c1:f3:01:7e:59:b0:18:10:6b:28:
                    26:37:32:be:4f:16:75:0d:b3:af:43:9c:d4:36:09:
                    ae:55:5b:07:2d:5a:b9:19:61:e9:fc:66:aa:a8:f1:
                    f7:0c:91:6d:82:aa:c0:99:9a:f0:81:24:30:b8:31:
                    11:ea:07:f0:3c:e0:b0:7d:31:be:14:de:07:a3:77:
                    d7:4d:61:2d:7d:d6:60:35:c3:24:a1:a1:96:bf:71:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:86:81:06:0C:25:5D:99:86:8F:A3:34:10:A5:C7:74:F8:54:EF
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:95:2e:bf:d2:f5:f8:f9:37:bb:0c:1a:a6:e4:c4:f0:b3:ab:
         50:a4:51:5e:f5:36:d8:82:1b:23:24:73:3e:72:b5:c1:f9:69:
         e0:af:1b:f1:8e:29:11:37:bf:ba:ea:b3:28:b1:7a:cb:b8:2a:
         49:22:23:71:45:c4:ea:ef:9b:8d:f2:5c:31:d1:df:6e:92:7a:
         7c:69:d5:eb:b1:a6:7c:9f:e1:a4:60:39:c4:1e:cc:0f:b4:0d:
         0d:bc:37:21:34:cf:a5:e8:6a:97:fb:0a:94:ac:70:5e:5c:f2:
         ff:c7:31:ad:d1:77:8b:b0:3d:c4:7b:54:ca:09:1c:c6:0b:41:
         97:ec:71:65:63:8f:d1:7b:79:c9:d9:07:04:a7:6c:05:92:42:
         fc:53:67:15:d3:40:e8:c7:16:eb:7a:5d:24:2a:c6:54:89:f3:
         3d:2d:8c:f7:44:77:62:d3:6b:ac:db:00:41:43:04:ce:18:3a:
         69:67:7e:a9:2f:3c:29:e3:81:78:60:3c:f8:35:fd:3c:ef:5f:
         46:5a:fb:07:12:d0:4f:dd:5b:b2:72:65:02:9a:1f:be:d4:69:
         f6:b7:c1:bd:8f:a1:15:3c:06:bd:af:2d:fb:a1:6a:4d:ed:d5:
         6f:19:ba:a5:7b:88:95:57:37:d8:6d:52:f6:d0:0c:36:5b:b7:
         9f:5c:c4:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9OnzxpfoQHpxEfLH2a41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4OTU3Y2NjMzBhYTRlYzJkNDc4ZTUzZjM4NzI2Yzk5
NTVhMzEwHhcNMjYwNDE3MDEwMTIwWhcNMjYwNDE4MDEwMTIwWjAzMTEwLwYDVQQD
EyhhMWYyODY4MTA2MGMyNTVkOTk4NjhmYTMzNDEwYTVjNzc0Zjg1NGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn2ba/40/DUZWbY/XEoaf8GBTnKt
cpTDWhGmr8qOes9f2BMZlmLHoh/MY0HTHucGc9WiQOJ/8UVwaE+YznDXKaY0AS7y
QY6MCUUFPXT3ZFWH6ObBCSkePZShUnK5yMz7+rLbldfBc2dRB78mojJh3TBGPo0U
287rCvcJeagS8lis03cF4lyyKbbMLzsYakg6KqzeQLBtbaj9UnGlgv+seuDbdIhM
TcRtRcHzAX5ZsBgQaygmNzK+TxZ1DbOvQ5zUNgmuVVsHLVq5GWHp/GaqqPH3DJFt
gqrAmZrwgSQwuDER6gfwPOCwfTG+FN4Ho3fXTWEtfdZgNcMkoaGWv3HBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHyhoEGDCVdmYaPozQQpcd0+FTvMB8GA1UdIwQY
MBaAFLVqiVfMwwqk7C1HjlPzhybJlVoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAt
MDhiYzY0MGFlZDY3LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAtMDhiYzY0MGFlZDY3
LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZUuv9L1
+Pk3uwwapuTE8LOrUKRRXvU22IIbIyRzPnK1wflp4K8b8Y4pETe/uuqzKLF6y7gq
SSIjcUXE6u+bjfJcMdHfbpJ6fGnV67GmfJ/hpGA5xB7MD7QNDbw3ITTPpehql/sK
lKxwXlzy/8cxrdF3i7A9xHtUygkcxgtBl+xxZWOP0Xt5ydkHBKdsBZJC/FNnFdNA
6McW63pdJCrGVInzPS2M90R3YtNrrNsAQUMEzhg6aWd+qS88KeOBeGA8+DX9PO9f
Rlr7BxLQT91bsnJlApofvtRp9rfBvY+hFTwGva8t+6FqTe3Vbxm6pXuIlVc32G1S
9tAMNlu3n1zEJw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:42 2026 by rpki-client