Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          bNINTlDTaXWrfJrnYuycTotu+HmxF7thuImYnHXC43o=
Subject key identifier:   12:08:C8:75:2A:89:84:91:09:AF:6C:AA:35:E3:23:73:D9:5E:57:07
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       019D9998F29CD5B5AFF68ABA71D73C20EB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          0A67
Signing time:             Fri 17 Apr 2026 04:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:30 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: gcYYZVkKOVXbK8/rEGpUDkpzKdoEEKEKBfWDBwwAvRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:f2:9c:d5:b5:af:f6:8a:ba:71:d7:3c:20:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: Apr 17 04:00:30 2026 GMT
            Not After : Apr 18 04:00:30 2026 GMT
        Subject: CN=1208c8752a89849109af6caa35e32373d95e5707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:41:f6:e7:26:b9:6b:bb:92:d8:ac:a1:94:
                    18:0a:6d:8e:17:ac:97:32:4b:1d:03:83:59:e9:03:
                    1b:d4:fc:07:17:fb:de:3d:4e:74:05:95:9e:15:d3:
                    25:26:b3:b2:41:7f:17:16:65:7d:d4:e7:dd:e1:5e:
                    84:1c:c3:d9:8d:b9:be:e3:f3:24:c1:08:b3:89:c4:
                    46:27:5d:cd:25:19:92:3a:02:82:dd:5f:60:8b:da:
                    bd:97:a7:72:40:37:98:82:f8:52:1a:37:b9:36:a4:
                    5f:5e:41:cd:75:46:77:1d:fd:9e:fa:02:84:3f:67:
                    77:84:c5:52:9e:dc:9f:0f:52:b7:e1:86:60:32:6e:
                    ac:c9:22:b9:ab:2e:ed:87:19:8d:03:bf:2b:19:ef:
                    94:30:3f:aa:f1:dc:0d:ab:7b:6b:4d:f6:6c:9b:86:
                    91:55:06:e1:86:19:36:39:a9:3a:84:da:6b:1c:db:
                    49:50:93:99:cd:84:29:7f:43:b0:a1:56:ac:bf:ee:
                    46:15:45:ab:aa:f4:f0:7e:91:1c:77:97:25:e6:54:
                    c3:c4:b7:0e:68:fc:90:2f:cb:a6:5e:ed:27:78:cb:
                    94:e6:ce:0b:35:23:1f:3f:b3:a6:2c:bd:98:15:26:
                    74:d6:f4:cd:27:21:f0:34:74:b7:3f:96:4a:72:56:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:C8:75:2A:89:84:91:09:AF:6C:AA:35:E3:23:73:D9:5E:57:07
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:aa:c5:ce:c6:1a:cc:05:81:b7:a9:ba:cf:8e:50:a4:6c:
         90:8c:bd:88:ea:e6:9e:10:32:5e:ae:31:38:4a:c4:f3:9e:a0:
         0c:87:f1:38:11:41:49:5d:67:d5:dd:73:56:ba:0a:a1:e6:c5:
         fa:c5:54:a2:05:60:fd:8e:fd:02:c1:04:9f:77:c1:cd:a5:4d:
         dd:c8:73:0e:cf:62:22:ca:32:c1:74:35:fa:be:ce:e3:bf:c9:
         4b:ac:cc:09:8a:0a:51:cb:7e:e3:74:fd:2a:37:fa:4c:59:c7:
         c9:73:24:3f:3d:4a:f6:9a:8c:62:96:95:bb:7b:a1:fd:b1:2c:
         ef:cd:5d:69:37:6d:7e:9b:f1:a7:7d:38:40:04:ea:5d:7d:c8:
         6d:c3:f7:e8:d6:fd:29:4d:57:1a:95:f0:12:6d:89:5f:73:1d:
         5b:94:3b:da:9d:6e:c2:79:39:8c:f9:5d:d6:0c:7e:52:6f:d6:
         88:23:66:34:62:17:14:40:31:28:00:98:0d:d4:84:3b:9f:7a:
         ce:28:0d:a5:88:24:67:ac:5e:a7:35:08:73:80:0e:01:f5:2a:
         94:0f:a6:c9:7d:02:2a:c6:bd:77:ba:74:3f:e2:70:70:48:ca:
         a8:b2:00:df:38:09:e9:6d:2e:09:52:88:ce:96:5d:a7:4b:54:
         f3:08:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:35 2026 by rpki-client