Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File:                     XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier:          hRCgLBt1u8WnLzjBW5TUwgm0sfiyG/XVxa0U6rXMONk=
Subject key identifier:   D9:30:FF:0B:14:AF:8B:56:32:1B:2A:CD:85:61:4B:29:53:DA:99:6C
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer:       /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial:       019D9961DEEF53B2970DFC86B211085F3FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number:          0812
Signing time:             Fri 17 Apr 2026 03:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:21 +0000
Files and hashes:         1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: xDnoSS8syZk7TWza3BMIIoUVtEbK5bervVBJ3BoR4zM=)
                          2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:de:ef:53:b2:97:0d:fc:86:b2:11:08:5f:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
        Validity
            Not Before: Apr 17 03:00:21 2026 GMT
            Not After : Apr 18 03:00:21 2026 GMT
        Subject: CN=d930ff0b14af8b56321b2acd85614b2953da996c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:8a:5a:f5:88:a4:8d:e0:03:05:15:27:d5:
                    3f:17:4d:bb:fa:10:31:67:b6:12:53:61:54:bb:fe:
                    72:99:1b:c3:16:e9:f5:8e:34:88:fd:f3:fd:85:ec:
                    f7:dd:c2:5a:de:a7:de:4c:0d:1a:0c:de:10:e4:ad:
                    99:58:5b:ba:59:32:a4:37:09:4c:fd:89:14:00:09:
                    3c:c3:fc:bf:58:73:a8:43:3e:b5:87:cb:14:37:0d:
                    81:39:25:2d:cb:92:4c:4e:a6:05:83:0a:5a:66:cd:
                    0e:6e:cb:df:c7:a5:fc:ca:c9:bd:b5:ca:14:50:32:
                    f6:a4:b7:31:a6:cf:68:ff:45:6c:96:ca:4b:c3:be:
                    ec:28:54:90:44:ab:69:eb:82:8d:da:c9:3a:33:d0:
                    ca:5f:d2:6c:fe:1c:25:c9:40:de:aa:2c:53:14:a2:
                    c7:02:9f:23:7e:b6:e4:e4:c2:46:1d:42:ab:f0:3f:
                    d9:84:c8:56:ba:55:37:ec:2b:22:eb:3d:b1:d1:03:
                    4a:33:37:40:16:1a:0e:d1:d3:a1:6b:a6:97:bb:82:
                    47:d1:b7:f0:41:98:f1:ae:6c:8d:68:93:de:47:a8:
                    7d:32:e2:69:ce:0f:ee:e1:ef:b8:2c:2b:81:00:10:
                    ef:0e:18:bc:fb:56:33:1a:06:33:5a:1f:0f:7e:09:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:30:FF:0B:14:AF:8B:56:32:1B:2A:CD:85:61:4B:29:53:DA:99:6C
            X509v3 Authority Key Identifier:
                keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:a5:71:e4:31:08:b7:c2:14:4e:d9:c3:e3:72:66:3d:d3:
         0d:59:cb:6c:10:c6:a2:11:48:e7:e7:a5:ab:33:56:eb:4d:f2:
         f5:68:f9:f5:18:01:ad:56:d7:e8:5f:7f:94:2b:14:01:19:7b:
         ba:ae:d1:70:93:60:1b:ad:15:9f:22:90:49:02:15:89:a1:b3:
         dc:08:e8:19:6b:b0:3c:93:fc:29:88:e2:82:3e:28:f8:0b:28:
         47:9f:8a:2d:ba:a2:e1:f5:56:ac:dc:02:0b:88:f7:f6:5f:77:
         3a:9a:89:64:cb:7b:9a:70:cd:90:83:4e:88:09:60:a1:bc:46:
         6e:13:3f:51:8d:d0:9b:0a:35:6d:c0:6e:be:e9:a1:b0:e8:90:
         bb:e0:8a:66:e2:0f:d6:61:29:ef:82:5d:c0:5f:b7:16:75:88:
         41:63:13:50:97:5b:2f:d4:5d:8e:ec:f2:69:60:09:47:48:2d:
         c9:09:d7:9a:38:40:66:47:5a:45:82:ad:d8:ec:29:0b:f2:b5:
         2c:ac:a1:91:3a:c7:d9:ab:27:a7:a5:e8:da:f6:62:91:06:31:
         c0:33:85:26:10:7a:2d:f0:85:52:b7:4a:db:20:7c:4a:c4:39:
         aa:f0:8f:83:15:78:5a:12:bc:1a:ab:85:92:43:2e:5b:4c:24:
         1d:87:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:44 2026 by rpki-client