Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          35wa8A4ma/KQ/ArKAZy1ATS03p26ur5xXA6KBGUW1So=
Subject key identifier:   E6:23:1E:D4:F2:A1:70:9A:79:55:1B:1B:7F:A3:05:4A:47:E5:FA:B5
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       019D98F520796429B6039F98C8F17BB9C888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          07E8
Signing time:             Fri 17 Apr 2026 01:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:34 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: R4KBbQT3b/MsqXpSCErihcB+5OpyPIdBNNUiPd8mL08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:20:79:64:29:b6:03:9f:98:c8:f1:7b:b9:c8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Apr 17 01:01:34 2026 GMT
            Not After : Apr 18 01:01:34 2026 GMT
        Subject: CN=e6231ed4f2a1709a79551b1b7fa3054a47e5fab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:52:4c:ca:45:47:79:45:cc:c7:4e:1d:04:
                    7c:7b:7f:4c:9f:ca:a2:43:f4:06:1a:98:22:41:91:
                    04:c3:18:83:0d:1c:3a:b3:f2:9c:15:9f:34:3e:5e:
                    f7:b2:0d:45:6a:42:fb:b3:fa:e3:9c:0f:02:10:c0:
                    d4:05:2c:42:21:a4:ba:a9:b1:09:37:ab:7e:fc:38:
                    8b:e3:da:6b:21:07:96:97:fa:6b:6b:ee:98:05:1c:
                    10:11:35:9d:ff:fe:7e:82:f1:cb:36:55:8c:32:f6:
                    59:d1:73:8f:6e:80:54:f1:df:61:b9:1d:4e:37:a0:
                    92:c3:14:ed:f3:61:c7:f0:2d:3e:d5:89:74:13:28:
                    d3:26:b9:68:4d:3b:ef:af:4f:de:53:9e:15:16:62:
                    c3:38:45:a9:16:98:a7:40:fb:24:60:a5:19:e6:b5:
                    e6:bd:36:6e:be:d2:af:5a:74:65:34:00:4f:3d:b6:
                    f6:06:a5:78:61:c6:6e:c7:89:46:3b:ac:7f:94:f0:
                    cd:3e:ec:4a:7e:6d:92:2f:a0:93:27:c0:3e:31:c6:
                    2b:94:ba:34:65:e3:b3:f5:3e:7c:e9:89:2a:88:cb:
                    1e:dc:9a:c1:b1:ac:8a:ba:56:86:4e:08:f0:2e:d5:
                    18:1d:90:42:b1:ee:65:0d:b8:e9:69:12:b7:3f:03:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:1E:D4:F2:A1:70:9A:79:55:1B:1B:7F:A3:05:4A:47:E5:FA:B5
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:59:1d:7a:e4:61:cb:fc:d1:17:a4:57:78:08:b9:5c:2d:
         93:ea:ed:d0:8a:a8:fd:01:d4:61:b7:59:1d:6c:18:07:14:26:
         af:53:cd:fe:5b:36:9a:0b:56:35:08:0f:39:1a:36:ad:f8:22:
         33:78:0a:88:0d:06:6a:bf:b3:ae:4b:e6:61:df:cd:7e:6d:fe:
         55:59:21:93:d8:ed:0c:19:40:c5:00:fc:89:f3:0f:f4:b4:90:
         49:cb:f0:d6:ac:67:96:e9:5a:53:17:48:18:70:02:3a:a0:50:
         3a:b9:f0:d1:8a:61:ab:4e:5d:de:cd:5c:ba:a9:91:40:7a:a1:
         8c:b3:e2:f5:dd:96:30:b9:7b:e6:d8:85:97:70:54:7b:28:f6:
         5f:9e:57:d0:0d:97:2b:a2:f0:ba:3d:bf:81:fe:07:ac:3b:d2:
         6f:8d:a9:df:b5:a1:aa:4e:25:a2:2b:37:c2:8d:24:ce:ed:06:
         7e:ff:4f:e8:a5:e4:d3:b5:77:61:cb:2c:15:e7:d7:01:6e:4a:
         c7:aa:f7:e9:12:c1:58:a1:66:d6:b4:ed:c8:93:ef:b4:08:99:
         70:76:22:ad:3a:3a:f4:e9:ef:00:39:ff:71:4c:8c:8f:70:33:
         cd:af:b6:0d:06:77:e1:73:17:b1:de:23:51:6e:86:a8:46:53:
         2c:e1:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:35 2026 by rpki-client