Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File:                     biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier:          W+KnbvTG6ZG1S9O2gbmt3jSNICc6LsGfHPRmqmUI3xA=
Subject key identifier:   C3:9D:60:6F:D8:35:23:27:42:3A:00:D3:D1:DB:C8:27:36:23:DC:88
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer:       /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial:       019D98F50822D947917C02C766BA64F64BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number:          111D
Signing time:             Fri 17 Apr 2026 01:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:28 +0000
Files and hashes:         1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: 29zBnE14h9/8ig84m+aN7zeJV+LitI5aS9/HupdgCTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:08:22:d9:47:91:7c:02:c7:66:ba:64:f6:4b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
        Validity
            Not Before: Apr 17 01:01:28 2026 GMT
            Not After : Apr 18 01:01:28 2026 GMT
        Subject: CN=c39d606fd8352327423a00d3d1dbc8273623dc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:c3:93:98:f7:c3:d9:93:84:83:88:ea:c2:
                    bc:56:d9:4d:ed:63:cf:91:78:67:7c:aa:7e:2a:46:
                    e6:6a:7f:40:db:8d:4f:ed:53:75:b5:15:1d:f4:11:
                    0d:b6:bc:eb:1d:93:1b:06:fe:cb:4a:94:12:ed:23:
                    b7:7e:95:ad:b0:53:36:bf:3c:ef:1d:4c:ff:34:30:
                    82:98:ac:e0:9b:6b:77:d9:e5:58:86:1c:d2:b5:bd:
                    2f:a1:06:46:4d:0a:2f:4d:95:14:89:5a:47:96:e4:
                    8f:b2:c3:9a:d7:57:55:a5:97:65:9a:0d:83:a7:8a:
                    b3:64:0c:96:5a:17:82:3c:30:33:d8:fe:81:b4:b0:
                    33:83:97:47:10:97:2d:6e:55:ec:f6:03:d8:56:ad:
                    56:7a:e5:b5:6c:d9:2c:54:ce:4e:df:88:b6:5f:26:
                    af:4c:ad:98:c2:c6:e9:c0:ef:c1:7a:38:da:fc:67:
                    aa:94:93:1f:e2:c3:e5:88:df:a4:c7:1d:d9:bb:c2:
                    0c:95:ba:a8:a5:b6:0d:9c:4f:54:fb:fa:52:00:55:
                    11:bb:2d:c5:f9:46:ab:58:af:c5:78:60:88:be:c4:
                    7d:26:88:3b:44:5d:61:d7:4d:9f:86:6f:c8:b2:d3:
                    7e:5d:84:ab:50:3b:e5:30:73:d9:d8:70:3c:10:f3:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:60:6F:D8:35:23:27:42:3A:00:D3:D1:DB:C8:27:36:23:DC:88
            X509v3 Authority Key Identifier:
                keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:9b:83:05:58:ab:c7:2b:e3:0d:88:97:d2:45:92:39:5c:
         1d:19:86:eb:75:b8:ee:49:83:0c:bb:c7:de:85:5f:19:f2:ea:
         5a:61:49:b2:a8:6d:f3:92:13:0c:a9:b1:b4:c4:04:92:be:e6:
         66:7b:3a:37:43:dd:45:e0:f1:ea:72:c0:6d:8b:35:9b:d0:8b:
         e4:ab:8c:20:9a:c8:7f:40:eb:c5:67:23:16:4b:cf:35:ba:02:
         66:d3:f9:38:15:c0:80:98:9b:47:9b:94:ca:67:ef:3b:9d:33:
         f6:8a:45:0b:6d:06:8e:82:dc:c8:f0:52:67:b6:5f:6e:95:5c:
         4a:46:5f:05:1e:bc:3f:b8:63:4a:4c:77:0d:1d:70:1d:0e:a2:
         77:10:2a:7b:a9:0f:ea:c8:9f:0e:fd:9f:ab:44:b1:ed:4f:88:
         40:71:e0:1f:03:ed:6c:60:03:a2:50:0a:7c:b1:76:f2:86:50:
         6c:b8:00:22:b3:f1:51:14:0b:04:9f:7e:d9:22:ff:d9:cb:0a:
         79:9c:6e:36:b7:88:f0:2d:38:35:54:f8:c5:ce:6b:11:36:10:
         90:9a:e4:a6:27:9f:87:ac:04:91:93:f8:a7:dd:15:fa:37:d9:
         78:1a:5a:d4:9b:cb:e0:96:fd:82:79:a7:cc:60:76:82:2c:15:
         0f:f7:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:19 2026 by rpki-client