Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          HphXKM8mDPPiM3xnS/ID7MdjAbkWiatXL6y7gltieac=
Subject key identifier:   5E:D5:3A:07:AB:8A:B9:C9:22:E9:F5:79:A8:1A:B4:DE:25:9F:A5:53
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       019D9B515212D56273CE2FFEF5BD5763EE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          17A4
Signing time:             Fri 17 Apr 2026 12:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:30 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: /Il32liu5R7RigVFF3L/qdrVLtHd0fM7ipb5qadWUGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:52:12:d5:62:73:ce:2f:fe:f5:bd:57:63:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Apr 17 12:01:30 2026 GMT
            Not After : Apr 18 12:01:30 2026 GMT
        Subject: CN=5ed53a07ab8ab9c922e9f579a81ab4de259fa553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:c5:30:c6:09:e1:ba:8f:03:79:5b:07:7a:
                    03:af:eb:57:c5:4d:50:57:f3:ff:bc:5b:3c:7c:72:
                    c4:a5:60:3e:c3:4c:f5:55:21:1d:dc:7c:cf:d5:bc:
                    0f:66:6e:1b:8f:19:d3:f4:19:a5:c9:51:40:18:a1:
                    57:81:a7:9c:79:c1:4b:77:5e:54:5d:be:97:27:d3:
                    60:37:de:66:81:c0:b4:ef:f3:6f:8c:69:1d:26:56:
                    f5:20:60:f0:63:91:e7:24:70:a9:87:62:11:cd:01:
                    ca:8a:66:36:1a:a9:7b:7a:d7:14:92:75:2a:b6:1a:
                    c4:b2:20:53:22:f2:95:0b:fa:36:27:4f:cb:28:4f:
                    90:d3:af:59:c6:84:90:b8:2c:dc:dc:fd:3e:5f:bf:
                    dd:65:f1:72:48:3a:e7:4d:1b:90:da:2d:f1:c4:3f:
                    70:07:c3:ce:e0:94:b0:fc:cd:11:f3:da:4a:89:65:
                    9b:1f:8e:64:fd:e8:10:85:41:94:3f:13:68:e5:64:
                    a2:45:b6:5e:8d:25:51:97:86:05:5b:fe:42:0b:73:
                    6e:3e:9a:ad:f3:ec:13:e7:94:d0:13:43:f7:75:56:
                    56:36:53:9d:34:96:85:13:a5:0e:bd:b3:82:f6:f0:
                    05:8a:92:2b:ab:95:1c:30:18:09:79:2c:bf:2a:23:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:3A:07:AB:8A:B9:C9:22:E9:F5:79:A8:1A:B4:DE:25:9F:A5:53
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:49:83:38:5e:a6:14:4f:c4:b3:4c:e0:a4:dd:80:c4:be:26:
         98:09:b5:2a:c1:fc:dd:88:b3:6f:0c:d0:73:e5:a5:f8:63:27:
         08:c2:ce:c7:15:1a:27:9c:8a:15:d7:4b:b1:d3:6a:b5:aa:f5:
         92:c1:ab:76:a9:8e:60:a4:13:d2:a2:2c:ac:21:08:f8:5c:60:
         33:1b:67:13:b7:f5:7e:56:8f:65:dc:2c:8d:6f:e7:4a:30:a2:
         6b:12:74:9b:54:fb:88:65:4c:51:b7:40:37:38:16:f6:88:1a:
         38:08:ed:b3:04:75:dd:e6:48:f0:3d:01:d6:1b:c1:16:57:6d:
         73:54:0d:21:e9:a7:b3:d5:50:27:5e:0a:99:bf:66:2a:52:52:
         67:28:01:f4:4f:21:fe:f7:ac:23:84:b9:98:f2:bf:ad:78:82:
         e5:08:09:b4:22:96:02:aa:8e:2e:a9:6e:1f:c3:ab:97:07:b4:
         b8:e7:b2:57:c4:17:2d:f8:0c:99:f9:30:3b:dd:b7:73:97:4d:
         ee:a3:f8:1c:47:87:42:0c:94:66:10:aa:de:fe:26:6f:e2:40:
         16:53:7a:69:9b:6b:61:cf:ee:44:55:cf:d7:43:d0:cd:da:0d:
         a4:aa:a3:44:cf:63:72:7f:89:5e:46:45:fe:be:eb:27:67:50:
         0f:6e:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:59 2026 by rpki-client