Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File:                     hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier:          Go6xZl2QuO8mD4Ck1W+pqCN8gC+W2BC/deptcXReGZg=
Subject key identifier:   01:2F:07:0C:99:AB:11:84:1C:34:50:F8:A9:A6:EC:52:8C:91:D9:8D
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer:       /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial:       019D98F459D227A1F645E1373FC179AF67DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number:          1191
Signing time:             Fri 17 Apr 2026 01:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:43 +0000
Files and hashes:         1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: 2Y7jRZaWdVh0S/obWCVPREjxubHrLc7dlq/bmJ1cgpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:59:d2:27:a1:f6:45:e1:37:3f:c1:79:af:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
        Validity
            Not Before: Apr 17 01:00:43 2026 GMT
            Not After : Apr 18 01:00:43 2026 GMT
        Subject: CN=012f070c99ab11841c3450f8a9a6ec528c91d98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:d9:ee:a4:ac:6b:e2:b2:ea:40:8a:a2:e9:
                    eb:6f:3c:43:a7:a5:87:ec:c5:22:32:66:22:a2:97:
                    53:33:7b:be:c5:93:6e:ce:fd:8e:ee:d2:33:1d:53:
                    30:fc:01:a4:f4:59:77:1e:0c:72:fb:25:35:a7:a2:
                    dd:f7:6a:93:c0:1d:80:df:3a:48:03:bd:57:ac:b4:
                    52:f0:b3:6c:17:aa:c7:28:03:f7:a2:b2:8b:74:be:
                    0f:4f:df:2b:9c:cf:38:49:f7:11:b4:f0:e6:16:0a:
                    cb:75:f1:73:5e:47:84:b6:db:d0:01:ff:ae:1b:60:
                    eb:ff:4e:b4:ed:ca:e1:15:47:87:32:43:0f:52:6c:
                    40:f6:36:b2:45:e9:24:de:2d:7d:09:69:ed:6a:1d:
                    28:b0:64:45:67:95:84:1c:71:58:6c:f2:d9:72:21:
                    af:bc:8b:0a:76:b3:ed:33:85:c8:01:c7:19:83:04:
                    17:0c:98:f6:ee:cc:5e:9e:17:56:10:47:69:4e:10:
                    97:df:7d:eb:ef:5a:36:c3:b4:82:4d:57:58:3f:d8:
                    91:3d:44:ac:db:c1:65:74:00:3e:2f:af:2e:90:d3:
                    cc:81:be:8a:e4:00:1c:7b:9f:16:20:d4:b0:c8:28:
                    a4:c8:06:2f:d5:a6:96:51:4d:1d:14:f6:9a:df:9b:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:07:0C:99:AB:11:84:1C:34:50:F8:A9:A6:EC:52:8C:91:D9:8D
            X509v3 Authority Key Identifier:
                keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:55:29:b8:b8:ec:e8:6d:84:e2:2e:3d:87:f4:84:16:ea:97:
         ad:7d:a0:f0:84:58:c3:52:59:c7:0c:e2:b3:17:0a:84:b7:1c:
         51:32:9b:f1:0d:0e:a6:8f:28:b7:a5:78:94:34:0f:ad:19:d3:
         97:15:ba:55:93:91:c8:d9:70:05:d6:bd:92:ad:20:b9:2e:42:
         df:71:4d:7b:6f:03:76:10:7f:d1:fc:1a:29:a8:fb:4a:14:fc:
         e4:e0:f2:14:94:6d:da:2d:b8:f6:25:9d:b6:f2:58:33:ce:71:
         ba:1a:4f:22:de:8b:f8:3d:3b:5b:9c:e3:fa:a2:1e:0b:15:24:
         1e:91:de:5f:0e:a1:8a:22:59:1e:29:01:a2:f7:41:ed:c5:1e:
         9d:c9:7f:38:1c:1c:31:b6:84:cb:5b:5c:4c:0b:8a:b4:99:27:
         d8:46:56:8a:38:f9:ef:cf:b2:97:f1:20:7c:9d:2e:e5:16:b0:
         37:8b:bd:bf:39:97:86:63:84:6e:ac:a1:dd:52:1d:70:54:da:
         5d:66:dd:f9:35:01:0e:cf:00:97:14:d8:81:07:7e:e6:ba:74:
         a1:9b:fb:45:b4:43:68:00:10:b6:ab:fb:1c:df:b3:9a:a7:c2:
         7f:bb:ea:64:aa:12:c0:f9:74:70:1c:0c:57:5a:a6:00:22:ff:
         e6:ea:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:41 2026 by rpki-client