Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File:                     FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier:          ydqZg0/KqRrwAQJYVZf2DSA7wf9xkLtIRCy+o8IXJp4=
Subject key identifier:   4E:8E:E4:AC:07:15:1A:40:47:A6:F1:7F:2E:71:B8:A1:83:06:CC:8B
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer:       /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial:       019D98F41305DDF00DAF014910D2A560F4E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number:          095F
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: 1Yekl+hMzBSZtwDf4hH36jLbBo//Jt1Ng8cK4HBY6U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:13:05:dd:f0:0d:af:01:49:10:d2:a5:60:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=4e8ee4ac07151a4047a6f17f2e71b8a18306cc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:3c:bf:4d:ec:04:b4:78:3d:81:f5:d8:a6:
                    74:1f:00:c1:d5:5d:51:0b:59:7d:bf:16:f3:98:98:
                    08:0c:09:5e:20:8a:bc:fd:33:68:e1:32:6e:eb:d2:
                    c6:45:2d:53:08:c9:0a:14:77:93:c7:b2:a0:a8:93:
                    c0:9c:3a:d9:11:a8:cf:d4:13:f7:21:34:eb:9a:fd:
                    88:06:93:2b:e1:0e:46:33:00:84:75:52:b6:b4:6e:
                    b3:2a:8c:5c:d6:6d:0a:fb:fa:74:ab:9e:a4:bf:ba:
                    af:8a:18:b1:52:7b:9a:79:e8:69:a9:7c:6a:ec:4c:
                    9f:fc:51:5d:49:ae:96:67:51:ef:6b:1e:53:8b:25:
                    eb:ba:0a:c7:35:d3:60:03:a2:b9:55:04:89:eb:b1:
                    32:0f:fb:e3:30:df:36:fa:fe:68:07:1d:c8:73:23:
                    a6:47:e7:69:eb:90:08:27:2c:67:be:3c:f7:97:1d:
                    ff:fd:e6:17:23:11:51:53:c9:35:bb:9d:08:47:19:
                    09:4f:5c:46:16:d4:a7:29:e2:76:93:a6:c0:ac:97:
                    37:9d:3b:f0:c4:08:d3:70:26:09:aa:12:32:6d:62:
                    a5:c5:b0:d2:65:9a:e0:80:41:f4:23:29:81:21:eb:
                    7c:0c:9d:64:70:14:de:91:b6:03:99:57:37:80:b3:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:E4:AC:07:15:1A:40:47:A6:F1:7F:2E:71:B8:A1:83:06:CC:8B
            X509v3 Authority Key Identifier:
                keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:56:de:6e:ab:74:f0:ab:97:d0:d5:3f:18:73:84:82:d7:01:
         4f:b6:e8:df:c4:b3:57:c6:c6:a3:5c:c4:7c:59:77:7e:e2:63:
         e5:b1:5f:da:66:2e:82:c5:a7:52:54:43:ea:47:91:80:ac:6b:
         de:2f:cb:c6:86:42:07:7c:04:07:67:8b:3c:75:96:df:49:e5:
         d1:f1:5f:2e:e5:a0:00:1b:80:2a:ef:a1:ba:77:87:42:6f:82:
         d6:c0:a7:40:fb:5a:3b:fc:a9:71:84:79:dc:77:05:1e:50:ee:
         ba:b7:98:4b:2d:66:85:44:65:eb:42:ae:44:0b:2b:17:d5:c3:
         a5:62:8b:a8:cf:86:a4:e7:f3:fa:c2:7e:9e:90:32:65:a4:8f:
         e5:b6:38:73:2b:69:b7:81:e0:bf:80:0d:63:9a:d5:95:80:8b:
         a7:36:5d:f8:24:8c:42:a2:85:7f:85:0c:0e:8b:f7:cf:31:ea:
         12:28:98:2e:b6:1c:fe:11:a7:9b:55:67:2e:1f:63:7c:b3:67:
         f3:37:cd:21:1a:e5:62:11:05:ad:36:55:60:00:35:40:f1:2a:
         8e:11:a9:bf:6f:8c:9e:b9:55:8d:65:2a:37:69:31:39:7f:1a:
         73:15:14:68:4b:51:18:1c:78:e4:9e:7f:b2:ea:5f:b8:76:23:
         b0:90:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:31 2026 by rpki-client