Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File:                     D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier:          nMoBTCD0TMq0Jqok+qWqqa/3ZYAkFEsv4HdFzq964ug=
Subject key identifier:   E8:63:81:54:88:E1:0A:7C:83:DF:31:82:E5:61:1C:37:7D:FF:72:B0
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer:       /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial:       019DA2D35994234748B7C6BF3A533B632621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number:          18C5
Signing time:             Sat 18 Apr 2026 23:00:53 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:53 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:53 +0000
Files and hashes:         1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: fYEIOCuKUoT7BXdZ5V2MS4T8BGZQbB3+v9Bcvbz3Eec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:59:94:23:47:48:b7:c6:bf:3a:53:3b:63:26:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
        Validity
            Not Before: Apr 18 23:00:53 2026 GMT
            Not After : Apr 19 23:00:53 2026 GMT
        Subject: CN=e863815488e10a7c83df3182e5611c377dff72b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:19:09:d4:4a:99:9e:b7:fc:83:fc:1c:88:
                    de:05:b6:cf:53:e8:74:6d:88:49:cf:dd:83:de:4d:
                    88:7f:af:f0:a8:ea:8e:2f:d6:62:58:e1:e3:40:ca:
                    9a:f6:0b:24:0e:d9:f5:78:ea:d3:17:48:89:a7:39:
                    32:f0:ae:34:3f:ba:b7:fd:b0:76:10:a1:94:06:ed:
                    52:b5:8f:58:52:a9:6e:79:a9:6d:f0:1d:10:4e:be:
                    67:9f:80:ca:9b:c1:cb:52:85:1e:19:59:e4:b8:d4:
                    c1:0f:8f:24:85:de:b5:e4:4a:c3:7d:ad:34:11:99:
                    ca:8b:9b:6a:43:22:4e:0c:f9:9d:43:bc:14:6b:0c:
                    f2:8b:6c:2e:7e:fe:55:95:8b:75:3f:37:3a:eb:83:
                    ca:50:d3:f3:d3:35:9b:1b:6f:26:b4:7b:21:11:ef:
                    b6:27:fb:9a:6c:90:15:1f:c8:ec:04:4b:83:fe:f0:
                    03:58:47:b4:93:b9:79:d3:0a:16:40:0e:f6:0a:99:
                    4c:e3:bc:e7:66:7e:4a:7f:7d:2d:f5:d5:ee:9d:ef:
                    88:ca:29:8f:cf:82:fe:84:01:ed:03:24:02:37:46:
                    a5:1c:f2:88:90:5d:7c:b5:27:41:dd:7a:0f:41:0c:
                    56:e9:6c:6a:8a:d3:c3:66:48:1d:95:d2:bc:a8:26:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:63:81:54:88:E1:0A:7C:83:DF:31:82:E5:61:1C:37:7D:FF:72:B0
            X509v3 Authority Key Identifier:
                keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:80:2c:8a:b6:d0:89:74:80:ff:9b:19:fb:72:0a:53:c8:
         a4:dc:93:a5:9e:3c:2a:44:2a:ce:65:fa:46:62:39:d1:23:ad:
         0c:6b:10:19:6e:92:13:02:4b:7d:87:79:5d:18:14:b1:44:dd:
         21:8d:88:bb:15:e4:5b:b6:eb:3b:0f:c5:61:93:d1:09:c1:f4:
         9f:bd:06:93:5d:c2:60:30:55:de:57:7e:49:bd:0f:e7:4f:50:
         dc:11:07:51:4c:fb:83:7b:22:9e:2d:3f:60:de:7e:f1:d9:5f:
         39:5e:3b:10:2c:c0:79:a2:e6:53:5b:1c:4e:39:f2:a3:d8:d6:
         66:83:8b:f2:0f:4c:f5:9f:e8:43:e8:db:cd:34:16:bb:d0:be:
         fc:0e:3c:4e:f2:a5:e6:76:5e:78:66:f8:5c:8d:d8:bf:27:59:
         95:9d:31:ac:48:34:cf:e4:9a:84:f4:ee:6d:bc:07:c0:d2:05:
         8d:23:f9:7c:87:c1:19:a4:4c:4d:b9:47:9b:a9:c3:2f:21:49:
         f5:41:d0:13:83:41:6d:b9:b7:42:a6:30:64:b9:98:a0:10:51:
         87:7e:90:a8:df:2d:da:04:63:6b:92:34:0b:01:79:a3:ae:38:
         b9:0d:31:cd:3a:df:81:2c:a0:72:f9:e5:8a:a6:ee:4d:2f:d2:
         af:ad:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:31 2026 by rpki-client