Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File:                     fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier:          h6KtAJE64Lx/2TVOk8oy7LrMaZ1Z4koCgak29rFXHQM=
Subject key identifier:   BF:8C:64:AC:5D:BD:75:3E:B8:62:87:3D:D5:00:29:BE:49:34:00:B3
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer:       /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial:       019D99629D9A898C2F8F4ADC5B5D5EED31DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 03:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:09 +0000
Files and hashes:         1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: 0TQm0LnbqUrgFtmL1zxR8Du3RfNuoR2ga6yeqM9GWSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:9d:9a:89:8c:2f:8f:4a:dc:5b:5d:5e:ed:31:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
        Validity
            Not Before: Apr 17 03:01:09 2026 GMT
            Not After : Apr 18 03:01:09 2026 GMT
        Subject: CN=bf8c64ac5dbd753eb862873dd50029be493400b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:32:a6:bd:1d:ac:fa:cc:cb:89:f7:61:da:
                    c3:61:90:71:57:89:94:1a:8f:86:b7:9c:63:af:cf:
                    7f:7f:68:ca:cc:99:3d:66:d2:97:9d:f7:ad:f1:35:
                    09:a9:76:69:1e:bd:a1:72:bf:7d:17:e4:05:83:03:
                    a0:5c:ac:fb:04:44:9e:f1:fa:ac:84:09:a6:fc:a9:
                    53:7d:11:2b:72:40:92:a5:63:85:ec:a2:48:f5:26:
                    a7:a6:e6:21:61:18:0c:f8:f5:a1:a6:0a:af:e6:21:
                    c2:d5:19:20:e0:bd:43:d7:da:77:63:e3:41:10:76:
                    8a:78:17:85:24:bf:b5:62:1b:88:28:98:39:30:cc:
                    c9:8f:21:2f:b6:36:5e:af:9f:fd:d8:18:59:76:d0:
                    8c:46:56:1a:3b:7a:63:c7:4a:9d:96:bb:4d:31:6e:
                    62:ed:e9:cf:c9:3c:3c:8f:88:70:6f:f3:4a:04:74:
                    42:05:46:c0:1c:df:ad:c7:17:47:24:ad:e6:e3:c1:
                    f2:79:e4:21:78:45:40:57:e9:d8:c9:c5:22:9e:a7:
                    5f:d4:cc:5a:82:27:38:ed:e8:ca:14:a2:1e:4b:9a:
                    14:be:d4:ca:be:f0:32:0e:db:d7:fa:02:59:b4:e2:
                    89:d1:80:f5:be:ef:68:72:1c:c8:21:82:a9:b0:39:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:64:AC:5D:BD:75:3E:B8:62:87:3D:D5:00:29:BE:49:34:00:B3
            X509v3 Authority Key Identifier:
                keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:f5:79:f9:08:c8:4f:5d:f3:59:e9:84:67:1f:5c:c6:48:
         c0:a6:76:e4:a7:8b:1e:5f:be:fd:f2:b4:8c:7c:f2:cb:f5:00:
         79:c4:38:a0:04:8f:36:59:01:e3:ce:51:10:dc:66:56:ff:77:
         04:b0:56:1e:6b:19:99:c0:6d:a5:1b:93:ad:ad:ed:f4:17:b2:
         df:5f:fd:d0:24:e6:43:1a:77:b6:36:09:c5:00:fc:39:b4:2e:
         71:a0:7f:38:41:11:c9:45:9d:13:ca:ce:a6:52:11:c2:87:6a:
         de:de:6e:90:63:c0:b1:e6:8e:88:ce:ef:bf:f8:9d:c4:c3:81:
         c9:b0:db:ea:9b:b6:90:ae:c1:e0:88:62:cb:b8:2e:58:c3:3e:
         db:3b:dc:9c:d5:cb:2c:05:5d:80:47:5c:79:56:54:58:e0:04:
         fb:25:4e:63:7c:03:ae:d2:30:ce:37:f5:a6:db:25:f8:af:83:
         bc:3b:17:64:5c:23:05:30:4b:23:c6:48:68:58:98:01:1e:08:
         9c:ae:d3:b6:c7:e4:68:6f:e8:9a:53:b4:20:87:23:59:8a:5c:
         03:1d:55:cc:46:d1:bd:d9:4b:7a:63:4c:60:c5:c4:21:f7:c9:
         ec:20:d0:3f:6b:a1:5f:9b:c8:70:8d:e0:19:45:46:e9:d5:f6:
         8a:9b:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:17 2026 by rpki-client