Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File:                     rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier:          X/zh97ZAm5mmzttnjXJySVYXzvv+GHxYVdNcIga7Kng=
Subject key identifier:   F0:62:2C:3D:76:4B:F0:CD:66:E4:42:BF:41:E9:4E:45:6F:22:F3:A4
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer:       /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial:       019D9A74CB938788B7465E0C8CF474B8BDF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number:          074B
Signing time:             Fri 17 Apr 2026 08:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:38 +0000
Files and hashes:         1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: Kvz7WwicP5uPkJyoNMuZ7OJxdm1KU2PQ92K1O91AU2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:cb:93:87:88:b7:46:5e:0c:8c:f4:74:b8:bd:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
        Validity
            Not Before: Apr 17 08:00:38 2026 GMT
            Not After : Apr 18 08:00:38 2026 GMT
        Subject: CN=f0622c3d764bf0cd66e442bf41e94e456f22f3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:61:af:83:1d:68:8e:15:c5:2d:62:ac:dd:
                    74:70:b0:13:e1:77:17:37:b9:7b:e7:1f:c0:56:a0:
                    8f:31:63:72:02:33:a3:79:11:04:9a:e6:b3:e8:f1:
                    8a:a2:ee:d5:8c:61:60:af:3a:6b:7c:ea:92:82:d9:
                    49:d0:05:23:9a:a4:ae:df:88:e4:a8:26:21:35:fa:
                    81:b1:b2:f5:4c:d0:91:9a:98:6b:d1:95:13:26:0a:
                    d7:2d:d8:ee:ee:18:9a:11:75:87:bd:d1:68:e0:f6:
                    7f:6e:fe:1e:e9:34:9c:ae:67:e7:2e:a0:d1:11:7d:
                    16:af:84:c2:22:59:7a:40:eb:cf:1b:1f:98:04:bc:
                    87:0f:af:09:c4:aa:60:7e:7a:ba:77:8c:e4:27:90:
                    5a:34:e9:e2:0b:fd:a9:f4:35:2e:36:01:6f:0e:0b:
                    91:d6:d6:2f:e3:62:4a:18:79:ab:44:62:ec:4d:bd:
                    1a:c3:7b:0f:14:08:fc:2b:57:ab:15:a8:ee:27:7e:
                    64:0c:a5:32:9b:44:65:30:5f:b8:fc:7a:6b:3a:ff:
                    22:d9:78:05:d1:8c:71:0e:a7:0a:e7:cc:78:69:5f:
                    f3:67:0e:be:35:30:63:33:68:7d:df:25:92:ea:e2:
                    92:c5:82:37:36:d0:d0:61:fb:12:4c:14:05:28:d3:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:62:2C:3D:76:4B:F0:CD:66:E4:42:BF:41:E9:4E:45:6F:22:F3:A4
            X509v3 Authority Key Identifier:
                keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:ec:3e:e2:93:7d:91:41:e6:84:a7:e1:93:19:b5:a3:44:
         d6:13:df:93:79:52:14:df:0c:c6:b1:52:06:ba:72:ca:78:4b:
         d8:d0:e1:87:09:0d:d3:c0:fe:f5:80:ac:19:7c:fa:03:e1:63:
         21:a7:c3:b2:4e:3e:91:02:a6:67:49:4f:c3:a1:ac:c4:03:e3:
         99:95:30:26:b1:44:13:28:24:64:2f:96:e7:da:5b:00:12:db:
         ba:32:16:76:a1:d8:86:b2:e0:53:6a:9c:c3:ed:a3:b1:49:4e:
         67:1a:fb:dc:e5:fe:39:6b:c0:3d:6e:0c:a8:4d:08:56:bc:49:
         ed:66:ee:a3:6a:dc:4d:a6:e4:4d:47:c6:20:42:db:58:4d:68:
         c6:d4:5c:65:74:d3:47:9e:6e:15:05:40:bf:83:86:3d:41:e7:
         26:b6:2f:09:53:3d:2b:04:9d:61:4e:05:fa:18:76:c7:79:ba:
         af:e2:33:f9:0e:e9:44:45:72:39:aa:ef:a5:20:ce:3c:ef:c1:
         aa:03:54:d9:28:f8:5f:7d:82:4d:25:2e:fd:cf:63:57:56:d9:
         39:e9:52:8f:58:f0:75:82:99:37:c7:70:50:cb:ac:c3:fc:6a:
         e8:ba:61:40:14:3e:ae:a0:a5:8f:3f:36:82:99:f0:b6:18:6f:
         3b:e5:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:15 2026 by rpki-client