Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File:                     bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier:          yU80D+D/apzy/sq/5/fQuV0XFfYU1esdK46jglHbyR8=
Subject key identifier:   97:AC:51:C7:17:28:32:B1:45:47:32:EE:9E:48:B1:6A:50:E8:AD:26
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer:       /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial:       019D992AFBD4600D878F8B07BF9C5C814884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number:          06F5
Signing time:             Fri 17 Apr 2026 02:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:23 +0000
Files and hashes:         1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: jM5q/VpLxM6YXYs+7LdkXfPFfwlw23+idKI55Czujrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2a:fb:d4:60:0d:87:8f:8b:07:bf:9c:5c:81:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
        Validity
            Not Before: Apr 17 02:00:23 2026 GMT
            Not After : Apr 18 02:00:23 2026 GMT
        Subject: CN=97ac51c7172832b1454732ee9e48b16a50e8ad26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:30:c3:97:dc:b7:0e:82:f3:17:fe:2d:2b:
                    4b:b0:f9:f1:73:95:24:1c:27:cb:1e:0c:b6:68:dd:
                    39:99:59:7b:de:5c:5f:f7:59:84:31:16:0a:8c:cd:
                    a9:07:4b:57:de:30:7a:a7:34:91:1b:5e:f6:21:c2:
                    96:a9:33:24:37:57:6b:6b:cc:22:c4:d2:5d:fd:a7:
                    3c:11:d5:74:ea:1c:e7:9f:6a:f7:23:a0:01:0a:25:
                    6f:f1:59:84:d0:87:22:e3:ed:ff:e1:9e:58:27:e4:
                    ce:34:cc:54:36:8d:57:ee:58:6a:82:32:17:7e:83:
                    9e:d2:a0:7b:71:a6:18:b0:b1:4d:85:c5:ef:29:3f:
                    4e:da:19:4f:4a:ef:96:a1:1a:13:f8:ce:99:45:94:
                    2b:09:20:cd:5f:82:71:61:c8:e8:f7:73:3b:cf:dc:
                    ea:5d:74:0b:81:b6:c2:c3:4e:43:27:27:0f:9d:bf:
                    48:19:3e:c7:2c:89:8e:92:c7:a3:20:8e:dc:c9:91:
                    d7:ee:f9:0f:d1:30:8a:c0:cc:00:ac:75:96:c9:71:
                    8a:47:c3:39:97:4d:7c:48:81:79:82:1c:18:88:c7:
                    5c:17:33:b7:a3:27:93:10:eb:7f:cf:85:2f:b5:f0:
                    d0:0a:82:e9:9e:7b:e6:0d:aa:4f:08:1d:07:1c:74:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:51:C7:17:28:32:B1:45:47:32:EE:9E:48:B1:6A:50:E8:AD:26
            X509v3 Authority Key Identifier:
                keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:49:ff:36:16:8d:8d:02:dc:a9:cc:d8:60:86:96:2a:eb:
         5b:84:f7:3e:18:80:0f:a0:ce:58:ad:81:3b:a5:c7:f9:42:5e:
         7b:e3:25:80:e0:f5:f8:24:91:0e:7c:f8:a5:a4:da:7d:3c:91:
         e2:8c:c1:10:d8:77:f0:ac:f1:2b:7a:bf:a8:b9:45:1f:e7:29:
         2d:e9:bb:64:1a:df:2c:0c:8a:16:99:cd:a8:92:0e:10:d4:8a:
         7c:34:ae:bb:84:87:9b:9a:b4:00:f7:17:bc:2c:05:89:19:c6:
         14:1e:72:47:00:7c:38:ec:1a:de:6e:64:e9:32:30:3f:86:8a:
         b1:1b:18:6d:a5:92:04:56:f9:f9:40:37:db:58:8e:db:1b:57:
         f4:63:c0:7c:40:be:90:e1:8a:d2:1a:88:18:0e:3f:f8:14:68:
         79:ca:a7:09:7e:93:85:a2:48:aa:27:2c:59:81:f8:6a:9d:09:
         50:ac:9f:e9:c5:13:c1:44:fd:04:f2:23:04:fc:65:ec:2a:0b:
         39:8e:f9:44:8a:b8:57:8c:83:7e:44:c3:b3:95:10:8c:31:c2:
         c8:87:54:4a:e5:bf:ad:d8:a2:27:cc:f1:ee:f4:3e:1e:bc:ea:
         c5:d5:b7:c6:66:55:37:e6:25:dc:e5:8b:42:db:1f:f8:fc:ac:
         21:b0:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:54 2026 by rpki-client