Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File:                     gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier:          EvPrF5/xvrE8kfqK9V11bSXplbbSJsjA6YiWHCeRGAs=
Subject key identifier:   AB:0A:BF:45:7B:1D:B8:77:F1:F3:BA:7F:3E:F1:BA:79:C4:28:CD:F5
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer:       /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial:       019D9999257E2B8AFD51E662F5D3809E28E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number:          0A6C
Signing time:             Fri 17 Apr 2026 04:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:43 +0000
Files and hashes:         1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: SgEFfLwlNiPI8E+oP4lz8tjoynBzQ/IDIF49fFIk47I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:25:7e:2b:8a:fd:51:e6:62:f5:d3:80:9e:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
        Validity
            Not Before: Apr 17 04:00:43 2026 GMT
            Not After : Apr 18 04:00:43 2026 GMT
        Subject: CN=ab0abf457b1db877f1f3ba7f3ef1ba79c428cdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:01:38:37:04:9e:12:de:19:81:1c:4c:5c:
                    85:a4:dd:c7:a6:c0:f9:07:6d:34:98:95:1a:58:49:
                    7a:a9:86:bd:ac:82:a8:b4:05:a7:fb:d8:a6:22:70:
                    14:fb:0d:1e:53:ae:04:e9:6a:5e:08:69:52:58:df:
                    e4:e9:bc:49:c6:30:96:a1:61:bd:f1:78:65:2f:78:
                    62:dc:e5:ea:05:46:ac:2c:81:60:1a:aa:ba:0e:29:
                    06:db:93:7a:78:e0:04:ba:60:db:d4:60:e6:61:28:
                    9e:b0:1f:7b:a7:7d:33:08:a9:15:15:bc:b3:44:2c:
                    e7:64:ea:42:c4:6f:74:53:ae:cb:2e:cf:39:6e:74:
                    a6:a0:69:6e:a1:eb:aa:d9:2e:02:a5:33:fa:76:d9:
                    0a:d7:7d:51:6e:46:f8:a9:1d:76:c1:45:3d:a0:bb:
                    5d:b2:8a:54:2f:e3:ef:fe:ce:a7:68:0b:32:82:49:
                    23:a4:10:b4:98:16:d9:50:8b:fc:ab:38:c4:56:1f:
                    1a:d7:18:30:36:5f:fc:92:f2:21:85:eb:37:ca:37:
                    cb:b9:35:42:34:3a:31:09:ce:ac:c1:25:21:1e:98:
                    46:ed:40:76:fd:72:fa:6a:3a:c1:7c:1f:f3:45:8a:
                    7d:3e:ff:c9:da:cb:9e:52:ef:c4:89:02:83:b5:d9:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:BF:45:7B:1D:B8:77:F1:F3:BA:7F:3E:F1:BA:79:C4:28:CD:F5
            X509v3 Authority Key Identifier:
                keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:fb:12:f1:be:8b:2e:3e:f8:c3:7f:31:14:b2:12:23:2e:
         bc:b9:33:f7:61:ef:2c:0c:e3:fe:23:d2:77:2d:7a:13:d6:fa:
         84:d4:58:f3:1b:dd:4e:b4:0a:93:1c:4b:cb:39:6f:25:97:ec:
         2f:56:f1:a1:ea:6f:52:dc:a7:c3:cf:d4:af:50:99:34:72:6f:
         ba:e0:4a:c3:e3:b8:7e:c1:6a:d1:11:dd:40:5f:5b:e7:ef:89:
         8d:d1:be:78:82:15:be:6e:bd:4f:42:2a:6c:bb:14:c8:48:f8:
         10:3c:31:5b:3e:4f:32:04:78:64:a0:4c:01:54:96:60:2f:c7:
         b5:9e:7f:55:d2:e4:b4:e0:c4:a1:0a:51:06:70:36:03:80:b0:
         c7:f7:88:55:3d:8c:78:c7:68:c3:1a:b4:b5:6c:86:1c:d3:4f:
         b9:55:02:73:41:11:3e:f3:b7:cb:5f:ab:9e:ea:4f:cd:2c:00:
         86:5b:fb:9e:ef:f0:84:53:83:55:88:88:3f:2d:18:d4:e3:fb:
         86:8c:eb:84:ec:35:0e:f7:6d:47:b2:09:f7:32:3b:5d:53:8e:
         ed:cf:4a:90:af:88:67:6c:0f:87:ec:7b:67:ef:48:7a:6e:4c:
         d8:6f:cb:8f:c0:12:06:f8:f7:cc:7f:20:61:61:7c:a0:37:6a:
         11:ab:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:36 2026 by rpki-client