Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          VzLGY+3Na1Vx6OMcVQxD/WoGi+SqHZWvtmguNnwyqZ8=
Subject key identifier:   7F:5E:1E:80:B0:65:A5:CD:4D:C7:97:6B:C1:0F:B3:27:2C:F7:9B:8D
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       019D99D023A8040522239FE1698C3D03622C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          1552
Signing time:             Fri 17 Apr 2026 05:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:47 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: SnDQuVYdBJbQpoaazlYq+b31dILsDeqbo2eeWbwEGxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:23:a8:04:05:22:23:9f:e1:69:8c:3d:03:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Apr 17 05:00:47 2026 GMT
            Not After : Apr 18 05:00:47 2026 GMT
        Subject: CN=7f5e1e80b065a5cd4dc7976bc10fb3272cf79b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:83:ef:4c:3b:ac:01:71:b3:40:a8:67:cd:
                    d8:48:5a:00:06:7b:26:74:fe:09:c9:ae:8c:7f:9f:
                    a8:e5:63:23:b4:e4:e7:c5:31:a6:67:8d:91:35:84:
                    62:bb:78:58:fc:72:2e:d7:7f:26:86:c0:12:bc:8c:
                    74:54:26:eb:4c:3c:7c:c4:36:9f:fd:4d:bd:2e:c8:
                    4c:ec:4a:82:61:b9:c8:ed:a3:22:21:e7:0f:60:89:
                    56:ba:43:d8:5c:42:ba:68:03:c0:18:c7:0f:d4:04:
                    6b:3d:f4:1c:16:f4:17:37:24:bb:c3:53:ec:42:e1:
                    9b:6a:a5:fe:f1:96:24:7e:22:c1:c8:ea:e1:7f:d6:
                    31:ef:60:89:05:37:06:ae:66:74:bd:87:09:e3:6f:
                    60:89:f4:56:af:ea:55:c6:61:92:13:28:49:80:47:
                    32:64:65:74:ef:5f:27:b4:f4:c0:86:b6:5e:ab:41:
                    1b:38:f5:ae:1e:2e:6d:ba:80:84:fe:a1:0c:b7:b5:
                    8b:44:7a:e6:67:78:86:c8:41:f0:75:51:23:42:e6:
                    b0:37:6d:4c:8c:d0:c1:d4:3c:66:c1:10:56:c2:76:
                    f9:da:b4:5a:9f:aa:ae:5b:a9:88:eb:57:fb:87:e6:
                    b0:22:d1:a4:ee:ec:ff:2d:60:8b:86:68:f4:08:ca:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:1E:80:B0:65:A5:CD:4D:C7:97:6B:C1:0F:B3:27:2C:F7:9B:8D
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:d8:ab:0a:ec:44:a4:e8:29:cd:92:06:38:4f:24:b4:b3:
         af:02:71:7e:12:58:2f:29:3b:0e:69:1f:58:3e:5d:73:64:be:
         dd:8b:c7:e3:87:99:02:02:01:99:69:bb:1e:bc:12:3b:a2:30:
         0c:6e:c0:1a:f7:15:9b:b4:29:65:5f:58:f6:b2:f9:ef:ba:ca:
         f7:1d:28:2c:65:0f:39:2b:78:62:7b:47:45:ba:d6:5c:53:1a:
         38:38:25:9a:44:ce:5d:09:a1:f3:1f:b9:a9:35:9f:f5:28:76:
         4b:23:c7:55:42:be:90:ce:2f:cc:59:3a:e4:c0:9a:a3:8f:98:
         e1:7d:d8:80:ce:8a:8c:e8:1a:30:36:24:0e:5a:51:f1:b8:89:
         93:fa:3f:be:45:da:4e:1b:af:b5:84:a8:d2:a5:b7:9c:5a:ff:
         c8:cb:17:23:e6:1a:13:99:ab:55:aa:a0:fa:7a:a2:c7:b7:6d:
         da:e3:0e:b6:39:c2:29:a0:50:e4:81:ec:63:34:59:25:ad:ca:
         10:02:32:45:4a:2a:f7:60:0b:38:d3:51:6f:9e:5b:cc:1f:5f:
         5d:b1:4e:34:ae:52:d1:8d:22:d0:b9:33:18:5d:6d:9f:37:c8:
         30:21:e1:54:08:d6:2d:35:76:87:37:8a:e2:80:8f:a6:47:60:
         4d:59:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:46 2026 by rpki-client