Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File:                     d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier:          ACtem8v2gfh2YfuccC7LNlVw7zDJBvwIen9K4n7+vS0=
Subject key identifier:   A3:7B:AB:F7:9F:E8:FF:DD:55:7F:90:DB:45:AE:FD:1D:86:57:85:A8
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer:       /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial:       019D98F423BD33108A5546B51CAE6D8BFCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 01:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:29 +0000
Files and hashes:         1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: T4+xM5UPsGyLnqx6JFe8zaOmfwAKC3+jzAKZrvG4ya0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:23:bd:33:10:8a:55:46:b5:1c:ae:6d:8b:fc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
        Validity
            Not Before: Apr 17 01:00:29 2026 GMT
            Not After : Apr 18 01:00:29 2026 GMT
        Subject: CN=a37babf79fe8ffdd557f90db45aefd1d865785a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:e7:24:fb:d9:5f:b8:68:51:fa:5f:07:a6:
                    a6:39:2f:a0:4b:33:d7:75:bf:16:9f:ee:a8:78:33:
                    b9:96:ba:df:66:f6:3e:d3:51:15:48:ad:4f:24:2c:
                    45:67:00:23:1c:90:41:e3:35:c5:3a:d7:d8:c0:74:
                    50:c5:80:83:c8:27:14:b2:ae:77:b1:81:31:23:b0:
                    16:a8:06:00:b4:3a:ba:26:b3:b2:78:31:f8:31:c8:
                    e7:db:bd:27:ee:7d:ed:5f:d5:e6:d4:6a:f9:d2:4f:
                    7e:58:b9:c6:13:ec:c3:bf:ef:07:a3:b8:49:a5:0a:
                    4d:60:e1:af:0e:b4:29:a2:dc:cf:06:4b:28:36:35:
                    ee:c0:4d:bb:5e:6f:de:f5:48:36:4f:f1:16:ff:51:
                    c6:93:9d:09:76:48:59:29:bf:a6:59:37:ee:b3:47:
                    22:05:62:2e:b8:c2:1d:2f:d8:4f:2a:d2:ac:0e:a3:
                    87:df:62:11:e0:6a:24:75:11:fa:26:7c:ed:a4:7a:
                    1a:3e:93:5c:46:03:49:22:50:fa:ab:06:44:6e:6e:
                    ab:08:18:ed:7d:66:59:48:c1:7a:d8:5c:e9:a4:e4:
                    14:72:af:df:00:9d:87:5e:11:48:c9:fb:9d:16:03:
                    20:92:bd:bd:66:c9:2d:74:38:01:03:23:01:fa:07:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:AB:F7:9F:E8:FF:DD:55:7F:90:DB:45:AE:FD:1D:86:57:85:A8
            X509v3 Authority Key Identifier:
                keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:28:bb:9a:dd:38:07:c7:07:e5:d7:76:b0:25:40:c4:23:
         57:46:cb:e7:f1:78:37:95:12:1f:10:06:c9:62:f0:7d:c1:d7:
         4f:56:b9:20:db:ce:ba:ce:74:b9:50:c6:4a:bf:50:68:aa:f5:
         26:69:aa:e6:d4:98:cc:ce:b9:c4:e5:0c:bc:4b:1b:b3:3e:fb:
         eb:50:68:59:5b:79:9f:79:94:f6:ec:0c:b7:88:46:f2:96:9a:
         9f:06:76:02:28:e0:bc:a2:05:89:b9:e2:22:a7:1e:d3:80:d7:
         9b:c0:9c:d7:25:29:77:5e:e5:8c:8c:a3:ba:38:df:41:bb:f1:
         f1:6b:ba:16:09:35:ab:3e:de:b2:2d:09:43:b3:90:07:7e:c6:
         ab:99:f1:dd:d1:d9:14:0e:4f:3d:23:87:65:07:f3:a5:4a:f6:
         92:e4:e9:93:5c:67:e2:87:a4:15:52:40:13:4e:62:49:79:09:
         27:93:dd:f8:89:ce:fd:45:f1:f1:6a:ef:2b:b5:6f:fe:a1:35:
         b0:e6:64:b7:e2:82:a5:9d:37:cd:d3:e7:ce:ec:9f:1b:ad:f9:
         2e:a5:e4:3b:31:e8:0f:57:2a:22:dc:02:6e:e6:10:86:aa:bb:
         47:64:92:eb:21:81:eb:7b:cf:74:d5:07:82:ab:77:86:35:f7:
         e3:f9:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:49 2026 by rpki-client