Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          Gs/3qOJiyA0fK/tyq9o6s5SgvuP8tfqgdQRZKhk9+UM=
Subject key identifier:   77:AA:6E:EA:4A:44:13:6C:38:6A:B9:F5:C6:D3:57:15:9D:36:B0:B6
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       019D97E2060200A48AC3853681DEDC929A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          08EC
Signing time:             Thu 16 Apr 2026 20:01:05 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:05 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:05 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: /QiCiP/R6IushJPv1khEp8GHyf/dAdVW17aYu99/igA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:06:02:00:a4:8a:c3:85:36:81:de:dc:92:9a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Apr 16 20:01:05 2026 GMT
            Not After : Apr 17 20:01:05 2026 GMT
        Subject: CN=77aa6eea4a44136c386ab9f5c6d357159d36b0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:dc:b7:4f:75:bf:a7:80:74:0b:ba:d9:3c:
                    d1:9d:88:3b:dc:b4:08:e3:98:6b:be:20:97:a8:34:
                    74:0f:a2:59:46:5a:93:f5:d8:31:17:ff:a7:5b:c3:
                    3c:1e:91:06:ed:d4:52:a9:e0:74:02:d9:01:96:8a:
                    46:ca:ca:93:05:5e:c8:ba:4e:ba:87:2c:c5:b7:9b:
                    29:5d:76:a5:99:33:fc:b6:b6:83:73:78:91:7a:72:
                    e7:e2:71:be:1a:33:51:e3:f4:e1:a1:43:bd:09:82:
                    53:44:30:76:c8:6b:10:ca:67:8f:93:02:e2:61:94:
                    0f:f4:32:c9:8d:c0:51:13:a8:c2:35:6c:d5:56:6a:
                    ad:f2:4d:a3:f5:5a:54:9c:c2:ba:72:02:cf:d7:24:
                    5b:e8:73:02:d8:90:58:15:d5:80:d4:6f:ad:3b:9f:
                    9c:39:04:63:1a:f7:0a:0e:6c:e7:80:6c:64:ac:d2:
                    4e:29:8d:44:6f:82:43:2e:e0:2b:50:45:43:61:4f:
                    78:fe:dc:54:92:03:e5:59:95:16:7e:48:46:69:86:
                    0a:36:97:f3:4d:9e:70:ca:6e:89:84:b3:b6:69:59:
                    7c:23:16:b0:6d:98:22:09:de:f0:54:9f:ba:40:33:
                    47:4b:0d:91:96:67:ef:41:8c:77:1c:a3:3e:4a:de:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:6E:EA:4A:44:13:6C:38:6A:B9:F5:C6:D3:57:15:9D:36:B0:B6
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:f3:9f:0a:1a:bb:f2:70:b6:ac:de:ae:81:28:0f:a9:10:
         52:b8:b8:c1:7e:4a:f7:47:65:ea:ed:3a:54:33:87:c7:21:28:
         cc:86:b3:85:4b:45:2e:07:1d:5e:8e:61:8f:7d:4b:21:68:36:
         e7:7a:3a:e0:97:81:0c:46:ec:52:d4:e2:23:5d:74:9a:ef:e7:
         c3:55:d4:43:0a:b2:d9:86:65:87:90:a1:dd:ac:50:ba:a9:83:
         26:3d:c7:5f:f0:60:80:bd:46:9c:b2:80:d6:1c:af:e2:9f:bc:
         cd:9c:8a:a1:96:d2:f7:32:6d:8e:97:98:88:8c:b6:a3:b1:78:
         aa:b5:e1:87:50:51:05:8a:ef:cf:52:5f:92:47:24:c1:92:03:
         c9:a1:ba:27:36:60:f9:cc:5e:e4:3b:e3:da:6b:32:0a:e4:02:
         07:c4:6b:52:3d:d9:24:fc:94:42:74:a1:1a:78:4c:a3:cf:e3:
         df:b7:bb:bb:a2:51:a9:08:96:48:22:ca:d1:d3:b4:fa:ba:f1:
         35:96:57:df:e8:a8:ef:c2:f8:86:73:1c:79:31:0b:7d:58:90:
         93:b4:18:88:34:6b:39:61:ab:fb:74:87:31:61:78:fd:31:9a:
         92:5f:5e:61:e7:a7:4c:f7:1d:bd:ae:2f:65:60:c8:5d:1f:b0:
         e6:e5:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:10 2026 by rpki-client