Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File:                     rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier:          nWZI7bTwnZyxD99fT2jQqb3w6RniaR4/adDb2djtQ+g=
Subject key identifier:   1B:27:08:1B:8F:96:D8:C6:41:6C:A6:ED:31:45:38:CF:31:86:10:06
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer:       /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial:       019D98F51978CCCFB363216598045A2770E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number:          14C8
Signing time:             Fri 17 Apr 2026 01:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:32 +0000
Files and hashes:         1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: 9wIxMp+3Btwjtp+V+adT/c/JdUkMf9b+0lgRrvEQ7nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:19:78:cc:cf:b3:63:21:65:98:04:5a:27:70:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
        Validity
            Not Before: Apr 17 01:01:32 2026 GMT
            Not After : Apr 18 01:01:32 2026 GMT
        Subject: CN=1b27081b8f96d8c6416ca6ed314538cf31861006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:2b:a5:a9:ba:d2:ed:a9:8e:2a:d3:07:8e:
                    38:9e:d0:bb:e0:ad:61:60:f2:b0:9e:42:43:c3:4a:
                    7c:d1:74:4e:14:47:4a:cc:19:39:a3:61:f2:9d:b1:
                    bf:32:67:26:c2:16:80:09:17:3a:ec:f4:24:42:0c:
                    98:89:a1:6c:6a:67:9d:04:d9:67:6d:18:a2:1e:72:
                    65:1d:b6:73:7c:93:76:8e:7d:15:af:f1:39:b7:71:
                    b9:0e:23:4f:0e:54:86:98:6c:c4:73:cd:64:43:35:
                    fb:79:b5:a2:95:50:02:bf:e5:bc:86:00:60:35:74:
                    e6:5d:98:1d:87:71:8f:b7:76:ee:a6:d3:e3:5f:56:
                    b7:eb:6c:d9:1d:4e:3e:c3:36:3f:df:00:8b:33:79:
                    63:5a:c9:c7:ae:db:b6:a2:34:a1:65:15:56:6a:2b:
                    6a:92:c5:6b:95:1f:68:0e:cb:6d:6c:db:bc:83:df:
                    cc:1d:06:99:de:48:8e:09:ae:3c:51:6f:d6:23:1f:
                    63:0a:d7:6a:0e:71:88:f8:79:84:df:b6:d7:6f:40:
                    5f:3f:ff:a9:22:2b:c4:52:87:30:f2:0d:79:a8:d1:
                    d3:bf:6f:27:44:8a:93:31:bc:38:a0:10:68:ce:2e:
                    5c:65:f5:cb:6e:17:42:99:1a:ab:f7:29:e1:d9:de:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:27:08:1B:8F:96:D8:C6:41:6C:A6:ED:31:45:38:CF:31:86:10:06
            X509v3 Authority Key Identifier:
                keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:21:bd:32:9c:82:a7:80:3b:c0:47:5e:8a:f2:30:3c:96:
         c9:5d:cf:00:ca:50:8d:b3:d3:88:91:ce:3b:ca:b6:44:ec:1e:
         77:c1:5a:cb:65:13:ca:c2:72:79:8b:51:43:b4:da:74:e4:50:
         6e:fd:5c:24:62:93:d1:88:9b:66:e7:b1:0f:fc:0f:80:4c:f8:
         5c:0c:19:ca:28:01:65:0d:8b:55:f0:72:fc:9a:89:8f:f2:91:
         81:4e:15:d6:2d:36:55:7c:44:d4:b9:ef:41:86:b5:bc:04:26:
         e9:03:2c:ae:0d:fd:8f:3a:4e:88:3b:40:53:e2:f7:02:0a:91:
         12:ba:8a:7f:b2:9b:9c:e4:88:69:02:02:a3:5f:0f:76:a0:08:
         0e:9f:b5:0e:27:d2:3d:83:53:2d:a3:b8:50:56:60:fc:69:2c:
         df:c1:54:26:4a:d8:90:83:2c:e9:a8:01:62:4a:9f:91:88:15:
         79:3b:4e:16:9c:f3:9e:ed:88:d3:8b:e5:7f:01:6a:a2:8b:0b:
         f6:6b:6e:89:47:04:05:db:a1:17:9b:75:02:00:73:b8:4b:27:
         dd:b1:fb:d4:1f:5e:13:57:6b:d9:e2:51:d3:66:fa:b8:55:74:
         0b:37:51:1b:7c:a9:02:bd:e5:5b:f2:f7:19:43:d2:ad:28:73:
         4e:53:c8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Rl4zM+zYyFlmARaJ3DmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWViYjBiYjNiMzhhM2NmNDQwYzgxZmY3YjNlMTY5MzMy
YWE2NmQwHhcNMjYwNDE3MDEwMTMyWhcNMjYwNDE4MDEwMTMyWjAzMTEwLwYDVQQD
EygxYjI3MDgxYjhmOTZkOGM2NDE2Y2E2ZWQzMTQ1MzhjZjMxODYxMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib0rpam60u2pjirTB444ntC74K1h
YPKwnkJDw0p80XROFEdKzBk5o2HynbG/MmcmwhaACRc67PQkQgyYiaFsamedBNln
bRiiHnJlHbZzfJN2jn0Vr/E5t3G5DiNPDlSGmGzEc81kQzX7ebWilVACv+W8hgBg
NXTmXZgdh3GPt3buptPjX1a362zZHU4+wzY/3wCLM3ljWsnHrtu2ojShZRVWaitq
ksVrlR9oDsttbNu8g9/MHQaZ3kiOCa48UW/WIx9jCtdqDnGI+HmE37bXb0BfP/+p
IivEUocw8g15qNHTv28nRIqTMbw4oBBozi5cZfXLbhdCmRqr9ynh2d4/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsnCBuPltjGQWym7TFFOM8xhhAGMB8GA1UdIwQY
MBaAFKyuuwuzs4o89EDIH/ez4WkzKqZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgt
ZDE0YmQzZDc3ODIyLzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgtZDE0YmQzZDc3ODIy
LzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo4hvTKc
gqeAO8BHXoryMDyWyV3PAMpQjbPTiJHOO8q2ROwed8Fay2UTysJyeYtRQ7TadORQ
bv1cJGKT0YibZuexD/wPgEz4XAwZyigBZQ2LVfBy/JqJj/KRgU4V1i02VXxE1Lnv
QYa1vAQm6QMsrg39jzpOiDtAU+L3AgqRErqKf7KbnOSIaQICo18PdqAIDp+1DifS
PYNTLaO4UFZg/Gks38FUJkrYkIMs6agBYkqfkYgVeTtOFpzznu2I04vlfwFqoosL
9mtuiUcEBduhF5t1AgBzuEsn3bH71B9eE1dr2eJR02b6uFV0CzdRG3ypAr3lW/L3
GUPSrShzTlPI9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:34 2026 by rpki-client