Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          zh9uFcg+GqmgDpYTK05o10ODc/o3gl2AhUWylUExg3k=
Subject key identifier:   E4:B8:D3:ED:20:8D:EF:E2:30:9D:BE:97:A3:7B:90:28:2F:1E:D6:F3
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       019D996284B2771C44F675A8F857DFD16342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          0B77
Signing time:             Fri 17 Apr 2026 03:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:03 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: AcPd1mvfOMldvesbpwpanEoNYFce7F5IJV7OGhg7wCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:84:b2:77:1c:44:f6:75:a8:f8:57:df:d1:63:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Apr 17 03:01:03 2026 GMT
            Not After : Apr 18 03:01:03 2026 GMT
        Subject: CN=e4b8d3ed208defe2309dbe97a37b90282f1ed6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:3e:ae:38:d5:34:2b:9a:c3:77:98:2e:8b:
                    13:5b:79:fe:c1:fe:c7:53:24:62:77:28:5e:b3:58:
                    a2:a4:fd:28:f0:28:c8:0f:24:21:6a:15:53:a1:61:
                    b4:d1:33:ac:32:9a:3b:25:8d:1a:0a:6e:81:82:12:
                    73:87:ed:07:c4:81:7d:58:98:47:4d:8d:66:de:fb:
                    09:b4:cb:36:55:d6:c9:c9:9d:3d:26:37:a3:cc:b8:
                    68:f6:ad:a0:07:de:6f:c0:64:13:89:40:a0:8a:18:
                    86:9c:87:34:01:42:eb:a5:1c:e4:7d:3d:30:b0:bc:
                    d3:13:fb:24:b0:52:74:b4:c7:dd:db:23:2e:d4:db:
                    e3:4f:5b:7d:fe:df:41:bb:0f:ee:8e:43:e6:49:7d:
                    f2:94:05:50:cf:3c:af:db:c8:6f:24:2b:76:f9:34:
                    23:28:d7:d2:cd:27:63:29:d7:00:37:f4:fe:e1:82:
                    88:39:bd:01:31:a3:a2:1e:d2:4c:9c:0b:02:1d:28:
                    5a:7d:23:c9:e6:09:e2:59:ff:e7:61:91:d8:5b:31:
                    06:c4:e3:e4:67:ac:50:d8:b8:62:57:13:37:84:a2:
                    e7:24:e6:dd:1f:8a:3d:4b:b4:ba:4b:d8:3d:28:e3:
                    56:71:ad:bf:2a:76:e6:04:df:d5:fa:3b:74:4e:de:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:D3:ED:20:8D:EF:E2:30:9D:BE:97:A3:7B:90:28:2F:1E:D6:F3
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:91:46:5c:83:b4:77:c1:76:0a:f7:94:60:5c:5b:d7:4b:8d:
         d5:f1:04:06:ab:d7:fd:46:c4:8b:d2:ce:b7:ba:2c:e0:19:c1:
         74:a6:81:68:fa:0c:a0:a7:05:31:80:0c:28:17:25:ea:aa:e6:
         84:d8:63:c4:6c:c3:8f:f5:75:57:c4:b0:49:2e:b7:2d:ec:01:
         02:6d:08:35:48:41:aa:d6:af:8a:d1:ff:f1:e6:f0:de:fb:46:
         cf:24:5b:bb:64:75:de:26:62:fc:cb:ee:39:dc:2b:a1:88:e1:
         bc:0d:90:35:6b:dd:a1:0c:7a:41:71:bc:11:31:1c:43:a2:a9:
         28:59:dc:42:3f:e8:28:99:be:ad:8d:46:11:04:8c:60:3f:bd:
         31:29:73:08:d4:80:f6:84:de:b2:51:ad:0e:9a:8e:a8:8c:85:
         9d:ca:92:6a:a1:bf:ee:46:77:a5:bd:a1:20:7e:b6:aa:19:50:
         d6:3f:15:9d:c2:5e:3f:27:b7:75:7e:ff:b5:34:1a:8a:3b:33:
         aa:47:98:cb:e0:ea:67:01:b5:86:3e:78:c7:8b:de:6b:19:e8:
         cc:b8:ad:a2:11:7c:2c:c8:13:1c:14:b2:8e:7c:40:f6:7e:15:
         d5:af:37:ae:3c:da:62:03:7d:0d:b9:0f:1c:f3:29:21:61:a0:
         87:4c:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:32 2026 by rpki-client