Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          5KMGfP9fr+jjZUL0V5PVWuvIApn1wEvHySd6iQl29cQ=
Subject key identifier:   7D:04:50:77:65:7C:30:11:3C:30:D5:A4:5D:6A:76:34:81:7A:B5:C3
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       019D98F42FB8D5CAA772D495C28EE0EEEB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          18BD
Signing time:             Fri 17 Apr 2026 01:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:32 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: 6l4fn0uFZXd5PqL5YJcT6xXcmaSp0WX0jdrOipYm3k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:2f:b8:d5:ca:a7:72:d4:95:c2:8e:e0:ee:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Apr 17 01:00:32 2026 GMT
            Not After : Apr 18 01:00:32 2026 GMT
        Subject: CN=7d045077657c30113c30d5a45d6a7634817ab5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:24:1c:c6:01:39:23:bd:f0:72:da:38:b4:
                    3e:44:f6:60:8e:f8:e4:6c:1b:6e:65:07:e9:0d:dd:
                    d0:ae:92:98:74:f4:f2:9f:a6:f6:51:83:3e:73:98:
                    88:17:8a:2c:7a:d0:b0:db:62:48:b3:3d:19:de:f4:
                    62:a1:a6:6e:1e:ab:0c:e2:f3:4e:39:bf:b6:90:52:
                    d3:93:32:d2:9a:8d:3c:71:5b:a6:27:fc:77:a2:32:
                    2f:58:90:24:4e:ac:96:08:28:50:18:f8:2e:e1:b8:
                    62:e6:27:a1:97:c4:66:3e:d7:f1:c4:03:1d:e7:3f:
                    09:fb:13:81:8e:5a:69:e7:29:29:1c:08:03:5d:61:
                    32:4f:ed:55:f4:7b:b8:4e:f1:30:d5:2d:0e:2f:16:
                    c1:69:fd:2e:ec:21:29:fc:10:c5:c6:55:ad:b1:e7:
                    3d:64:85:89:f7:e1:20:c5:fa:50:b3:84:e9:f3:fb:
                    46:5b:ef:c9:fc:c0:91:cd:20:17:70:f7:44:88:0f:
                    d2:83:b6:b9:42:f8:81:8a:e1:5b:02:eb:8b:bf:bc:
                    f1:00:86:91:92:99:80:9e:cd:2f:f5:e1:69:34:16:
                    fe:3c:5e:ec:ac:1a:3a:7e:8f:6d:da:5b:77:4a:ea:
                    88:1d:c5:53:82:da:c9:87:ca:1c:41:14:50:d2:07:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:50:77:65:7C:30:11:3C:30:D5:A4:5D:6A:76:34:81:7A:B5:C3
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:a0:61:e7:f7:55:c8:f9:85:58:3a:a2:4c:4b:fd:e1:af:
         98:58:85:20:23:1d:34:34:4f:6b:be:e6:13:e9:ad:ea:46:05:
         c5:8b:e4:05:ca:ce:9d:48:a6:7c:4b:20:ea:61:68:2f:24:3d:
         6d:4a:2d:10:de:4c:4a:a6:cc:b1:21:22:cf:04:cf:af:7d:15:
         e9:fc:fa:f0:2b:c1:4d:e1:ac:7c:33:df:f8:c7:43:7e:5a:85:
         53:18:d1:90:ed:ac:e1:55:4f:18:9c:9c:b3:8f:74:22:09:9f:
         96:d1:d4:e9:be:c9:68:c5:39:4a:96:3f:73:3f:28:c6:5c:97:
         76:e2:4d:c9:59:39:6b:fb:76:92:59:37:67:84:42:76:d7:5f:
         5e:3f:0f:9d:26:d4:3c:ec:f8:cc:3b:96:1d:7d:f6:91:f3:86:
         74:33:fb:6f:cb:ce:be:23:27:73:74:e7:10:f0:99:ab:ad:0b:
         d5:c6:bd:88:77:56:65:5a:a1:d2:8f:88:ae:2c:98:12:c8:c9:
         f5:de:1d:07:7f:65:17:69:1d:22:1a:06:34:48:e8:c6:82:42:
         e3:91:d3:f0:34:8c:de:6e:0b:b6:4a:db:61:ac:bb:9d:29:99:
         55:de:a4:b5:b4:96:a6:d6:b9:a3:7f:a4:1f:ff:1d:6d:b8:d8:
         52:33:56:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9C+41cqnctSVwo7g7usAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjgzNTk4MWUxZTc4OTM0N2Y0N2ZjYzliYmFhYzZiMTVk
Njg3YzEwHhcNMjYwNDE3MDEwMDMyWhcNMjYwNDE4MDEwMDMyWjAzMTEwLwYDVQQD
Eyg3ZDA0NTA3NzY1N2MzMDExM2MzMGQ1YTQ1ZDZhNzYzNDgxN2FiNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQkHMYBOSO98HLaOLQ+RPZgjvjk
bBtuZQfpDd3QrpKYdPTyn6b2UYM+c5iIF4osetCw22JIsz0Z3vRioaZuHqsM4vNO
Ob+2kFLTkzLSmo08cVumJ/x3ojIvWJAkTqyWCChQGPgu4bhi5iehl8RmPtfxxAMd
5z8J+xOBjlpp5ykpHAgDXWEyT+1V9Hu4TvEw1S0OLxbBaf0u7CEp/BDFxlWtsec9
ZIWJ9+EgxfpQs4Tp8/tGW+/J/MCRzSAXcPdEiA/Sg7a5QviBiuFbAuuLv7zxAIaR
kpmAns0v9eFpNBb+PF7srBo6fo9t2lt3SuqIHcVTgtrJh8ocQRRQ0gcVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0EUHdlfDARPDDVpF1qdjSBerXDMB8GA1UdIwQY
MBaAFBb4NZgeHniTR/R/zJu6rGsV1ofBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZThlZmUtOGExNS00YzZiLWEwMGIt
YzFhOGU1YTZkYzU2LzEvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZThlZmUtOGExNS00YzZiLWEwMGItYzFhOGU1YTZkYzU2
LzEvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa2gYef3
Vcj5hVg6okxL/eGvmFiFICMdNDRPa77mE+mt6kYFxYvkBcrOnUimfEsg6mFoLyQ9
bUotEN5MSqbMsSEizwTPr30V6fz68CvBTeGsfDPf+MdDflqFUxjRkO2s4VVPGJyc
s490IgmfltHU6b7JaMU5SpY/cz8oxlyXduJNyVk5a/t2klk3Z4RCdtdfXj8PnSbU
POz4zDuWHX32kfOGdDP7b8vOviMnc3TnEPCZq60L1ca9iHdWZVqh0o+IriyYEsjJ
9d4dB39lF2kdIhoGNEjoxoJC45HT8DSM3m4LtkrbYay7nSmZVd6ktbSWpta5o3+k
H/8dbbjYUjNW2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:42 2026 by rpki-client