Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
File:                     Re1ZewY6Xadli0iMsbbD-bIQlPM.mft (raw, json)
Hash identifier:          SmCdMKD1ib3Oo84Bp6Pjc3sh87zwF0GAe4BdjSLlAk0=
Subject key identifier:   8A:26:77:40:C7:E7:92:29:0A:DA:9A:39:B5:6E:82:6D:D3:41:F0:21
Authority key identifier: 45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3
Certificate issuer:       /CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
Certificate serial:       019DDE0CD6AAACC1CB1BF3C20F5EF1864F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
Manifest number:          11
Signing time:             Thu 30 Apr 2026 11:01:16 +0000
Manifest this update:     Thu 30 Apr 2026 11:01:16 +0000
Manifest next update:     Fri 01 May 2026 11:01:16 +0000
Files and hashes:         1: Re1ZewY6Xadli0iMsbbD-bIQlPM.crl (hash: 4ngZS5u7kRQ+B2Ltl2xV4mxQTEQPM6OovXFeHd0sids=)
                          2: SDpQVLxIqGRbMlfT39OKkP1mF-o.asa (hash: XIF+ZTFsKODGQx3mj+VZqNyb64ld+5zEG7Huo/CDaxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:0c:d6:aa:ac:c1:cb:1b:f3:c2:0f:5e:f1:86:4f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
        Validity
            Not Before: Apr 30 11:01:16 2026 GMT
            Not After : May  1 11:01:16 2026 GMT
        Subject: CN=8a267740c7e792290ada9a39b56e826dd341f021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:72:71:d8:ec:74:5b:fc:94:86:56:dd:45:aa:
                    3a:c1:8c:76:d1:ed:a0:b4:b0:33:64:06:bf:03:de:
                    89:d6:78:21:7b:d2:00:89:65:ed:1b:00:09:a4:13:
                    fb:af:8b:27:a7:52:f4:df:c3:d0:23:93:b8:9e:c6:
                    10:09:1c:a5:da:e2:c9:f5:3d:c8:ab:13:99:a5:83:
                    a8:50:8a:78:0e:41:c7:cf:c5:82:86:a1:1f:f5:4d:
                    9c:d1:a8:42:fe:e1:28:65:ed:75:39:2e:84:35:c4:
                    6d:5f:dd:bb:93:83:4c:e5:eb:38:6d:2a:91:91:15:
                    37:ee:d6:cf:2d:48:6f:7b:1f:c5:e0:8e:ff:64:8d:
                    a4:b7:6c:80:4f:55:06:88:5e:90:d3:d4:be:7c:d9:
                    38:92:83:a3:17:d7:61:bd:6b:9f:69:b0:f6:ba:df:
                    82:62:25:b4:38:ce:09:24:4a:54:e0:1d:c8:a3:71:
                    79:ab:05:68:7c:55:55:95:a9:a3:83:ce:79:8d:09:
                    20:18:e4:45:fa:33:bd:d7:73:16:5f:29:1a:65:c5:
                    cf:9d:e3:2c:46:a4:b7:b5:49:71:ea:b8:24:88:87:
                    1f:b1:59:52:a0:c1:2d:11:94:d9:18:ff:25:cc:c9:
                    58:4c:94:0e:c2:7a:ad:2b:db:ae:ed:c5:2c:a4:66:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:77:40:C7:E7:92:29:0A:DA:9A:39:B5:6E:82:6D:D3:41:F0:21
            X509v3 Authority Key Identifier:
                keyid:45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:49:86:6b:48:41:95:97:b0:9d:ca:0c:85:81:35:c4:fc:
         ef:2c:0f:01:e3:30:50:50:99:e5:bc:22:35:f5:23:ec:ce:a0:
         47:55:94:d1:23:6c:30:a0:9f:24:55:4d:f6:14:a8:48:a0:f3:
         d5:c0:cd:8d:76:6b:24:7d:a7:e3:61:d8:da:16:ee:6b:f1:df:
         dc:b8:fd:8c:d0:4e:91:bd:03:a9:ae:c5:b4:70:0d:d2:b5:d3:
         e4:b3:59:ca:48:9c:3c:ce:ba:89:7b:30:43:56:1f:29:b2:5f:
         97:6d:95:4e:14:ff:12:fa:a0:8b:4b:8d:89:97:6e:83:a6:ed:
         a0:98:2e:02:a2:e2:a7:02:d2:65:ac:58:d3:10:55:06:8a:e5:
         9a:ff:46:c9:7f:a5:39:02:0f:3f:63:53:b5:57:02:83:c0:9a:
         c3:ab:36:00:6f:62:44:e8:60:2a:9e:2f:f9:a2:98:d1:95:2f:
         78:17:5d:43:73:5b:1c:72:26:1b:a9:06:a8:f6:55:d5:70:c6:
         63:09:d9:3d:b2:be:cd:70:3a:56:c0:03:1a:db:1f:30:1a:9a:
         f3:bc:d5:7d:11:19:df:a0:da:39:b3:dc:70:0b:3c:b0:0f:a0:
         02:7e:56:ac:a8:21:99:37:5e:62:92:c2:b8:a3:8a:83:76:db:
         e6:bc:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:10 2026 by rpki-client