Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
File:                     tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json)
Hash identifier:          BeDexOKfwm9VrnNXk9HatIHGseSH2K7Zb1Gqf4gpi3c=
Subject key identifier:   77:8D:F1:85:25:43:28:81:87:2E:FB:BD:8A:DC:13:7E:6C:2D:F4:4C
Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
Certificate issuer:       /CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Certificate serial:       019E2211A6662D0CA27374A990716276BA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
Manifest number:          16AE
Signing time:             Wed 13 May 2026 16:00:42 +0000
Manifest this update:     Wed 13 May 2026 16:00:42 +0000
Manifest next update:     Thu 14 May 2026 16:00:42 +0000
Files and hashes:         1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: drBLJhyVpbm9fvmmVoO6ypk4nwGjwpAb+1VQCvcI4y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:11:a6:66:2d:0c:a2:73:74:a9:90:71:62:76:ba:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05
        Validity
            Not Before: May 13 16:00:42 2026 GMT
            Not After : May 14 16:00:42 2026 GMT
        Subject: CN=778df18525432881872efbbd8adc137e6c2df44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:d5:9c:cc:5b:3c:db:d0:e6:48:41:fd:d8:
                    67:85:f7:53:60:d2:ed:21:38:58:02:94:31:dc:fe:
                    db:8f:bc:de:f1:a0:bc:3d:e7:cd:5e:c1:ae:d4:61:
                    71:17:1e:8e:3f:7c:79:e1:c3:fa:38:d5:0a:1f:e6:
                    29:a1:b6:0a:ea:51:d4:49:f8:a7:8d:f4:73:4e:1c:
                    17:e8:83:4a:e4:05:fc:88:87:17:62:49:6e:54:92:
                    df:b6:41:3a:63:62:00:c4:a0:7e:97:6e:a8:5a:16:
                    e0:06:05:f9:f3:5d:a9:37:fa:27:ed:22:b8:8e:4d:
                    e0:31:51:4e:67:ab:3b:9f:e0:42:16:f1:22:8b:9f:
                    8a:b6:26:3c:df:c1:51:91:e0:af:3a:b9:4d:9b:c3:
                    e4:ad:df:24:e4:71:35:c9:ee:43:10:c9:0f:9d:32:
                    d5:61:ab:b3:c0:d3:bf:78:81:4e:fc:2d:40:98:70:
                    5b:ea:cc:34:ef:0c:3b:7a:a3:c7:ba:e7:00:36:20:
                    f2:49:d6:33:1d:78:95:11:e6:5f:b9:18:f4:8b:d2:
                    f6:54:dd:eb:4c:a7:e7:be:01:49:a7:15:45:cf:85:
                    85:af:63:2c:1b:6c:7c:c3:c2:12:89:a4:66:a0:2d:
                    56:ef:9d:9e:02:2c:56:e4:aa:4c:72:93:58:72:38:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:F1:85:25:43:28:81:87:2E:FB:BD:8A:DC:13:7E:6C:2D:F4:4C
            X509v3 Authority Key Identifier:
                keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:80:e1:5d:19:b8:ff:7d:33:f7:90:2f:c2:a6:b7:86:58:69:
         5a:99:5f:19:38:b2:a9:55:70:81:a9:f4:6a:4c:f6:9c:4f:8a:
         91:24:f3:7c:03:97:54:bd:98:97:72:6e:47:2c:3e:92:88:02:
         86:e5:a4:7b:6f:c7:4a:ef:19:5a:20:5b:e3:81:42:84:6e:33:
         f1:ea:c8:ce:b8:5f:78:c9:3a:d7:9f:8c:d4:86:97:18:f6:ff:
         3c:cf:9f:c4:51:f3:5c:48:74:ed:d1:37:9d:3d:cf:5b:60:8b:
         98:d7:ad:e1:7f:de:49:5f:53:4a:8a:0e:8d:c0:fa:ef:2a:a9:
         7e:7e:ce:a0:5d:80:fb:b0:19:4c:3f:50:cf:ad:4f:88:73:3a:
         6c:6a:f6:5d:ff:19:0f:f1:af:fc:d2:66:32:c1:52:31:a8:9b:
         e6:a4:a3:de:25:0f:08:78:a0:f9:60:9f:2d:f2:93:97:8b:87:
         1d:11:a0:07:d8:dc:c6:c0:55:d6:fe:a2:f4:81:4c:39:fc:f4:
         15:ed:a0:ab:e1:c9:fa:52:50:ed:c3:ef:95:02:21:fc:01:46:
         d0:67:b3:ac:b8:d5:21:b5:0b:9b:0b:bc:14:1b:a2:b5:b2:ca:
         c4:21:30:47:91:0e:15:a2:78:05:e3:fc:1b:19:1c:df:a3:ec:
         ef:69:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:50:57 2026 by rpki-client