Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File:                     1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier:          /8X0MqP060zluuwBLT0Dxq0GmWmp4ayjNsUB3MD3KwA=
Subject key identifier:   4F:78:8C:A6:73:79:1F:F2:CB:D5:94:58:DD:CF:3A:AD:1C:26:18:97
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer:       /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial:       019E2F968807DC5CF40DA31C443E016146FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number:          148D
Signing time:             Sat 16 May 2026 07:00:54 +0000
Manifest this update:     Sat 16 May 2026 07:00:54 +0000
Manifest next update:     Sun 17 May 2026 07:00:54 +0000
Files and hashes:         1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: BlirTkXN0c0C1EyieMHdsTLvURqgxsOMU00nszzsjtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:88:07:dc:5c:f4:0d:a3:1c:44:3e:01:61:46:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
        Validity
            Not Before: May 16 07:00:54 2026 GMT
            Not After : May 17 07:00:54 2026 GMT
        Subject: CN=4f788ca673791ff2cbd59458ddcf3aad1c261897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:68:0e:bd:f8:b8:95:33:27:15:a9:62:40:c0:
                    7b:41:dc:3e:3a:95:62:0c:e0:0d:ad:4d:e8:4f:18:
                    43:01:2b:75:e4:88:57:89:75:3a:1a:a1:bd:1a:e4:
                    5e:47:77:0a:bf:48:30:ca:fc:7a:44:8a:8c:1c:0c:
                    40:0b:56:ec:81:34:8e:27:00:70:e2:66:80:3d:75:
                    69:b8:21:5f:63:29:ae:42:82:90:3a:29:e8:a9:68:
                    ab:7d:f7:e0:65:ce:ff:d2:4f:a1:73:1b:01:44:e0:
                    e4:57:5a:b6:43:05:3c:f5:eb:d8:b1:fc:ff:c6:f2:
                    cb:57:c5:25:c8:75:25:0f:f5:1e:bd:2a:fa:5a:07:
                    44:ca:1f:65:08:03:ed:00:4d:86:36:aa:1e:d2:18:
                    a8:1d:74:ec:e5:68:db:83:e7:d1:3b:13:e5:d9:17:
                    d9:3b:5e:a1:d4:1f:a7:3c:0f:aa:3c:ab:71:d4:83:
                    df:27:16:41:f0:6b:05:6c:88:ff:fa:dd:17:cb:20:
                    6e:47:1f:3c:0c:b6:1b:fb:7d:3d:45:9a:15:5e:b4:
                    ed:cd:e5:bb:83:2c:9a:17:ea:cc:c4:ce:f4:ab:d2:
                    86:3f:26:6f:29:cf:d0:63:5f:e5:4d:0e:c1:db:0e:
                    0d:b2:3c:9f:0e:2b:ef:5f:67:d2:1c:73:f9:c6:8e:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:78:8C:A6:73:79:1F:F2:CB:D5:94:58:DD:CF:3A:AD:1C:26:18:97
            X509v3 Authority Key Identifier:
                keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:00:8f:e4:cf:25:e8:1f:49:7d:fd:ca:78:ad:c1:90:93:
         df:91:c2:a3:08:98:ac:6e:33:d8:06:f2:cf:ff:78:d4:57:70:
         8d:10:54:ea:36:2e:ab:7e:b8:b5:21:73:71:c8:76:17:02:fe:
         c1:f9:63:53:fe:27:68:ed:cc:69:2e:15:0f:e0:41:ca:a3:b7:
         f0:8c:d8:38:4b:b9:e3:94:0d:e8:c8:24:b0:a2:8b:57:af:ff:
         9d:d8:37:09:38:28:0b:fd:67:11:bd:76:4b:3d:48:3b:81:08:
         5f:39:f5:03:6e:72:00:23:66:bc:06:09:42:72:5a:45:1e:2d:
         79:02:83:a8:62:b0:84:28:18:fe:34:98:e1:1b:4b:83:ba:52:
         f5:80:24:34:49:96:9b:5f:7f:9b:54:e4:1e:c3:7d:75:02:4b:
         4b:fe:d6:f3:a5:d5:4b:ab:f9:06:ea:5c:0a:ce:17:f2:a6:5b:
         c8:d7:8b:91:d4:67:53:4f:3b:de:e9:8b:c2:6e:6b:c5:20:f0:
         dd:61:e4:b1:38:90:53:c4:e8:cd:b6:ac:b0:aa:c1:30:91:2c:
         47:ad:88:db:df:52:d2:7b:8a:7f:78:83:b6:ea:8b:ca:8b:4d:
         30:8c:f2:eb:8c:e9:58:0f:d1:44:bd:d0:49:af:c4:49:ae:4f:
         6e:78:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:41 2026 by rpki-client