Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          sR1LqcnqNTmS4PY4Mh9CaGg2jCw8DxeXmENLNOi76ts=
Subject key identifier:   27:FF:7C:94:72:5C:1E:F8:AF:55:C6:7C:FD:67:14:DA:FC:C0:D9:45
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       019E300500692239DAC7CF278D7620CC3940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          17F1
Signing time:             Sat 16 May 2026 09:01:34 +0000
Manifest this update:     Sat 16 May 2026 09:01:34 +0000
Manifest next update:     Sun 17 May 2026 09:01:34 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: fPsvZfrRxAwl/LMajxCu/X7ZHK2ylJCUPkiUXHBzsNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:00:69:22:39:da:c7:cf:27:8d:76:20:cc:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: May 16 09:01:34 2026 GMT
            Not After : May 17 09:01:34 2026 GMT
        Subject: CN=27ff7c94725c1ef8af55c67cfd6714dafcc0d945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:c9:9c:fe:f6:2b:19:a1:de:ab:a0:3a:9c:
                    c2:f6:05:81:e9:13:97:43:77:d8:46:fa:8a:ea:51:
                    1f:9f:b7:10:ec:0a:92:d0:9a:03:c3:ca:a9:e0:2a:
                    76:82:cc:dc:ff:c6:6b:ca:e6:d0:76:41:de:71:5c:
                    2e:95:7f:84:6a:4e:94:22:1f:ac:25:a0:2d:62:28:
                    1d:0d:63:82:14:39:36:b7:ec:df:c8:14:42:34:e1:
                    ea:0d:5f:3f:bb:f4:2f:a9:d8:d4:ce:0c:fb:d7:d9:
                    6a:3a:38:22:e1:dd:1c:50:1a:f7:d1:17:71:e5:33:
                    ef:7f:e7:7b:b2:b4:84:24:0c:4b:e3:eb:74:17:f4:
                    f2:c7:68:0d:a6:4c:31:14:d5:3a:74:62:88:c6:fb:
                    5a:ba:70:52:e5:17:1e:b3:00:3e:0e:4e:e7:a7:38:
                    cd:bc:dd:81:28:ac:e4:dd:8d:40:7c:dd:62:bd:5e:
                    2f:88:41:6b:6a:2c:c1:c6:a9:df:5d:75:cc:a6:19:
                    88:77:94:bd:32:32:2e:84:48:ff:25:4b:33:72:64:
                    6f:73:ac:26:9e:1d:87:f1:bb:07:b3:6f:51:02:06:
                    3d:45:1c:9f:7e:6d:6f:1d:02:34:51:00:ee:48:9c:
                    b5:b0:5a:f7:b2:50:eb:b7:fa:7a:ad:aa:4a:4a:19:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FF:7C:94:72:5C:1E:F8:AF:55:C6:7C:FD:67:14:DA:FC:C0:D9:45
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:df:a9:f4:37:77:bd:01:27:d6:23:2c:1a:c1:89:c5:86:d3:
         99:56:c2:f3:fe:ef:e4:79:89:57:c5:c9:23:ef:04:70:8c:10:
         bf:81:a1:4d:5a:cb:7d:b2:16:53:00:a7:a4:b4:f9:87:52:70:
         73:5a:91:41:2b:8e:4e:1d:f8:a5:cd:ec:a4:f3:b0:b2:60:5d:
         07:fb:eb:fa:ce:fd:7b:1f:2f:11:50:d0:70:f0:cd:78:b2:56:
         92:dc:fa:dd:79:cf:0d:59:58:1c:d8:02:ef:de:bb:65:f7:0f:
         b1:0d:b2:df:30:82:ee:12:c7:fa:30:fd:41:dd:23:f1:70:03:
         89:62:58:2d:9e:16:db:79:04:eb:96:2d:fb:81:bb:bb:17:fd:
         ae:14:b4:5d:6c:10:23:89:5a:ac:1b:ed:17:aa:1f:3f:17:35:
         58:61:42:92:b6:fc:a9:2d:85:3c:0c:46:16:b7:0a:85:ca:b3:
         92:71:57:a6:43:97:94:ef:8b:55:43:58:54:68:2f:6b:91:7c:
         ee:82:f0:57:9d:96:76:10:d0:b4:e1:86:5f:de:34:af:59:77:
         17:f0:11:05:03:d2:df:a6:f4:65:44:e3:10:ab:33:0f:7b:29:
         71:0b:72:11:c3:c0:66:de:34:b7:53:ab:0c:56:89:f1:0c:b6:
         42:86:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:26 2026 by rpki-client