Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File:                     Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier:          e2LVIjRdokP3zNf6AJazbYl8u+CGKIabCPl7vCTwM6k=
Subject key identifier:   96:BD:97:A5:B0:BA:19:0D:88:7C:CE:FE:A8:E9:B0:31:58:2D:94:AF
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer:       /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial:       019DD087FFD9CA18476EBB40C9FD4184CC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number:          1266
Signing time:             Mon 27 Apr 2026 20:01:06 +0000
Manifest this update:     Mon 27 Apr 2026 20:01:06 +0000
Manifest next update:     Tue 28 Apr 2026 20:01:06 +0000
Files and hashes:         1: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: SSL+DGsvTOU+AbbLa0QWmlQF3M0c6DjI1SjBa2IJsjE=)
                          2: UU4xI-IDeZuaxwAij62eAAaWQ_0.roa (hash: V7I4/+fg+WJ0ybpIztp9e8XhyLxQSgqYEJV59yE+n4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:87:ff:d9:ca:18:47:6e:bb:40:c9:fd:41:84:cc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
        Validity
            Not Before: Apr 27 20:01:06 2026 GMT
            Not After : Apr 28 20:01:06 2026 GMT
        Subject: CN=96bd97a5b0ba190d887ccefea8e9b031582d94af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:9f:cd:ac:8a:6c:34:b2:a8:92:81:00:e4:
                    2d:9f:68:19:49:9a:5b:7d:6d:ac:23:4b:55:da:fb:
                    86:d6:bd:d0:32:3b:90:51:27:e9:ed:6c:38:e5:84:
                    80:6f:1c:de:28:f1:7e:8a:35:4e:45:29:8a:ac:4d:
                    9f:e8:fd:f4:3d:c6:c2:07:e7:46:b4:d0:e1:d1:f9:
                    0e:d5:3c:db:f1:d1:6a:52:ad:59:12:d7:0b:fc:9c:
                    2b:6c:00:9d:da:1f:87:bb:39:63:c9:05:3b:9b:87:
                    98:99:c6:52:01:a0:fd:90:c7:d7:56:9e:21:67:b3:
                    19:d0:2f:7d:10:0f:d5:bf:8e:1f:f3:1e:97:52:b8:
                    e5:6a:bf:2c:ae:a3:dc:7f:6d:5f:c3:d8:40:c7:eb:
                    5d:57:70:54:04:70:49:1b:6a:54:b3:6d:32:f2:16:
                    25:77:44:a7:94:91:6d:35:db:27:1b:16:02:ff:41:
                    4e:c1:ae:70:09:12:c7:9b:8a:c6:16:2f:45:6a:68:
                    96:82:93:80:c9:69:44:fc:3f:01:7f:dd:e8:a0:14:
                    2f:f0:2f:24:c4:e3:b6:00:ed:d7:c6:ed:a7:ac:5e:
                    12:e1:06:ea:8e:f0:08:5c:7d:95:1e:ad:75:88:25:
                    5d:da:43:b0:d6:cc:b5:5c:f6:3e:6b:2c:33:53:a3:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BD:97:A5:B0:BA:19:0D:88:7C:CE:FE:A8:E9:B0:31:58:2D:94:AF
            X509v3 Authority Key Identifier:
                keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c7:cf:7c:ec:cb:26:49:23:f0:bb:8f:a4:2a:23:8b:8d:e5:
         62:c2:c1:df:fd:a0:5c:4d:e3:b3:bc:68:63:77:00:61:bb:f0:
         15:19:d9:45:1f:ce:1b:e6:2d:fd:a9:bc:68:c2:57:7a:de:c3:
         74:1e:96:7c:6b:68:33:13:53:d9:d7:71:38:63:a9:41:c7:54:
         0b:60:2f:96:8b:17:24:5d:ef:d4:64:db:87:af:63:97:c1:54:
         27:65:2c:b9:5d:94:5b:36:77:2c:32:97:c7:a1:b3:c4:d1:da:
         36:fe:e0:f6:7a:10:3a:8e:c9:97:77:50:3b:c4:90:de:e1:92:
         b5:16:c9:7c:60:9f:37:25:b6:98:40:9a:22:55:30:65:b3:e9:
         d7:4b:55:eb:7a:60:2d:f8:4d:56:88:a8:f0:57:48:1c:e5:19:
         34:8b:18:4e:9c:da:81:19:f5:dd:af:e0:35:30:e4:91:e3:2c:
         2b:97:55:02:e5:7b:95:94:1f:08:2f:70:72:9c:ed:c4:da:bc:
         b9:d9:a2:9e:fe:66:d7:42:bd:56:f7:f0:ef:d2:5e:d3:f5:f9:
         0c:35:41:2c:3d:c9:49:8d:62:a3:92:6c:07:93:de:2b:ac:66:
         3d:24:b8:f5:c2:0f:15:93:e7:55:de:bf:48:fe:36:80:7e:7b:
         97:dd:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:25:22 2026 by rpki-client