Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File:                     9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier:          FK3Pmw1nWS8bkwI4B8m7+/svxgUHA00WsCrOB2qEQN4=
Subject key identifier:   C8:C4:60:A1:44:2B:45:C4:AF:24:59:BA:BB:D2:F3:E9:1F:BD:A4:1B
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer:       /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial:       019D284E31E9CF0F72B08448D3FE4538FF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number:          1882
Signing time:             Thu 26 Mar 2026 04:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:46 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:46 +0000
Files and hashes:         1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: tuqMgsiaZslOw24VEoyJ8TTo3IOvHr4E+PPtSTHyB9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:31:e9:cf:0f:72:b0:84:48:d3:fe:45:38:ff:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
        Validity
            Not Before: Mar 26 04:01:46 2026 GMT
            Not After : Mar 27 04:01:46 2026 GMT
        Subject: CN=c8c460a1442b45c4af2459babbd2f3e91fbda41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:b6:05:10:da:b8:e0:1c:3d:8e:92:36:28:
                    27:7f:3a:f5:d8:51:84:2a:59:11:f5:21:8c:36:64:
                    a1:65:c2:0b:0e:ab:a4:1b:63:30:c4:d8:45:19:fd:
                    6e:da:74:37:5e:d1:5d:88:74:ad:1d:09:9a:47:7f:
                    92:7d:6d:7e:74:0d:c6:59:66:37:a6:a7:ac:72:8e:
                    dd:6a:c4:08:e9:c8:1d:04:28:e0:41:44:c9:18:21:
                    59:bf:a5:50:ac:2d:2a:72:8d:91:29:8c:93:9f:a0:
                    63:02:ef:a5:b6:71:0a:29:db:2b:a5:89:39:4c:65:
                    d0:47:86:4a:48:80:99:4b:f2:6c:ad:d4:07:79:55:
                    3c:8e:d7:bc:22:63:57:27:4d:08:7c:1a:fa:e3:5c:
                    7f:31:f4:14:60:e7:27:80:f9:b8:86:ea:84:f5:24:
                    e9:9d:d2:e4:69:76:cf:e4:71:6e:c2:3e:35:f4:ed:
                    0c:6d:48:a2:58:ad:b9:28:16:0e:3c:70:67:5a:4b:
                    c6:dd:83:56:e8:cd:8b:c0:a9:83:bf:20:a5:b1:f4:
                    fe:76:a7:1a:33:5f:68:e3:c5:e1:5a:7b:39:67:f0:
                    e8:c0:16:b1:85:6d:f6:ee:f9:ba:87:11:6f:c3:7c:
                    4c:47:42:94:a5:4b:e3:28:67:c0:ed:a0:c9:5d:cc:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:60:A1:44:2B:45:C4:AF:24:59:BA:BB:D2:F3:E9:1F:BD:A4:1B
            X509v3 Authority Key Identifier:
                keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:4a:95:bd:6a:ae:4a:b0:cf:82:f9:7a:a2:3e:ae:1f:04:
         4e:aa:dc:e0:c2:84:b3:0b:39:1e:49:0e:63:d7:5e:e6:9c:13:
         13:84:b3:25:1e:6d:3f:a4:af:1d:6c:3d:9f:de:db:29:cb:6e:
         f2:c0:4a:b1:e4:f4:27:f9:ab:93:88:dc:e1:46:89:1c:00:62:
         f2:f1:d1:a7:38:91:6d:67:dd:d5:36:11:a6:8d:16:d5:16:52:
         cd:cd:62:c7:8a:d5:d0:4d:88:dd:c8:26:52:98:34:1b:6f:0d:
         e5:91:9d:0e:cc:e7:44:10:34:56:cb:1c:48:09:b3:7b:5d:50:
         31:5f:36:01:59:7b:5b:94:4f:81:93:a6:97:be:9a:4d:22:26:
         ca:fe:ec:f2:4d:b7:70:ed:31:65:96:e4:7e:b7:6f:3a:7f:74:
         8f:1b:56:77:e0:48:35:24:2c:34:88:4a:78:70:d1:a4:cb:ef:
         d5:75:49:8d:22:2c:c7:d2:84:6d:47:7b:70:b2:09:ae:4c:6a:
         d9:8a:a1:b1:d9:07:8b:bb:b8:74:69:6e:49:d7:c5:64:2e:03:
         3b:61:77:eb:7b:c6:76:35:e3:fd:24:42:93:18:f2:15:fa:b8:
         4c:70:f9:8e:65:56:2f:df:b0:b2:6e:f5:9f:0a:e0:c2:eb:b6:
         b1:3f:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:38 2026 by rpki-client