Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File:                     _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier:          DWMAUSPdka1hjKgPZ1gB2TdfqGKcwZ4LvSFflWoH4HQ=
Subject key identifier:   A3:77:A5:2F:A8:58:E2:48:A1:60:43:52:E6:F6:D6:0F:51:A7:82:8C
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer:       /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial:       019D277276AFE9B117E781627835060D2B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number:          1405
Signing time:             Thu 26 Mar 2026 00:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:45 +0000
Files and hashes:         1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: Bh/wsDK1dTPmvsPBpTeXJD9zQi+b7NhJl7SsdD1Olh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:76:af:e9:b1:17:e7:81:62:78:35:06:0d:2b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
        Validity
            Not Before: Mar 26 00:01:45 2026 GMT
            Not After : Mar 27 00:01:45 2026 GMT
        Subject: CN=a377a52fa858e248a1604352e6f6d60f51a7828c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:97:25:e6:69:4b:5f:fd:cd:b6:48:09:7d:
                    2c:47:c7:ff:b6:d1:96:65:a8:bf:0d:09:19:52:69:
                    91:dd:01:fb:7f:f6:96:df:74:ec:62:43:3e:13:40:
                    32:81:31:d8:4a:65:89:8a:12:f7:10:2a:c5:35:2f:
                    61:61:e2:b0:54:fe:79:fc:68:35:8a:6e:17:94:37:
                    aa:00:61:ee:b2:91:d4:70:85:a3:38:e6:52:2f:15:
                    19:c0:a8:6d:41:0d:48:66:4b:6a:e5:3d:d5:bc:00:
                    5d:fc:50:3c:a8:fc:ca:ec:61:fc:89:02:1f:b0:da:
                    13:43:b3:5e:19:e9:d9:5d:7d:95:57:57:f6:ff:34:
                    2d:d0:5e:0f:20:bd:67:4b:f3:ef:1a:43:b5:29:fd:
                    b3:4e:d2:6e:e0:d6:7f:a0:c9:96:98:df:2c:53:60:
                    60:0b:d2:fd:a5:73:06:e1:41:ba:d9:c6:5f:42:f0:
                    fd:46:72:e3:55:3b:84:5d:d0:ad:26:5a:70:ce:c2:
                    08:8a:9b:4a:40:95:8b:48:5f:1c:6c:30:e0:dc:64:
                    f9:18:da:4a:3c:42:66:12:0c:e5:96:1f:b9:37:06:
                    27:69:1c:5b:6e:74:bb:0f:10:75:25:88:c3:e0:0b:
                    63:f8:6c:fd:9f:4e:66:cb:f3:5f:87:a6:ef:57:ac:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:A5:2F:A8:58:E2:48:A1:60:43:52:E6:F6:D6:0F:51:A7:82:8C
            X509v3 Authority Key Identifier:
                keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:15:29:7b:4c:58:3c:f5:d7:f8:82:19:33:b8:1b:49:a7:90:
         6b:40:67:65:85:43:23:4b:dc:1e:77:39:81:bc:bc:3f:af:c1:
         cb:d0:b9:86:4d:1d:ab:48:d9:2c:c8:da:3e:ad:1c:6b:70:98:
         ed:8d:03:83:7c:6b:af:fb:c1:fb:a9:b3:8d:ac:02:e7:a6:09:
         eb:9f:dd:0d:ff:4e:ca:06:23:d5:04:c7:cf:5b:3f:86:bb:1b:
         c0:78:66:e8:b5:0a:61:22:91:eb:35:71:7b:89:79:57:81:ac:
         6c:8b:64:8a:4b:13:42:11:39:1b:b6:b7:d7:36:52:14:5b:31:
         71:5d:55:04:59:07:eb:9f:08:c6:19:1d:9d:d5:6b:45:12:e2:
         f1:40:f6:7c:7d:d8:5e:5e:a6:74:d6:19:6a:0d:98:cb:24:99:
         44:c9:b9:04:15:8f:e5:3c:b4:ed:59:d7:90:62:9a:94:b8:a4:
         e7:4b:9d:8d:d3:16:e5:9c:52:32:1d:12:e2:a4:22:84:df:ea:
         a3:80:54:5c:79:b7:53:10:0e:e9:c3:6c:16:c3:eb:5b:9d:1d:
         28:16:73:3b:7a:aa:8b:37:68:5f:f4:06:51:d8:05:0f:7a:c9:
         97:ee:9f:57:6f:4e:b3:29:54:26:e6:ad:a4:a7:f6:b6:9b:91:
         c6:c2:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----