Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File:                     RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier:          6BPN/132q5M7Ce3dmLPjo7Qq9HXTXm/b9G3Df3yTlC0=
Subject key identifier:   64:B4:8A:6D:74:40:94:FE:2C:34:3B:03:F7:F6:6D:36:A7:F1:9E:D8
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer:       /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial:       019D27DF51EE7A75C62F6677A02D9638D102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number:          09CD
Signing time:             Thu 26 Mar 2026 02:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:40 +0000
Files and hashes:         1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: fMMj5KjVlUmFpx9OoKFoJuHvC47asAVPbswDlV4PEP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:51:ee:7a:75:c6:2f:66:77:a0:2d:96:38:d1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
        Validity
            Not Before: Mar 26 02:00:40 2026 GMT
            Not After : Mar 27 02:00:40 2026 GMT
        Subject: CN=64b48a6d744094fe2c343b03f7f66d36a7f19ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:1d:99:64:fa:dc:ad:aa:6e:d3:86:80:6d:
                    67:45:cb:76:5e:45:7b:bc:7a:20:b4:4c:ce:19:66:
                    68:f0:c8:d8:15:0c:e4:f6:63:8e:10:51:5b:62:39:
                    3e:80:07:2d:bf:de:2e:eb:96:53:84:7f:42:0a:df:
                    17:1a:73:b3:8d:2c:d6:1b:9e:e4:7d:30:fd:b2:31:
                    35:64:c7:b9:69:df:30:f5:2d:73:6a:51:87:fc:92:
                    4d:68:04:4e:e8:82:d8:91:c5:ba:ec:3a:89:e2:61:
                    4b:84:3e:89:dc:18:b1:7b:c5:49:da:8c:89:9b:f1:
                    d3:5e:8f:eb:09:13:5d:a7:a7:9e:7c:c0:ad:76:f3:
                    62:4e:67:55:e9:d7:25:27:1b:38:e2:35:14:c9:f4:
                    3e:ce:89:e5:f1:c8:4a:a9:04:ed:8d:66:09:25:0a:
                    02:90:c6:25:f9:05:19:37:95:a5:54:0c:0f:97:12:
                    f1:f4:4d:73:7a:25:7a:c5:10:bf:d8:89:a7:fa:df:
                    1f:43:f8:68:42:da:cb:dc:89:e5:a0:99:9e:e6:2e:
                    8f:6e:ca:58:ed:82:59:64:fe:75:1d:8f:db:a8:37:
                    30:49:c6:d3:e7:af:30:1c:0d:ae:5f:56:23:8f:13:
                    5e:36:eb:f8:37:ac:12:99:51:21:9a:5c:53:cf:ff:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:8A:6D:74:40:94:FE:2C:34:3B:03:F7:F6:6D:36:A7:F1:9E:D8
            X509v3 Authority Key Identifier:
                keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:95:f4:3d:fd:70:a6:0c:27:60:fc:f0:00:f8:5a:88:fb:67:
         4e:ca:cf:0c:86:e5:4b:11:d4:b6:63:4d:ec:0e:e1:da:1f:07:
         e4:18:ed:e1:14:20:a7:95:de:e1:12:33:c3:06:41:d4:90:fb:
         d3:ce:3f:dc:c7:f8:c8:ad:83:03:f4:19:88:0f:d3:a7:a1:5a:
         d4:64:b6:92:0e:85:42:a3:60:12:b8:4e:48:11:61:a1:ae:73:
         c0:58:02:98:f4:ea:63:d2:a6:16:2b:fc:59:65:2e:12:8a:ad:
         d1:da:75:66:22:55:b8:01:25:50:ac:b1:c9:0c:ec:56:22:34:
         af:de:44:aa:02:f7:0c:53:70:61:eb:3f:9c:b7:5f:dc:a3:14:
         49:98:1c:87:84:c1:59:d0:cd:04:47:5a:4a:11:ea:5b:b4:12:
         c8:5c:de:67:9e:5a:65:d5:ce:ca:18:4a:a4:1f:e0:fd:cc:af:
         bb:3c:0b:1e:ff:5b:56:b8:dc:67:31:ab:26:42:85:49:c8:81:
         a6:fe:ec:e1:af:8a:f4:eb:c4:96:64:5c:3d:c8:34:df:68:a1:
         1d:52:c2:69:a0:76:93:ab:c9:12:3d:b0:c0:58:3d:1e:b1:a6:
         e8:5b:3a:f1:2e:04:a2:fc:bf:66:08:6b:a5:c1:23:a6:7a:7a:
         aa:76:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----