Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File:                     P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier:          KmVUSt2rbeCf0RXNyn7nriwHLjBd4OUiV8Or9qW/Ojc=
Subject key identifier:   09:9A:A3:0D:20:37:9F:5A:6C:5F:B2:6C:A5:D3:8D:55:D6:B1:18:62
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer:       /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial:       019D284D84A78C90F6B7C89766F054F93FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number:          1405
Signing time:             Thu 26 Mar 2026 04:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:01 +0000
Files and hashes:         1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: scw8T7R7GPYYeFw/Z22Rykz/s+8NyTNLD2qgYkFnXtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:84:a7:8c:90:f6:b7:c8:97:66:f0:54:f9:3f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
        Validity
            Not Before: Mar 26 04:01:01 2026 GMT
            Not After : Mar 27 04:01:01 2026 GMT
        Subject: CN=099aa30d20379f5a6c5fb26ca5d38d55d6b11862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:ed:f4:f9:de:49:f9:f2:d3:c6:f8:d2:19:
                    3f:b2:87:00:97:58:1a:3b:17:62:3e:cd:ca:9c:c9:
                    d9:fe:ee:e8:eb:88:ec:97:00:e2:94:ab:3f:49:01:
                    12:87:9f:d0:95:20:90:70:aa:15:7f:b3:f4:26:23:
                    3e:0d:e3:2c:b9:9d:a5:3f:6c:b5:dc:5d:e9:ce:98:
                    ad:51:f4:22:57:7b:e6:1f:9e:c3:b9:fe:a8:50:b7:
                    b3:f8:e1:75:22:b2:5a:31:01:f7:b4:a8:f7:ba:19:
                    0c:d7:17:02:9a:ba:51:b9:96:ee:68:06:c8:15:11:
                    2d:5d:78:00:66:6a:2e:c5:67:40:4a:4b:a7:53:8c:
                    c8:2e:c1:f9:10:ee:35:bc:a7:ca:e8:48:f5:3e:22:
                    42:00:73:8c:57:32:0c:ac:22:41:a2:b2:df:6f:e6:
                    73:24:ba:c0:05:0d:4e:80:ed:3d:03:c6:96:b4:d1:
                    9a:15:0d:6d:3f:1f:89:a9:51:89:ca:5f:f6:49:30:
                    52:d7:8e:41:65:fa:af:37:67:3b:9e:59:45:52:eb:
                    3c:10:b5:e3:df:d8:d8:fa:43:d7:59:f7:83:e7:9e:
                    ec:83:24:8c:1d:c4:ef:0d:c0:25:c0:51:34:31:9e:
                    c6:b2:5e:26:52:0d:6f:18:fd:3f:10:23:ff:3d:48:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:A3:0D:20:37:9F:5A:6C:5F:B2:6C:A5:D3:8D:55:D6:B1:18:62
            X509v3 Authority Key Identifier:
                keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:08:c2:07:9d:66:3e:5e:1c:fb:b4:7f:35:97:59:c8:d7:0e:
         e7:25:93:ff:78:b6:a9:f7:b0:20:4f:f0:9d:25:bb:a9:04:c1:
         1e:a8:a6:cc:b4:27:85:87:98:5a:0a:5d:84:a7:3d:b5:df:51:
         77:f4:74:5c:b4:bd:db:3e:6e:ce:9b:b3:2f:a6:ac:19:0b:4a:
         9b:f5:e3:ab:17:c8:18:62:e3:0d:ba:b8:fd:39:43:fa:ec:f0:
         fd:a6:3e:e8:4b:1b:45:69:46:d5:56:52:01:d0:6f:f8:66:c7:
         dc:28:bd:98:0d:9b:ab:9b:3f:7b:3c:03:f6:d5:03:9e:20:02:
         42:77:68:27:63:fb:3a:f5:b8:a2:eb:74:17:09:61:68:1e:76:
         68:02:79:40:9e:e3:d6:13:9e:68:fb:b3:7f:10:cd:a6:3d:97:
         ba:ff:db:6d:19:a9:89:16:d8:65:24:82:a3:c4:b8:36:5e:fd:
         e9:32:d4:2e:40:50:a1:f8:07:76:20:29:8c:a2:2a:7f:d7:bc:
         06:13:21:f8:e4:d7:8c:c9:20:bf:5a:f4:0d:d7:ce:2b:c6:0c:
         ae:ed:06:f8:a0:0c:e9:91:31:c1:d7:a1:80:33:9a:a9:62:f6:
         43:e2:a8:cc:dc:5a:59:84:3f:13:82:13:fa:3d:ab:ea:1a:d8:
         0e:26:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----