Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          DqZ8NeA0bIawii32M/3oLCsJHElPQtXJ2vDd/RDZCfQ=
Subject key identifier:   6C:F6:8A:86:4B:7C:E3:A3:30:47:55:5E:08:74:7C:B4:1C:75:C5:18
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       019D2A3C24F92D5040A05D3068B700FBB113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          1015
Signing time:             Thu 26 Mar 2026 13:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:17 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: LHWcC6n4zAO7vySKnhzwEXRHV+StjvQ8ZLtMufZk7Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:24:f9:2d:50:40:a0:5d:30:68:b7:00:fb:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Mar 26 13:01:17 2026 GMT
            Not After : Mar 27 13:01:17 2026 GMT
        Subject: CN=6cf68a864b7ce3a33047555e08747cb41c75c518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:03:d2:f6:80:eb:04:a5:33:de:06:a3:5c:
                    ce:b8:4c:75:23:41:fb:1c:92:b4:0e:9d:6c:8b:d4:
                    b2:f5:ec:73:bb:b7:b9:aa:1e:b5:92:42:60:b1:b6:
                    75:fe:4d:95:c7:b4:85:cd:55:90:a5:1c:6b:c2:bd:
                    09:46:89:62:29:70:a8:c9:bb:64:7f:e0:be:9d:a8:
                    31:4d:d7:67:fe:60:e3:db:23:0d:ee:2d:7d:0d:a5:
                    d3:10:6e:a4:70:43:7e:41:ef:49:c1:e1:3a:9d:d9:
                    e8:59:86:78:83:50:ba:f4:d7:70:69:fa:b2:30:1a:
                    54:f7:b1:ca:a2:d8:9c:94:f3:45:b2:a0:b8:c8:e6:
                    b5:b8:7e:34:50:aa:1b:02:ef:08:1b:a2:5c:2e:c2:
                    a8:d2:9a:4d:d4:d4:6d:f2:83:07:ae:4d:0b:79:78:
                    a9:a7:28:59:49:44:4e:ac:ec:c9:97:0a:ea:d0:6c:
                    a3:ae:60:5c:ef:44:50:52:a0:d8:63:26:1e:64:e6:
                    c1:9e:ed:fd:e0:49:2c:8e:0a:21:a3:86:05:94:78:
                    40:69:31:99:fe:af:fe:54:91:ec:fb:2c:d9:1e:9f:
                    a3:c5:8f:14:09:b8:e1:35:4c:15:c0:4c:0e:a5:81:
                    db:40:35:92:2e:72:37:dc:9a:d8:07:67:80:c0:46:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:8A:86:4B:7C:E3:A3:30:47:55:5E:08:74:7C:B4:1C:75:C5:18
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:c2:0a:5c:83:b8:58:f0:9e:20:3f:eb:42:6a:ad:fe:75:
         89:21:3b:fb:33:c0:44:8f:e6:39:5a:84:fb:42:5a:a4:17:12:
         8a:5e:14:12:e2:04:cc:0b:ba:b9:f3:75:8d:9d:fe:44:fc:7e:
         04:c4:30:05:21:57:2a:68:74:df:c8:8d:da:b0:71:85:ea:7f:
         f3:58:3b:ce:cf:88:e7:a1:42:e2:f8:84:3a:0f:47:b9:22:5b:
         70:c5:2e:48:b5:d3:73:c6:24:77:e0:1a:c2:78:c5:ba:3d:c4:
         e9:3c:d7:d6:0b:df:5a:01:8f:72:6c:67:d1:ad:d0:b5:b3:5b:
         1e:86:c1:70:a4:68:ae:28:8c:2b:42:76:a0:3a:68:60:87:21:
         34:99:a8:95:57:f8:6d:31:7b:83:37:67:9f:8f:25:76:2a:b9:
         19:73:f0:dd:8d:ae:41:14:1c:ba:b4:33:e1:76:1d:db:b1:ad:
         0c:c1:06:2a:60:12:16:f5:79:19:bc:55:ab:e6:df:4e:d1:8d:
         7d:8c:2c:00:9d:5e:45:8c:48:6f:3e:fc:7f:c4:f5:5e:1a:e4:
         2d:94:d3:6e:0d:3e:d8:c8:4b:3a:0d:e9:98:5d:fa:d0:6b:88:
         fc:5f:bc:a0:0f:27:b1:f6:74:be:d7:b9:e1:b4:72:63:af:a1:
         db:a6:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:40 2026 by rpki-client