Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File:                     e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier:          1Li0YJnldHYBgZ17P1bJ4w07iMeV17vcKoGf4g1dS4Y=
Subject key identifier:   C5:20:87:F9:A0:96:E4:90:69:48:84:8B:BD:FE:7F:5A:BA:FE:7F:CB
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer:       /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial:       019D2AE06A0DFD48BE4CD33F9E3CCBA465A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number:          0F58
Signing time:             Thu 26 Mar 2026 16:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:43 +0000
Files and hashes:         1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: 7xMZ8cZfI1mGwW4Nq2Zxob67MQ72DyrdkHNT0/tu6+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:6a:0d:fd:48:be:4c:d3:3f:9e:3c:cb:a4:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
        Validity
            Not Before: Mar 26 16:00:43 2026 GMT
            Not After : Mar 27 16:00:43 2026 GMT
        Subject: CN=c52087f9a096e4906948848bbdfe7f5abafe7fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:13:a0:7f:d7:dd:a8:90:d1:27:e1:98:28:
                    8a:4f:45:51:ff:9e:0e:62:9b:c7:b8:ae:fd:d9:df:
                    48:05:45:a1:16:db:d2:e4:72:37:58:58:87:11:cb:
                    0c:b6:2d:01:68:b0:00:ed:8c:ce:dd:64:25:ad:6b:
                    c2:fe:d3:84:e0:60:a2:f1:91:ba:34:a5:0a:b4:d5:
                    2a:9d:b6:2c:5a:41:0b:40:ec:e0:06:85:57:bb:ca:
                    04:0f:d2:47:3e:d8:d2:e9:3b:1e:1f:a4:6e:0a:92:
                    38:1f:e6:12:93:ec:fb:c9:76:b5:b0:c7:53:c8:bc:
                    db:a5:93:1d:70:c3:00:d5:fd:04:0d:48:74:ed:c5:
                    f8:3e:16:2d:24:41:37:b5:c5:76:ed:74:13:d0:26:
                    7f:87:31:34:89:b7:f1:55:13:a4:b8:a4:0d:80:aa:
                    98:65:6e:9e:ab:ac:5b:c3:b0:60:10:b5:53:89:90:
                    b1:cc:41:19:89:b9:ff:f9:1b:0f:16:fa:ab:0e:8f:
                    01:83:b1:4f:63:cf:d7:a3:b0:2f:10:3e:0c:f2:66:
                    6a:26:f8:7d:f2:be:98:18:76:bd:31:e8:1f:d1:ea:
                    69:5d:03:0c:6c:d6:c5:6d:f5:67:84:49:11:2b:b5:
                    1e:ca:dd:00:b7:9c:78:ea:c5:b2:c5:11:4f:c9:1a:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:20:87:F9:A0:96:E4:90:69:48:84:8B:BD:FE:7F:5A:BA:FE:7F:CB
            X509v3 Authority Key Identifier:
                keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:e6:6e:32:be:a1:5c:2f:0f:52:43:d3:07:e2:63:b9:f7:
         d2:66:87:c4:39:51:55:8a:05:9e:38:24:bb:d7:f4:dc:51:b3:
         d9:2e:47:12:5e:f1:44:ca:44:95:11:f7:d6:14:aa:0d:5e:f9:
         fb:0b:fe:1f:11:3c:ad:d0:cd:3a:eb:d6:4c:ac:2d:8a:c2:1a:
         e3:61:10:6c:77:35:1a:42:58:5b:48:2a:c9:a4:c5:5f:22:e5:
         c7:0b:f8:38:0d:fb:66:e1:39:c6:81:92:83:65:f4:ac:ce:ea:
         a1:be:eb:14:90:e2:5f:b3:96:29:db:11:85:0e:f7:b1:79:b0:
         e3:31:50:1a:52:4c:ae:70:0e:40:b0:d8:ea:13:0c:f7:d6:60:
         12:68:c9:dd:62:00:20:14:ca:3c:74:47:26:59:a2:d6:a5:79:
         33:17:47:fc:43:92:9b:12:9b:49:d7:f0:cf:09:1d:d1:71:ee:
         7a:b5:73:1b:1f:6d:cc:f8:86:df:24:a3:29:3c:ed:e4:77:94:
         53:de:02:f0:d3:94:fb:a7:e6:cb:fa:81:23:ef:32:93:a0:07:
         04:77:b6:a7:af:ae:61:9b:e1:74:f8:45:fe:37:b9:85:e7:77:
         db:a2:18:3a:90:2d:ce:72:80:f5:2b:62:d9:c0:5f:00:e4:f9:
         d5:67:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:05 2026 by rpki-client