Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File:                     1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier:          +FyeyUSfZRKf1L8WgL9BmQmQWcsrvDV7JjXFZUzSp4w=
Subject key identifier:   B7:FB:55:F8:CD:FE:37:3D:05:DC:0D:A4:81:07:0C:F0:FF:85:07:1A
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer:       /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial:       019D25F130EE7E4E12433446DB4216274D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number:          059A
Signing time:             Wed 25 Mar 2026 17:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:56 +0000
Files and hashes:         1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: qrF6VtCt/YvS9HMrS7k/d/LyyJ/VHbhggAb85LnMnFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:30:ee:7e:4e:12:43:34:46:db:42:16:27:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
        Validity
            Not Before: Mar 25 17:00:56 2026 GMT
            Not After : Mar 26 17:00:56 2026 GMT
        Subject: CN=b7fb55f8cdfe373d05dc0da481070cf0ff85071a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:c4:bd:5d:7b:30:c5:a4:69:e3:19:4f:34:
                    f7:8a:49:b0:93:81:e1:20:c3:2b:78:df:7e:01:70:
                    4c:36:a2:e1:c0:fa:8d:37:03:08:c0:3a:c7:67:5a:
                    a9:34:91:05:1b:2d:e0:fd:1b:f7:84:06:51:90:0a:
                    9c:e5:23:df:a7:ee:39:f6:2c:b4:fe:5a:e9:ee:82:
                    68:a5:85:1a:a4:95:7f:e2:c6:05:12:6f:e1:31:d4:
                    aa:f9:4e:20:15:56:60:98:da:19:28:7e:d9:95:93:
                    84:6d:93:74:2e:b1:b8:cb:07:98:be:b7:c6:85:50:
                    e8:14:26:73:9f:9c:93:36:e1:41:93:5a:74:87:b2:
                    b4:1b:b7:84:04:27:67:37:ab:6d:76:db:75:bc:84:
                    43:9f:d4:f9:a1:4f:d7:39:32:47:21:b0:eb:b5:ad:
                    07:2d:e7:14:3e:55:8a:7c:f3:ac:00:29:cd:68:4d:
                    dc:f7:ec:47:8b:cc:26:fa:52:b1:85:ae:29:29:17:
                    dd:e3:fd:a5:a6:ee:e8:b8:f5:f3:d6:3c:6e:d4:dc:
                    82:6d:5b:b0:ab:30:8d:91:9e:86:23:17:45:9b:14:
                    9c:73:95:c5:ef:dd:fa:37:ae:c1:8b:9e:e5:50:4b:
                    a8:13:c1:72:c6:12:9a:17:cf:18:55:d0:a0:43:58:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:55:F8:CD:FE:37:3D:05:DC:0D:A4:81:07:0C:F0:FF:85:07:1A
            X509v3 Authority Key Identifier:
                keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:14:43:50:af:03:79:c0:a2:f9:3d:9a:9b:a8:d3:0e:bf:d1:
         7c:58:f2:c9:50:00:14:0f:ce:7d:eb:3a:5e:41:4f:a5:35:8b:
         de:c0:ab:c6:5e:8e:a6:e1:0e:43:0b:4e:ba:79:58:ac:75:a6:
         7c:71:5b:65:04:33:f3:9e:b0:d3:ec:53:1f:ac:4d:06:40:db:
         42:32:7c:63:ce:83:17:a4:e6:b8:dc:31:31:d9:9e:c4:b4:b1:
         32:90:1d:91:d0:90:d9:7e:3d:89:00:d3:af:0d:9c:58:a6:ba:
         81:7f:8e:24:ff:0d:92:c8:38:68:63:6f:16:34:68:22:82:00:
         3e:8d:6e:40:dd:5a:cc:0a:52:8a:56:30:ea:36:2a:2d:6a:3c:
         30:e2:59:05:f0:5e:97:62:c1:bc:6b:18:84:df:ae:e7:3d:d5:
         5e:7a:04:46:33:7f:e1:e3:d4:b7:46:f8:f6:c9:5e:ca:e8:79:
         bf:38:42:15:96:73:a7:81:a8:10:43:7b:f5:08:db:f0:62:b9:
         1e:64:4b:5b:1e:52:d6:fd:fb:32:10:b7:54:7d:57:54:a8:ca:
         68:c4:97:01:0b:50:3c:90:4a:37:d1:ee:03:8c:f5:fd:6f:5b:
         21:4f:f7:a8:6d:f0:9a:5b:cd:01:4b:13:c9:0c:20:20:77:90:
         38:50:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----