Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          VonPj2XCREcoI2tETulyd6AACyGY7aCcI0QJVDmyCAI=
Subject key identifier:   70:FC:0A:A7:92:9B:C7:A3:01:39:7D:37:CA:67:43:5F:E8:EB:E2:88
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       019D27040A857B67892B9983FA731C981036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          09C2
Signing time:             Wed 25 Mar 2026 22:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:09 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: 2TyOB0i48SYI8nLzNSrVL97/R0lDCIxavTicl+yxGEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:0a:85:7b:67:89:2b:99:83:fa:73:1c:98:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Mar 25 22:01:09 2026 GMT
            Not After : Mar 26 22:01:09 2026 GMT
        Subject: CN=70fc0aa7929bc7a301397d37ca67435fe8ebe288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:73:b3:4a:9c:2b:c6:55:01:f3:6b:e7:8c:
                    a9:0b:6d:71:05:5a:49:03:0a:b8:c6:d1:eb:7e:fb:
                    83:e3:ff:8a:63:1c:7a:0b:9d:2e:36:9f:f0:89:3c:
                    19:64:59:b5:6a:43:5f:6f:7f:db:1d:4d:f3:72:bf:
                    ec:58:b9:8a:a2:31:45:c9:16:b1:25:fb:1e:8c:f5:
                    2b:f4:fe:ee:76:26:62:cc:83:c6:29:ea:33:8d:25:
                    58:74:78:64:39:cf:03:bb:0b:33:f9:ab:83:f2:10:
                    15:3c:65:b6:b2:bc:8d:b9:ca:06:72:54:75:90:67:
                    e2:a0:11:68:c8:42:bb:2f:45:70:1b:e9:21:82:e7:
                    41:d7:6c:b2:66:c4:e8:0f:db:79:0f:f1:8a:57:a2:
                    c2:d7:58:8d:00:d8:44:f9:40:ce:cb:24:4d:2b:48:
                    6e:5e:b8:61:df:c6:22:63:25:05:4f:17:c6:64:d1:
                    de:71:ab:53:3b:7f:aa:1e:e2:7a:dc:79:1e:14:9b:
                    f9:7c:1b:2b:49:0f:74:b1:74:dc:93:bd:a8:8f:8e:
                    64:1b:7d:a6:1a:e2:1c:23:16:12:0e:8a:3c:47:72:
                    a0:11:c1:df:a8:be:b8:d5:0d:e3:c1:0a:39:f8:c9:
                    19:f2:a5:49:c8:75:f8:7b:3a:aa:3f:23:ce:0d:d8:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:0A:A7:92:9B:C7:A3:01:39:7D:37:CA:67:43:5F:E8:EB:E2:88
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:d3:4a:06:be:cd:88:8d:3a:de:8c:0a:b3:9d:35:8c:94:
         93:b2:8d:7e:83:c6:38:91:ab:87:76:ed:2b:d6:da:12:a1:4f:
         2e:c5:a6:81:ca:e4:0a:95:96:c0:fc:59:6f:a5:d4:59:43:bc:
         17:8d:a8:23:c6:29:ad:49:2f:55:af:8d:0e:67:45:08:de:dd:
         a4:9d:4a:4f:7d:be:af:28:33:19:b8:19:c8:24:f4:1c:1d:56:
         b6:73:e7:db:74:4d:83:74:18:ad:65:a3:ab:03:6d:56:54:3f:
         3e:05:98:76:91:c5:3a:1f:82:84:ce:c1:94:c9:36:6a:af:84:
         3f:2e:43:8b:92:e9:b6:aa:69:ca:29:dd:8a:64:31:4f:32:8e:
         9c:f3:e6:48:87:2f:69:79:9d:c4:5b:96:34:a4:2c:5c:e9:67:
         b9:2b:2f:80:f9:c5:a6:63:61:bd:52:40:fa:a9:1a:3c:b8:0e:
         b6:0c:f0:90:3a:76:ab:b4:e7:ad:d9:44:35:62:14:e8:63:d4:
         b9:eb:a2:c5:2f:c4:83:61:f8:df:e6:0d:37:25:3b:5d:fd:05:
         b1:21:12:f3:d4:6e:d3:07:1d:ae:8f:3e:0e:53:92:0d:da:55:
         5f:dc:35:38:10:08:2f:a5:d8:c9:9d:66:27:87:cf:29:ab:4a:
         e2:a1:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----