Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          KHUoXQwiKx0Sezyj9ZDlJPW3WGN3Hbh7Ns9Au+93sJw=
Subject key identifier:   F6:0B:42:18:73:15:61:56:39:61:61:AF:58:05:43:0E:D8:BA:08:A6
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       019D28F2E2E6012F7B1B73276FE7CC61CB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0D4C
Signing time:             Thu 26 Mar 2026 07:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:39 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: UNkl3mF21dwiSnizr9X4Yllgt3cQkNiS/sh9zhUt0uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:e2:e6:01:2f:7b:1b:73:27:6f:e7:cc:61:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Mar 26 07:01:39 2026 GMT
            Not After : Mar 27 07:01:39 2026 GMT
        Subject: CN=f60b421873156156396161af5805430ed8ba08a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:2e:86:54:da:52:47:36:2b:de:a5:6a:77:
                    f8:0d:56:9f:db:3c:be:82:b6:5d:dd:e0:a0:f4:86:
                    1c:95:bf:4a:7e:f3:41:84:76:dc:56:23:c1:c1:55:
                    f4:86:d5:7f:09:b4:d2:7f:87:90:fe:73:87:2f:36:
                    5d:7c:1d:9a:6e:d2:83:19:d9:81:6a:14:59:cc:28:
                    fd:9d:7e:4f:96:49:6e:17:ce:5e:b1:c4:72:f4:38:
                    77:78:4e:70:b8:c4:a9:6c:e4:46:0b:8e:33:4a:c1:
                    83:bb:64:1f:ae:b6:69:0b:b9:36:ac:aa:62:48:66:
                    37:6a:aa:95:e2:b1:f7:10:5c:9c:c2:38:5b:7d:34:
                    5c:47:73:f9:1f:0b:d5:f2:66:48:65:79:3a:4c:45:
                    e9:e7:ed:e6:7f:dd:70:2a:c4:67:ce:c9:60:3e:97:
                    35:e9:23:15:21:a3:85:58:b8:a5:3e:9a:8b:ce:d9:
                    cb:f8:99:46:7d:1f:c2:bb:08:63:28:ae:ab:11:d9:
                    9b:28:d8:5f:0a:6a:51:d7:c9:e3:d2:b9:94:08:48:
                    ee:97:5f:ec:29:fc:e3:f3:5a:9e:c4:fb:3f:17:2c:
                    b7:f4:cc:01:0c:af:d5:8f:ab:71:bb:c9:c9:bd:94:
                    80:8d:72:10:76:e7:20:c0:2d:cf:37:e4:d1:e3:fd:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0B:42:18:73:15:61:56:39:61:61:AF:58:05:43:0E:D8:BA:08:A6
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:dc:39:bc:53:92:be:73:3b:7f:10:d5:f0:1b:03:b1:5f:
         79:e1:21:20:22:64:eb:ca:07:c9:ec:f1:ee:57:8c:d7:b9:a4:
         84:9d:8d:b1:ba:51:7c:16:41:66:4b:16:cf:d5:d7:c3:6b:c1:
         fc:89:36:c1:2b:ff:da:38:0c:94:f6:f1:c1:75:2c:2e:4e:50:
         9f:da:e5:ec:3c:10:26:34:3d:61:70:44:e5:67:38:fe:be:9b:
         e0:a3:85:a2:e0:c6:6b:82:43:9b:e7:cb:6e:9e:1b:96:fb:85:
         18:50:d5:10:35:49:78:11:79:f0:c0:db:f5:3b:d1:32:34:a8:
         93:8f:ad:7b:0e:44:e3:ba:2c:56:ec:6f:42:dd:20:a9:8e:1f:
         38:01:eb:46:63:09:7d:76:5b:19:8e:18:cb:31:9f:f1:e2:35:
         69:07:c9:e5:b5:72:49:04:50:bd:48:03:7c:b5:70:78:ba:93:
         5a:fb:60:ec:09:b5:fd:9e:c1:9f:43:9b:71:87:78:96:4c:ca:
         0c:22:b6:79:ad:38:c9:e5:b7:e7:9f:2e:64:cc:70:a6:24:08:
         b0:c7:b5:99:7b:4a:ec:c6:2e:00:52:5b:a8:61:0f:cf:b7:1f:
         f0:65:31:a1:59:9f:8e:75:e3:01:b5:a8:22:48:60:8f:02:f2:
         20:27:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:26 2026 by rpki-client