Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File:                     d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier:          qeE6jl3h6MTgCEEf03BkLRi9RYUzVg5gylGp5hhEuPs=
Subject key identifier:   92:51:BB:CB:A8:58:42:F6:2C:5A:D8:40:DF:EA:82:A1:81:76:0B:C9
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer:       /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial:       019D27DF9E30C12163374E9F0F75DA85137F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number:          0660
Signing time:             Thu 26 Mar 2026 02:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:59 +0000
Files and hashes:         1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: sRWXpLdPer/VHy6NKQ/0agY3l4FvcH58rJMFL0jDxz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:9e:30:c1:21:63:37:4e:9f:0f:75:da:85:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
        Validity
            Not Before: Mar 26 02:00:59 2026 GMT
            Not After : Mar 27 02:00:59 2026 GMT
        Subject: CN=9251bbcba85842f62c5ad840dfea82a181760bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:39:75:57:e8:72:0b:e5:b7:e9:6c:c1:7e:
                    f3:45:3f:bb:ef:b0:3a:13:18:04:ae:d5:22:e9:b5:
                    36:5a:05:c3:bf:65:f4:55:3d:38:fd:78:0f:14:76:
                    1b:26:71:6b:17:a2:e4:07:8c:7c:49:e6:29:88:d6:
                    7f:99:fa:b7:62:da:65:9a:65:f4:4c:09:a7:0b:26:
                    d8:89:75:39:5b:f7:3d:ea:29:37:f9:ac:25:47:3b:
                    5a:99:d1:6d:76:02:1e:02:da:17:14:a2:fa:69:6a:
                    6d:5a:c6:c5:af:da:8a:04:77:ac:6a:a1:23:b3:1b:
                    0e:50:b8:3c:f4:03:8a:ea:e2:3e:d5:81:bb:98:4c:
                    98:69:bb:73:e8:6c:07:cf:70:a2:47:58:a2:f8:22:
                    42:89:42:e5:b4:19:2d:20:7f:1c:70:84:59:28:03:
                    da:0c:33:60:53:37:c8:c3:9d:8a:3a:dc:93:b3:0a:
                    a4:68:3e:1e:2e:72:7f:63:e2:f5:4b:4f:44:0f:cf:
                    1c:65:6f:76:5e:a4:59:9a:76:8c:4c:8e:d1:88:64:
                    59:8b:37:bd:63:64:6d:51:35:05:00:e4:ad:0f:ae:
                    9f:37:49:c8:48:f0:2f:2d:bf:a8:00:e7:ae:ca:20:
                    ad:21:0f:bc:f3:87:6b:d6:8b:c8:ad:17:78:4b:22:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:BB:CB:A8:58:42:F6:2C:5A:D8:40:DF:EA:82:A1:81:76:0B:C9
            X509v3 Authority Key Identifier:
                keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:e6:9c:37:8c:d7:c6:dd:da:72:8a:54:c5:e1:93:38:f0:
         e2:b3:8c:98:d8:bd:31:07:16:95:27:cd:04:ca:c7:3c:81:a7:
         86:2c:27:83:98:1f:7f:20:63:eb:72:38:e8:28:4f:52:42:ee:
         0d:5d:52:75:2d:d6:96:6e:68:ef:b9:a7:1e:42:02:ac:07:0a:
         55:04:ac:f2:d1:76:0b:50:22:d4:a1:83:e2:76:01:6d:01:8c:
         ac:4e:3f:e5:23:55:c8:09:dd:c7:dc:dc:05:95:14:97:a5:d0:
         f9:6c:c3:e1:22:cc:9e:a5:50:c0:0b:84:95:1f:81:a8:ba:61:
         7f:c7:c2:bd:64:22:42:b5:0f:55:64:e6:e3:b3:32:f0:36:ea:
         e5:3a:84:ec:c5:16:8a:87:5d:b1:c8:61:bf:c2:e2:29:f5:25:
         90:fe:07:8b:1a:57:e8:28:8c:c1:b5:5e:f7:ab:f8:75:05:b8:
         5d:4e:91:bf:fd:a4:d2:a5:92:5d:47:ca:86:f9:e5:5a:0c:67:
         12:23:37:07:f0:96:bf:c0:04:a2:c7:2d:b8:1c:0e:dd:55:e4:
         c9:2c:0f:b8:56:73:eb:fb:50:e4:22:56:f7:f8:b5:f8:f1:df:
         31:d6:9e:7a:9a:be:e2:88:a3:5c:a9:b0:ab:0e:bd:70:3e:a5:
         5e:19:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:32 2026 by rpki-client