Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File:                     9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier:          MNv/P87snONofmtMykveq5hcH1AXBxmo8PB2/ukwaSo=
Subject key identifier:   02:80:85:D4:19:7C:3E:45:4D:83:9B:B0:FA:D7:84:2C:9D:D0:9E:01
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer:       /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial:       019D27723FC0B92ED76E7B9A7C214CFF8364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number:          15F3
Signing time:             Thu 26 Mar 2026 00:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:31 +0000
Files and hashes:         1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: SduNRsV5JanKi1w91F29zaDrvXneDas9j7jY6B8Oi54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:3f:c0:b9:2e:d7:6e:7b:9a:7c:21:4c:ff:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
        Validity
            Not Before: Mar 26 00:01:31 2026 GMT
            Not After : Mar 27 00:01:31 2026 GMT
        Subject: CN=028085d4197c3e454d839bb0fad7842c9dd09e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:d9:ca:eb:b0:b2:e3:55:d1:0e:7c:9a:f3:
                    a8:0d:9f:28:12:f5:30:0e:81:5f:48:51:73:03:cd:
                    62:62:9c:94:c5:e4:2d:9c:40:e0:6a:64:63:ec:98:
                    b3:f8:37:c3:2d:6d:87:84:b0:f5:0d:5f:85:0c:75:
                    d9:24:75:d7:ba:58:0e:76:91:4d:d4:6a:70:0d:1e:
                    5d:f7:0e:7c:68:f0:22:94:11:52:5e:78:f3:b7:4f:
                    8b:be:07:2f:e7:ea:f1:96:aa:49:e6:0f:cf:11:fd:
                    ab:40:80:21:30:e9:c6:43:2d:b8:13:b3:86:c7:08:
                    a3:b3:8b:66:67:9c:5f:90:46:7f:46:1c:41:56:e7:
                    56:37:a1:6b:fc:81:fd:24:bf:27:57:d0:41:fa:4e:
                    2c:a1:10:c8:a9:48:1f:1d:8f:79:75:4f:17:49:a0:
                    08:3b:73:a2:d0:82:b3:ff:db:de:3f:47:a3:cd:db:
                    33:6a:9f:58:18:d8:a8:b9:da:08:44:53:af:4d:2b:
                    3d:bb:d1:0d:83:ef:9b:72:0c:ba:78:2d:10:f1:c4:
                    83:2f:ae:66:03:f2:c9:ee:8f:eb:bb:13:05:c5:85:
                    06:be:fa:c2:64:8b:de:47:47:69:f0:a0:82:d1:c9:
                    b8:93:b6:fd:f1:09:b3:ba:0b:85:dc:2c:57:f7:3e:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:85:D4:19:7C:3E:45:4D:83:9B:B0:FA:D7:84:2C:9D:D0:9E:01
            X509v3 Authority Key Identifier:
                keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:5d:ae:f9:d1:5b:c2:79:ee:d5:97:3e:7f:77:68:53:4f:
         66:a1:a3:cb:e7:3b:92:5a:86:02:17:26:6b:17:66:cc:71:af:
         e0:8b:74:dd:60:48:89:c5:79:38:97:10:c8:e1:c5:b2:f2:bf:
         74:b8:e8:37:4e:86:c4:e2:40:9b:8e:a3:70:ba:70:ab:fb:70:
         27:9f:e2:23:69:33:a6:70:08:34:2c:ac:fd:1a:bc:61:c8:46:
         1d:d4:5b:07:e9:5e:a9:2e:f0:7a:02:34:67:12:67:d1:87:7d:
         36:fc:d6:a4:67:c6:a8:1b:c5:ef:ed:27:33:07:e5:09:88:7c:
         7f:37:32:8b:d4:34:be:91:ed:23:77:59:a3:07:b4:e5:82:80:
         ed:49:f8:32:17:3f:ae:d1:48:90:3a:a6:d1:60:a5:db:8e:97:
         f1:c1:07:76:ce:fb:77:08:3c:f2:71:87:57:c5:72:9d:55:15:
         6f:0c:35:e8:80:f2:ad:51:3f:d6:66:a6:a9:ee:55:2b:61:5c:
         52:a3:7c:ea:43:e3:46:c6:33:db:3f:c9:f4:a4:04:f3:a0:8a:
         e3:5a:41:16:2f:e4:22:6a:42:fa:56:a3:50:15:81:78:0d:b8:
         d2:ce:8b:5e:61:0f:48:45:ff:59:b6:b0:29:58:20:0f:75:b4:
         60:78:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:23 2026 by rpki-client