Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          J6nIuQ7FpgXsnboolVHqSO8XVSONbljgKzsR7bZt1W8=
Subject key identifier:   E8:A3:D4:88:7D:13:FF:B1:52:37:61:55:4E:C7:47:B8:73:7C:FC:DD
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       019D265FAC2CB71E3E4E4CD7324B8FDB5E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          0B3F
Signing time:             Wed 25 Mar 2026 19:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:37 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: WjaEKbNpBvrfZf6zkhQn41YiSxnaUB6ugk094z+9Ego=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ac:2c:b7:1e:3e:4e:4c:d7:32:4b:8f:db:5e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: Mar 25 19:01:37 2026 GMT
            Not After : Mar 26 19:01:37 2026 GMT
        Subject: CN=e8a3d4887d13ffb1523761554ec747b8737cfcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:01:dc:20:a0:14:fd:51:69:e0:3d:db:50:
                    7d:fc:21:5d:05:ad:72:2f:13:86:e0:52:2d:9f:d8:
                    7e:d3:14:04:89:b6:51:1d:f8:c5:d1:ab:cb:85:70:
                    e0:8b:43:e4:fe:79:b5:1f:0c:38:be:4f:77:1f:b2:
                    a2:d5:56:47:35:5f:7d:9d:3d:87:f0:b9:d5:d6:7e:
                    85:84:31:e7:e5:99:46:38:aa:90:cc:03:81:66:a3:
                    fa:77:aa:c6:53:27:db:12:20:0f:0f:1d:e1:cc:78:
                    52:96:4e:de:f3:d4:87:4a:df:12:55:2b:2d:6c:2e:
                    52:56:81:66:fb:46:d3:94:89:a9:f2:e4:35:88:a9:
                    bd:f1:a3:0a:2f:68:ab:a9:92:fc:af:98:33:4d:da:
                    78:54:65:ef:a4:a9:0d:d2:70:ac:36:3a:48:ee:ad:
                    cf:e6:7c:ac:cc:a1:42:5f:fa:69:f5:ff:7e:c1:80:
                    3d:bd:e7:bc:b9:59:35:a2:18:bc:15:8f:d2:6d:39:
                    a1:d4:a6:1f:a5:90:f1:c6:ac:af:cf:a4:76:94:9e:
                    ae:14:12:ed:03:80:ec:d3:e8:52:13:0d:14:58:c4:
                    3e:4b:6d:d6:3e:a3:e7:82:6f:0b:d0:93:2b:44:00:
                    e9:ef:e2:18:c7:f7:82:ed:25:24:0e:10:94:c4:90:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:D4:88:7D:13:FF:B1:52:37:61:55:4E:C7:47:B8:73:7C:FC:DD
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:26:3b:f2:65:ed:87:e9:0d:a5:21:29:0d:e0:52:cb:fc:a0:
         b5:7a:aa:cc:3a:34:c6:77:4a:f7:79:d6:48:12:bc:d5:21:40:
         27:39:cb:53:72:18:8b:f0:c2:85:3e:57:7e:d5:f9:34:9b:95:
         58:3b:64:4a:2f:71:e6:d8:9b:30:a8:04:db:91:47:e5:66:8f:
         e7:aa:61:13:79:6d:41:c4:55:be:b7:fa:2d:b8:70:e8:b2:cd:
         21:cb:70:e5:dc:5c:bf:2e:08:10:61:14:6b:4e:de:e8:af:5e:
         2f:15:42:fe:a5:9a:2f:ee:b9:29:0c:69:f5:f3:49:d2:91:4a:
         21:cb:65:0d:02:98:d9:e9:be:f1:69:5e:fb:43:8a:e2:e4:a4:
         d5:c5:fe:b6:83:9a:d3:37:c7:78:c7:d8:90:cd:d3:40:64:f7:
         40:e3:90:d5:a3:9d:b0:24:01:fe:b5:21:4a:cb:7c:99:39:f0:
         8f:33:8a:9d:a2:df:b5:e8:4a:8f:ef:d1:cb:7d:b0:eb:65:05:
         79:ef:b9:96:62:44:f8:65:3c:fc:b1:55:26:64:c3:79:52:f0:
         36:7d:72:43:bc:ce:60:42:4f:92:9a:0a:4e:8c:5c:79:b8:5a:
         d4:1d:fb:ba:c8:b9:84:72:fd:41:ff:14:d6:74:2b:91:05:c9:
         33:f4:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:48 2026 by rpki-client