Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
File:                     PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft (raw, json)
Hash identifier:          QXwohW/zKGptSp7HaC5BUjw3dbx30CRikJYestExb4U=
Subject key identifier:   12:71:E8:6A:B6:D6:94:24:31:8A:D7:9C:47:80:13:58:DB:AE:14:1A
Authority key identifier: 3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1
Certificate issuer:       /CN=3de2dbb5c1b4d31675bc9da14bfcdb100a601ed1
Certificate serial:       019D284D422C64D0AD4880E51EA804A25546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
Manifest number:          66
Signing time:             Thu 26 Mar 2026 04:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:44 +0000
Files and hashes:         1: PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl (hash: 41/CS8tDmX1IViYGxppr4fLonMqLNCRV1niHHoz5eWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:42:2c:64:d0:ad:48:80:e5:1e:a8:04:a2:55:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2dbb5c1b4d31675bc9da14bfcdb100a601ed1
        Validity
            Not Before: Mar 26 04:00:44 2026 GMT
            Not After : Mar 27 04:00:44 2026 GMT
        Subject: CN=1271e86ab6d69424318ad79c47801358dbae141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:a5:50:e6:ac:96:fa:47:1a:18:fe:89:44:
                    75:95:7c:46:37:85:00:b0:6c:21:be:4e:e8:7c:91:
                    22:31:fd:76:ce:ae:18:c3:ed:32:a0:a4:a0:e6:b3:
                    9f:b1:e9:c4:ad:03:9e:13:ae:14:be:57:a8:17:d8:
                    11:66:d9:09:3b:7b:cd:36:e4:f9:93:10:6b:2d:a1:
                    4c:67:0c:92:16:66:0d:e4:98:90:d2:d5:8e:98:ba:
                    07:66:16:a9:df:89:aa:c8:da:09:75:92:ad:3a:99:
                    42:97:29:96:57:00:09:de:c3:e7:57:48:d7:14:00:
                    61:57:04:77:69:dc:27:a4:3f:9d:ad:49:a6:7a:27:
                    9b:6b:a3:ed:52:86:47:24:33:43:db:bd:5a:14:03:
                    97:50:e2:96:03:2f:36:3b:8d:7c:e4:2b:3e:ce:f4:
                    20:4a:0b:ac:0b:46:10:e2:b9:42:b9:3c:96:f7:b9:
                    68:45:8e:0d:99:94:e6:eb:00:35:ec:d3:e4:a3:b6:
                    b3:95:72:5f:11:87:77:3b:b5:2b:db:23:90:19:0c:
                    18:56:6b:73:23:40:5d:52:d3:9b:c7:97:bd:d0:65:
                    8b:5a:a6:14:48:a8:9d:91:06:b6:39:f8:49:65:93:
                    3c:87:d1:c4:4b:1a:aa:c9:9d:d8:25:03:c5:ab:3b:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:E8:6A:B6:D6:94:24:31:8A:D7:9C:47:80:13:58:DB:AE:14:1A
            X509v3 Authority Key Identifier:
                keyid:3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:f7:9e:ac:34:c2:19:81:9f:f4:49:47:7f:f8:1a:df:79:
         bc:00:31:82:c3:12:e1:61:dc:25:76:dd:ea:8f:a3:0a:f0:3d:
         09:0a:46:58:14:a6:96:02:06:bd:65:c7:80:b3:81:23:2a:1a:
         50:14:1b:75:4f:42:9d:6e:d2:74:17:96:6a:f0:cc:ce:6a:5b:
         49:5e:a8:f4:55:66:2b:53:36:1a:00:b3:42:21:2b:e8:55:1a:
         fb:40:1a:22:d6:a8:93:5f:4f:03:3b:4f:8c:7e:29:c0:f7:ef:
         7a:bc:96:b4:51:fd:9f:e5:b7:c7:e4:ac:22:5c:d8:97:2e:b6:
         34:34:ba:cc:f4:84:ef:09:fe:67:94:e8:af:d2:c8:ca:1e:e8:
         4e:7b:16:3d:4a:66:5e:b8:22:cc:55:4a:b2:a9:f6:9f:c7:79:
         87:cd:18:57:b1:c9:15:31:a9:b3:66:87:bb:4b:71:01:f9:a5:
         06:55:9b:a8:59:98:ef:0f:e8:51:f9:6b:1c:d0:91:77:fc:7e:
         df:4f:2e:76:5b:e3:a0:37:97:36:77:fe:bc:af:25:08:f0:3f:
         9a:1a:67:06:5e:bd:b3:34:60:40:1e:4d:99:f3:4f:1d:61:b8:
         a3:45:4b:dc:df:ab:6d:be:f5:2b:f7:3c:9c:52:67:53:cf:8e:
         0b:69:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:54 2026 by rpki-client