Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          90UAm5UZAG9UoRwL7UpZHFY1OYrxRKp6QAhDZHUv568=
Subject key identifier:   9C:4B:44:BF:C2:22:FD:6B:FA:20:80:A7:02:C8:D2:32:95:AF:89:22
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       019D27A8BFDAE0F6F1C9C725D7AF1B2B43E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          09C5
Signing time:             Thu 26 Mar 2026 01:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:03 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: zR2TkufcyF+aqPboAWupz1V3nBz6PmvUFW4gm2pADgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:bf:da:e0:f6:f1:c9:c7:25:d7:af:1b:2b:43:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Mar 26 01:01:03 2026 GMT
            Not After : Mar 27 01:01:03 2026 GMT
        Subject: CN=9c4b44bfc222fd6bfa2080a702c8d23295af8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:17:42:19:17:8a:4f:5d:95:6d:26:8a:d1:
                    80:90:c2:32:08:e9:b3:a8:15:9b:37:69:36:b6:fa:
                    1d:a0:d1:97:a9:ff:2a:79:d2:6f:aa:38:87:60:84:
                    93:97:99:2b:11:38:3b:61:e0:e0:08:fc:89:a2:f3:
                    59:c8:69:97:7d:48:a2:92:eb:a6:13:94:32:95:93:
                    f9:ff:7a:43:09:9b:03:fe:93:cb:35:15:d2:bf:5d:
                    95:0b:bb:f4:b2:f2:e4:cb:3a:91:6e:67:f7:cd:9f:
                    a6:05:20:71:8d:fa:5d:e7:1d:8b:a2:51:dd:c9:56:
                    87:6f:1f:f2:90:2c:19:bb:91:ea:d8:ef:86:a0:80:
                    7e:8a:d4:6d:ae:34:b0:67:24:13:56:d2:57:51:93:
                    90:3b:e7:b9:26:e9:d1:1e:5e:cc:bd:1b:01:2f:01:
                    f8:80:0a:e7:11:06:a3:94:60:cf:3b:e8:99:7a:4c:
                    90:47:4b:e2:26:97:68:88:30:8f:2e:7c:42:3a:b9:
                    9a:d0:c0:6a:69:e2:5a:f5:bb:aa:25:4a:87:f7:c9:
                    9e:8e:05:e7:1f:06:03:47:b1:d6:bd:87:77:af:84:
                    7d:42:7d:0d:c4:d9:8a:df:b7:c9:20:c2:10:ed:05:
                    8d:41:bf:1c:58:b4:ae:66:01:ae:3a:cc:93:18:46:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4B:44:BF:C2:22:FD:6B:FA:20:80:A7:02:C8:D2:32:95:AF:89:22
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:62:41:aa:c8:7b:24:02:20:f0:76:44:e8:8c:73:5f:ef:
         06:35:82:ac:f0:75:69:05:9e:f1:ad:7c:7e:14:7c:cd:83:e4:
         8f:bd:4b:6b:b0:a9:a4:65:50:c4:b0:54:78:e6:47:ee:24:ea:
         54:8c:d4:99:ee:d3:2d:0b:90:60:7c:30:44:c1:fc:7c:4c:ca:
         02:a0:7d:70:6c:b7:13:89:28:8c:d4:3f:be:ef:ad:95:b4:a6:
         7c:24:e8:f8:78:00:44:eb:d0:56:7c:0e:75:9e:4c:58:7f:8b:
         a7:5d:a3:63:ae:b9:22:08:e3:e8:b1:01:76:c4:fd:8a:d1:4f:
         ef:c8:87:b1:42:a2:36:9f:77:b9:83:d0:7b:30:29:ba:2c:0c:
         31:91:70:dc:39:b2:3b:99:ca:4f:39:b7:a2:01:a3:46:3d:f0:
         a6:da:f3:8a:dd:e3:ed:56:1f:7c:bd:cb:1a:c8:89:ff:12:b7:
         17:d5:55:dc:b8:35:bd:b8:31:41:ba:43:b0:3c:81:e1:e5:c1:
         8e:dd:06:79:a0:8d:bc:15:84:2b:bd:08:fd:4e:12:d9:ca:05:
         69:5b:9c:a8:d9:29:a3:10:73:32:35:c2:3a:d3:9d:0e:8e:a5:
         43:26:2a:0c:ad:46:32:62:96:08:a8:5b:6f:29:d6:ca:a3:02:
         7e:6e:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:48 2026 by rpki-client