Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          rKkKJfU+WXXDy8UhtAD3AhLFHM2Jv/9TrUciAucSus8=
Subject key identifier:   36:D3:30:EF:F5:63:A0:36:10:DD:2A:ED:CB:04:69:8C:0B:C3:74:9F
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       019D28F2D3BFF72B8840CD7B27E70C77CBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          142A
Signing time:             Thu 26 Mar 2026 07:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:35 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: CZO8jLaw81+asXPj7lgFcKTkRUjMeoX6UIC2aNoGqEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:d3:bf:f7:2b:88:40:cd:7b:27:e7:0c:77:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Mar 26 07:01:35 2026 GMT
            Not After : Mar 27 07:01:35 2026 GMT
        Subject: CN=36d330eff563a03610dd2aedcb04698c0bc3749f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:65:b2:fc:76:85:03:e5:55:00:cd:47:1a:ad:
                    f2:5b:5c:9a:5b:b3:b7:84:b8:94:43:9b:2a:30:30:
                    2c:ed:01:b6:77:92:e9:59:55:73:98:e1:8e:ef:85:
                    92:73:2f:62:14:b3:0c:8c:ed:72:d0:9a:03:7b:23:
                    21:3c:01:c1:ae:94:0c:b0:74:ab:21:88:1b:95:df:
                    d4:7f:b7:4a:14:63:83:53:69:cd:7e:c1:38:a9:83:
                    d3:00:d7:b3:bf:ea:1f:51:02:e0:29:51:81:13:ff:
                    7d:d6:75:60:92:d8:5d:2d:62:b7:93:52:8f:d5:fe:
                    3d:bd:7f:18:07:ba:f8:14:85:40:ef:3d:fd:91:ec:
                    48:04:9b:4e:b4:c9:d0:f0:39:cc:99:a0:38:77:59:
                    52:1f:81:9e:bd:2d:14:fb:91:be:e2:31:3e:fc:3a:
                    6e:14:83:12:d3:8e:53:c8:25:be:02:dd:c4:0c:12:
                    78:ed:c1:ba:44:26:35:95:5d:d6:11:a1:fd:fc:15:
                    17:d8:90:5a:ca:2e:a0:99:09:a9:db:d2:0b:ef:f0:
                    00:34:64:c9:0e:d6:d0:a7:59:a7:fa:ef:91:cb:0e:
                    5a:34:d7:42:85:5c:e2:3e:c1:4a:c7:b0:da:b6:c3:
                    ee:58:e5:4a:ff:24:b5:af:a0:c7:e6:f1:f3:49:90:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:30:EF:F5:63:A0:36:10:DD:2A:ED:CB:04:69:8C:0B:C3:74:9F
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:54:6d:d5:b2:d5:e3:ed:43:7c:f6:43:a5:bb:e6:8b:05:
         f8:b8:b7:5f:e3:2b:a7:38:45:3c:9f:31:0e:e7:75:c1:81:d9:
         8e:c9:09:04:8b:cf:71:06:47:19:74:cc:f7:26:32:ec:84:9a:
         44:d1:30:6c:22:83:c3:ef:25:af:f0:16:a5:ad:85:85:e8:c2:
         62:69:76:6b:eb:5b:17:24:17:eb:bf:31:26:d6:e7:67:72:38:
         4a:a0:67:1d:60:5b:a8:c4:66:e9:f9:e7:62:64:6c:85:f3:3b:
         be:58:dd:40:86:7b:cd:21:c0:ae:a0:36:20:8e:30:bf:22:f8:
         cf:47:42:02:f0:cb:c7:fd:18:df:26:4b:f3:86:0d:af:44:e1:
         af:a5:c4:3a:b1:fd:35:cd:dd:f1:91:11:1e:f7:32:55:96:e4:
         ec:56:c6:eb:14:0d:62:aa:d9:58:65:01:0e:d4:0a:21:c3:6e:
         f5:19:c6:87:38:ae:b1:53:24:1b:f4:a5:ea:c8:cd:04:c6:7a:
         61:78:8a:a5:43:3d:0d:de:3b:d1:8a:92:0c:ab:79:1f:3c:1e:
         93:97:df:ff:29:93:93:c0:cb:ad:36:33:8b:f7:2b:b4:fc:6e:
         fe:33:53:4b:19:79:f3:58:1d:75:66:f8:ea:99:92:20:65:e9:
         bd:75:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:35 2026 by rpki-client