Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File:                     cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier:          3yhEM+V1P68tYDvZKxXvkN7U5hW/qZZAT/VLrk2ipn8=
Subject key identifier:   85:36:6D:4E:DE:78:C3:A4:7D:ED:6B:BE:16:27:47:2F:F4:4A:72:96
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer:       /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial:       019D2771DB276384F2BB2B206DDAC7FC986D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number:          08FA
Signing time:             Thu 26 Mar 2026 00:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:06 +0000
Files and hashes:         1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: TO4BfJTgFhcIGLoEs8OarzM7G920+3ODBkAw21DxEa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:db:27:63:84:f2:bb:2b:20:6d:da:c7:fc:98:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
        Validity
            Not Before: Mar 26 00:01:06 2026 GMT
            Not After : Mar 27 00:01:06 2026 GMT
        Subject: CN=85366d4ede78c3a47ded6bbe1627472ff44a7296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:dc:97:36:8f:69:e0:64:a2:2c:4e:fa:99:
                    45:91:6f:2c:3a:1d:ab:77:c7:14:6f:5b:f7:b5:50:
                    77:23:ce:81:c9:6b:e0:24:02:26:5c:49:fc:12:60:
                    97:50:45:d1:d9:64:54:26:ab:7e:19:d7:29:2e:74:
                    14:9f:9f:e1:16:1f:a1:a8:20:a8:dd:5b:43:fa:08:
                    28:73:2b:24:e9:da:c9:47:b0:2f:3e:92:5c:c2:f0:
                    fe:ac:64:b0:75:76:ad:d4:49:af:06:93:ed:d7:4f:
                    74:3c:71:0c:04:a9:81:a8:2e:88:4d:20:9d:f9:a5:
                    bc:ec:7a:31:9c:3f:e5:f9:d2:3c:e1:0c:fd:49:34:
                    8b:fb:d6:1b:69:89:b8:70:06:37:70:a5:f9:54:f6:
                    de:2b:02:86:58:3b:6d:d5:c6:bc:56:4a:9b:b2:02:
                    3a:ef:fa:16:dd:b0:08:87:b7:54:97:78:5e:59:dd:
                    f4:2d:3e:d6:4f:99:6f:61:01:34:cb:10:ba:8f:9f:
                    6f:f9:13:b2:bc:74:1d:65:ea:7a:d4:eb:1c:a4:48:
                    e8:88:6e:64:9d:2a:9a:10:37:da:0d:e3:c5:fd:a4:
                    1a:39:3b:3d:fe:07:98:8f:b1:3e:9d:7c:cb:08:cd:
                    13:72:f1:cd:1a:e2:db:93:89:39:ea:83:58:f7:c2:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:36:6D:4E:DE:78:C3:A4:7D:ED:6B:BE:16:27:47:2F:F4:4A:72:96
            X509v3 Authority Key Identifier:
                keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:78:a4:d0:90:13:d6:0d:02:ce:44:bc:32:cb:55:cd:94:
         5a:25:a7:73:da:4a:4a:59:4f:79:cf:fb:1d:ec:6b:9b:09:ff:
         63:ab:b7:f8:ba:02:7d:8e:7e:c6:17:f9:85:0e:a2:a2:30:3b:
         3f:74:c1:f3:3e:3b:37:3e:b0:fd:70:07:bb:55:1b:92:70:c7:
         74:ea:d7:8e:7a:c9:8a:6b:46:10:06:ad:55:67:a8:d4:db:2a:
         88:fc:9a:8d:8e:3c:dc:ac:50:90:2f:97:f4:13:c4:4a:12:1b:
         56:54:45:a6:cf:3c:f5:d2:b7:11:d8:f2:ff:58:8b:6d:f1:ef:
         06:f2:03:e9:3e:ce:ee:7b:95:ff:61:c1:e5:fc:5b:47:20:ea:
         99:2a:01:70:e8:82:35:6d:e8:a5:91:b7:74:25:cf:42:75:52:
         2d:22:f5:22:e7:fc:56:a7:51:fa:cb:2a:c1:8e:5f:61:b3:9f:
         80:81:bc:76:35:7e:ea:78:49:1b:52:6e:9d:46:46:d2:a8:6d:
         10:7a:91:9e:e5:85:b1:06:a0:cf:36:8c:b7:9b:8c:6d:18:b3:
         a6:4a:9c:fc:72:1a:f3:c9:3c:03:f8:4c:3f:9f:bb:2d:c5:b0:
         e1:50:da:e5:d4:26:ba:db:41:69:b2:7b:25:88:60:d9:2d:fe:
         4b:6a:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----