Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File:                     I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier:          p1cqd69x9/Z2X+PeE95fSotKnsmF7Dn1HZebVujZy50=
Subject key identifier:   0F:7B:55:8D:8D:6E:1C:73:69:38:D6:42:0F:A1:35:19:F4:38:65:DC
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer:       /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial:       019D28BB48BDDC5A16249ABCE934E56CA2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number:          0911
Signing time:             Thu 26 Mar 2026 06:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:55 +0000
Files and hashes:         1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: Y62OutM5ka6SqaM07t5iaoO9QXt7cEVapvzR1wvARek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:48:bd:dc:5a:16:24:9a:bc:e9:34:e5:6c:a2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
        Validity
            Not Before: Mar 26 06:00:55 2026 GMT
            Not After : Mar 27 06:00:55 2026 GMT
        Subject: CN=0f7b558d8d6e1c736938d6420fa13519f43865dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:ab:db:e1:55:48:c1:7e:3b:35:59:1a:31:
                    24:f6:34:d2:df:2c:f1:07:78:a0:1f:6a:4e:c8:dd:
                    ea:96:c1:e9:94:57:af:cb:dc:2c:00:d6:bc:e6:e5:
                    47:29:32:ee:ab:9b:bf:a7:c4:2f:5f:73:58:7b:d0:
                    18:1b:a2:61:36:e9:6a:06:83:e8:61:02:b2:d5:0f:
                    c1:37:c4:ed:7c:59:90:b9:34:a2:a9:5f:a2:b3:2f:
                    a0:1a:30:6b:0e:3d:49:22:5a:e6:0f:bf:d3:64:38:
                    b7:72:1a:6d:79:e3:a1:03:64:1a:89:9b:22:f0:55:
                    1a:64:58:1b:ac:32:85:0f:6a:b5:ff:d1:cc:22:64:
                    a2:13:a9:33:84:47:3a:dc:53:16:75:7e:ba:41:ab:
                    b4:41:8a:05:09:bf:80:22:15:de:7c:82:75:31:cc:
                    cc:40:b1:a7:a0:86:5a:ee:b5:2f:a0:ac:93:0e:cc:
                    a5:0e:7d:ad:b0:13:c4:fc:43:77:c4:49:94:0e:cf:
                    67:6a:8a:55:15:a3:7e:ca:99:a7:ec:a8:35:9a:5a:
                    64:eb:dd:06:a9:e4:fe:3a:ee:fb:ba:1c:d4:92:d2:
                    9a:e1:e1:75:55:bd:ed:a1:c1:9d:97:b0:7b:7a:56:
                    f4:8b:b6:9f:06:2b:e6:c4:de:da:3e:2d:e5:02:54:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:55:8D:8D:6E:1C:73:69:38:D6:42:0F:A1:35:19:F4:38:65:DC
            X509v3 Authority Key Identifier:
                keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:59:a0:b7:2f:c3:44:cd:72:f7:98:ac:7d:b9:32:5b:1a:
         de:7a:76:23:08:86:c6:7c:c1:bb:ce:3a:c6:62:f9:72:02:53:
         e8:3e:3e:56:5e:b0:59:29:2a:9e:b5:8a:ab:86:34:2c:e2:6c:
         a1:ea:21:68:f8:3e:d8:f5:a1:bd:92:91:ad:b2:ef:ad:4a:cc:
         14:4f:cc:42:13:6e:31:4a:ad:f9:5a:1c:16:c3:ad:e9:6b:ae:
         e7:61:c1:d8:fe:a2:69:78:4c:7d:7f:7f:a4:c2:9b:f4:df:52:
         24:16:f3:5a:f4:70:de:a4:75:00:81:f6:1c:2b:80:7a:6e:34:
         46:e1:11:f8:a2:91:1c:b0:8a:e8:cc:93:6e:3a:ba:b4:10:7e:
         f6:fa:30:66:cf:07:c9:01:25:2f:94:1e:bb:b0:f9:46:a7:f1:
         24:41:52:77:b4:37:ac:1e:7b:6e:8e:73:85:02:aa:d5:16:87:
         78:7b:00:c0:9a:a5:ba:16:73:cc:1f:ed:c5:e9:b6:11:d4:66:
         01:6f:f6:cf:3d:1b:17:86:cf:fa:c8:82:a7:29:75:a2:3c:5f:
         f1:64:93:76:d1:82:5d:14:af:21:47:61:ef:9f:d3:1a:c8:98:
         2d:21:c0:79:b6:8e:a1:6f:8a:51:d4:58:29:0a:3f:a8:04:a6:
         d6:24:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:19 2026 by rpki-client