Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          jtvp5JeHArAZZZoFsckvHwBRQqbQzb3JTOTm/n4w3oA=
Subject key identifier:   9E:B8:62:65:33:11:2E:4E:F5:EF:B4:25:89:EA:B9:8A:B6:1E:F0:F0
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       019D28F34378062F96C22650F72B8E2D5441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 07:02:04 +0000
Manifest this update:     Thu 26 Mar 2026 07:02:04 +0000
Manifest next update:     Fri 27 Mar 2026 07:02:04 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: ez2fKhzX86LBcEDrGM0mVib870K4erxCh/NpVaLXmxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:43:78:06:2f:96:c2:26:50:f7:2b:8e:2d:54:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: Mar 26 07:02:04 2026 GMT
            Not After : Mar 27 07:02:04 2026 GMT
        Subject: CN=9eb8626533112e4ef5efb42589eab98ab61ef0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:d8:29:cb:82:1c:11:8d:a6:b4:f1:23:29:
                    40:f5:a7:76:45:55:06:4a:c4:69:f8:c1:59:8f:26:
                    48:32:4f:2e:ba:11:8d:7c:3a:68:6c:4e:75:4c:c6:
                    12:cc:0a:cc:93:67:a5:21:f4:0b:7f:b4:d1:91:bf:
                    38:54:82:e6:d4:2c:bb:d9:54:de:ea:c7:4d:0e:1e:
                    10:dc:35:15:6c:62:b2:d7:c7:0a:43:d4:4f:74:1e:
                    f4:96:2f:ef:9c:e9:50:76:e5:ae:0b:e0:21:b7:0d:
                    8a:2a:e0:d1:7e:84:44:ce:83:a8:01:3f:9e:e1:3f:
                    19:d1:8d:d4:0c:e7:ca:92:dc:ba:88:07:cb:ea:e7:
                    56:e8:fc:2b:d0:1b:8e:14:ad:30:0d:9a:9f:15:f0:
                    77:10:41:38:aa:6a:f8:39:c6:3f:b3:a5:11:4d:a0:
                    9d:10:de:68:d8:83:24:02:8d:17:28:55:62:e3:27:
                    0d:60:7f:ce:2f:51:29:12:9e:3d:44:3e:57:49:fe:
                    09:ad:11:d9:bd:63:23:6e:d0:ec:90:23:a8:72:25:
                    f5:d0:48:3d:69:37:3f:40:f9:2e:2e:b3:95:c0:ac:
                    b3:10:9a:cd:7e:1f:c8:17:ac:92:96:8d:9d:b6:19:
                    59:fa:3d:d7:d0:04:cc:86:dd:99:60:ae:3a:ac:48:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B8:62:65:33:11:2E:4E:F5:EF:B4:25:89:EA:B9:8A:B6:1E:F0:F0
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:8b:dc:f4:6a:d1:06:92:7f:1d:bd:35:31:0d:1c:1a:fa:
         bf:d7:7c:5b:f8:7c:69:8a:e1:07:59:b9:2c:bc:f2:22:51:ad:
         f9:14:da:c7:ef:37:40:d9:4e:fc:8f:c1:cf:7f:45:f1:54:aa:
         85:73:3b:e2:3e:86:62:dc:23:cc:1b:08:eb:26:e1:be:b2:6d:
         39:12:24:51:9f:8b:e8:6f:79:ba:07:ba:5e:c8:f9:03:fc:db:
         0d:78:fa:27:97:fb:05:3c:f5:a9:d8:d7:31:8a:3c:b6:93:d1:
         6c:ec:37:09:ff:62:30:6e:cc:4e:89:c9:e0:67:1b:b5:19:a2:
         78:7d:5a:cb:bd:97:e0:ad:2f:9b:d4:60:d7:28:39:87:69:5d:
         61:43:8d:fb:4c:77:33:2a:8b:cc:e9:6c:fd:6f:87:a3:f1:9e:
         9a:ab:0f:07:ce:e4:f8:bd:1b:91:ec:dd:5b:0a:3a:b3:37:09:
         ad:80:ef:a0:72:0e:33:ee:03:b7:11:d1:81:40:8f:4d:6f:a7:
         c1:b2:c1:fd:09:da:d8:34:4d:86:25:b2:a5:b4:6c:93:02:23:
         a6:7a:77:80:dc:a9:4c:ef:86:80:3a:b9:ce:8f:06:30:c4:18:
         2a:1d:28:2f:24:da:0c:c8:b8:54:3a:fe:83:19:16:ad:3e:ee:
         28:a4:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:31 2026 by rpki-client