Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
File:                     7rv5EjKoEhLjtEz74e4pjGKaZk8.mft (raw, json)
Hash identifier:          EGJBZghxtvRFd9FGrc0apJ61z2X1ucHboR3LR2JGMUY=
Subject key identifier:   1D:E5:DB:B3:81:CD:EE:77:7B:8D:0D:E9:92:4F:1A:72:A0:00:03:82
Authority key identifier: EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
Certificate issuer:       /CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Certificate serial:       019D28F20953F1B6705EEAC01A2F37ABFC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
Manifest number:          B1
Signing time:             Thu 26 Mar 2026 07:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:43 +0000
Files and hashes:         1: 7rv5EjKoEhLjtEz74e4pjGKaZk8.crl (hash: q67Lt8oEoU6+Xej+SDQP3iG78wc8515bPftM1Tkmgho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:09:53:f1:b6:70:5e:ea:c0:1a:2f:37:ab:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
        Validity
            Not Before: Mar 26 07:00:43 2026 GMT
            Not After : Mar 27 07:00:43 2026 GMT
        Subject: CN=1de5dbb381cdee777b8d0de9924f1a72a0000382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:05:9d:c2:1d:b5:49:f6:7a:24:ab:3a:56:
                    73:72:8e:0e:2e:c0:13:f3:e2:5e:1c:ff:23:53:bc:
                    60:fc:e8:e1:05:7e:17:b4:c1:e4:26:77:43:c6:80:
                    7d:6f:75:e7:ed:85:ce:51:3a:b1:5a:60:d4:d2:f7:
                    b1:d3:2c:6e:2d:30:8a:08:8a:c2:ba:cc:ee:93:b0:
                    49:13:f6:c2:8d:8b:01:58:a0:14:2e:c6:a7:ba:c0:
                    b5:ad:59:e5:14:94:3d:95:bc:3f:73:ab:3e:f0:42:
                    8a:ea:13:8f:2b:6e:50:91:83:95:1a:c8:10:a0:09:
                    df:ad:f1:5c:65:19:b8:71:90:8a:79:cf:23:7d:69:
                    72:84:32:b8:c6:f4:5b:9b:bf:d0:d5:a9:00:b3:3a:
                    2b:69:9b:2b:65:27:7f:e6:8c:07:ed:f7:18:55:2d:
                    44:3b:f3:95:e3:3b:82:24:b7:d4:7b:69:30:8b:a2:
                    10:e7:87:48:cc:0b:56:93:9c:9c:d9:de:df:a0:27:
                    e6:e7:14:ad:6d:e7:34:d6:6f:31:d8:58:e3:67:0b:
                    19:2a:09:e1:b7:c9:28:43:a5:4b:b3:4d:e5:3c:74:
                    80:aa:ed:54:2e:18:4a:9c:34:45:41:bf:a3:04:1b:
                    f7:97:44:94:b0:e5:75:15:b8:81:d5:1b:66:82:b3:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:DB:B3:81:CD:EE:77:7B:8D:0D:E9:92:4F:1A:72:A0:00:03:82
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:d6:40:b2:da:47:7f:6c:5e:54:4e:15:11:3e:79:56:33:
         6f:67:7a:7b:b8:63:cd:ff:a9:b4:75:07:28:81:cb:c7:ec:69:
         4b:c2:74:c8:d6:ee:1f:d8:70:48:c4:03:20:e7:b4:c2:8c:0a:
         a5:70:ae:24:b9:03:45:a1:5e:e3:4e:10:69:65:3a:e4:93:a1:
         61:cc:f6:73:86:a6:bb:51:7f:03:6a:3a:33:24:e7:5f:c8:e7:
         c3:53:33:fb:77:3e:47:5c:9b:b8:e4:b1:a4:a2:21:07:e5:28:
         ca:7f:cd:28:a6:15:91:b6:a8:ed:e9:f7:92:b0:a2:8d:28:de:
         de:f9:f9:cc:0e:61:62:c2:14:ba:3b:2b:05:ae:2e:3e:1b:c8:
         cb:1d:16:f8:d3:7d:fb:72:f2:3c:53:60:a6:4b:24:11:79:51:
         a8:ca:0f:f1:a6:27:ec:77:f3:20:52:09:33:c9:fc:e2:e8:c0:
         1f:19:f3:c8:29:89:77:c3:f8:44:14:f1:7e:4d:70:4d:e3:31:
         79:c3:df:14:22:29:10:f8:a5:e5:25:ed:22:45:fe:71:a5:3e:
         59:b3:9a:c2:49:fc:3a:0f:53:fb:3e:be:b6:ab:95:cd:d2:f8:
         e6:1e:14:b4:83:3e:34:e1:52:a5:39:dd:d4:91:b5:26:56:38:
         5c:ef:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:38 2026 by rpki-client