Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          YOmZ7eBTZ4CWJTBsYSi2k52FojzvlKINbDvgGK2REVw=
Subject key identifier:   CD:7F:25:96:86:24:50:F9:F0:A1:5A:06:60:E8:02:E4:6D:48:A4:12
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       019D28F23191005A00E8D3F56CCFE48D1499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          12B5
Signing time:             Thu 26 Mar 2026 07:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:54 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: pX3V1+a5ahPvMISnsxE3ruw4LaIR/Fs7cyI5Cu8IJrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:31:91:00:5a:00:e8:d3:f5:6c:cf:e4:8d:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: Mar 26 07:00:54 2026 GMT
            Not After : Mar 27 07:00:54 2026 GMT
        Subject: CN=cd7f2596862450f9f0a15a0660e802e46d48a412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:9b:23:3a:a1:6f:98:83:01:90:19:02:f4:
                    03:73:c2:e0:7e:6e:51:44:35:bc:99:91:e6:04:76:
                    1a:4f:7e:04:a3:18:5c:8b:8b:1c:20:0f:85:b2:25:
                    b1:1a:84:75:b0:4e:81:89:50:ab:8d:30:61:1e:56:
                    9f:20:52:0a:02:19:23:08:d9:51:51:52:2e:8e:36:
                    3a:9c:47:2f:79:93:dd:3d:b3:06:61:14:ad:c5:c4:
                    15:26:b9:94:5d:cb:32:d6:f3:35:13:fd:ac:49:b3:
                    17:3a:3a:ae:7a:c2:05:00:78:eb:cb:dc:74:1a:32:
                    48:4d:0c:2e:5f:dc:85:0f:08:00:35:a6:3e:39:30:
                    4a:8e:fd:63:e8:82:cb:6e:a7:9e:f8:90:d3:2c:f6:
                    a3:3c:16:e7:64:44:55:dc:28:1f:8d:06:fe:b8:46:
                    c2:67:bc:7c:d5:05:4c:fb:f1:71:bd:19:58:5b:c6:
                    26:c8:b6:1b:72:13:e1:f7:2d:ad:e8:ed:e5:bc:ec:
                    b3:45:f1:09:6b:51:50:e8:58:bf:e8:e4:d1:86:fd:
                    33:86:3d:21:01:59:70:b0:b9:1f:45:67:3b:61:b0:
                    ed:cb:89:63:b6:e6:65:0d:fe:fb:d9:22:3c:f9:4d:
                    63:f1:4d:00:0e:e4:5c:d9:e5:5c:2e:c5:0e:68:7e:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7F:25:96:86:24:50:F9:F0:A1:5A:06:60:E8:02:E4:6D:48:A4:12
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:99:23:ea:6a:9f:8a:bd:20:86:f7:94:64:6b:cb:01:21:
         04:9a:f9:11:7c:5f:4c:61:28:a0:51:de:26:18:41:6b:9a:cf:
         48:3e:3f:d7:c4:8d:dd:8b:ea:04:ab:43:0a:e6:74:8e:14:fc:
         64:35:5a:4c:b5:68:43:4c:6b:b5:91:8e:1b:3a:f5:46:38:31:
         e4:bb:d3:fc:c4:21:1a:23:94:44:61:52:e4:3d:ff:a4:6f:ce:
         e3:6c:8f:72:d0:7b:b2:1f:f0:35:da:18:48:c1:3f:4e:51:7c:
         3a:63:75:62:2e:1a:fe:5a:ab:49:b5:9a:5b:54:84:1f:72:b2:
         52:fc:8b:f2:98:5a:19:2d:a8:e8:c2:83:a1:b1:55:e6:12:1f:
         40:b0:0c:cf:5b:55:24:56:86:71:64:00:89:e9:69:20:42:4a:
         a0:d5:25:04:26:4a:f9:c7:a9:bb:18:6f:7d:aa:3c:4d:9f:45:
         2e:be:96:77:f2:96:c0:0f:cc:e0:1c:61:84:fc:75:62:c0:5f:
         19:db:bc:00:39:d3:b1:c5:28:a5:e1:a8:44:d3:6e:5e:8a:f4:
         a0:d5:ff:02:01:a8:ad:56:d9:ff:a2:1f:2d:75:6a:06:67:65:
         86:ca:38:11:03:46:18:23:7c:bc:50:26:31:08:8f:fb:75:e3:
         89:a2:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----