Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File:                     H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier:          3g8TDvYLU65kzdOg/epKetepDWRnny89hR0otw41bkk=
Subject key identifier:   BF:24:BF:DE:E2:50:17:8E:94:A5:C9:83:6D:1C:94:0F:E5:F3:1D:DB
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer:       /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial:       019D265FEC8993860D2BB93B29DD8FE0D6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number:          05F4
Signing time:             Wed 25 Mar 2026 19:01:53 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:53 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:53 +0000
Files and hashes:         1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: mTFWwqC7f3SXn1oNEKFvpqPY3yYSq7FZ9ohShCScdiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ec:89:93:86:0d:2b:b9:3b:29:dd:8f:e0:d6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
        Validity
            Not Before: Mar 25 19:01:53 2026 GMT
            Not After : Mar 26 19:01:53 2026 GMT
        Subject: CN=bf24bfdee250178e94a5c9836d1c940fe5f31ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:7a:79:6d:92:cf:5a:2c:ce:a8:32:26:ad:
                    3b:65:f9:bb:76:18:22:49:d4:75:73:66:0a:5a:45:
                    fc:f1:0a:ca:ec:43:ee:21:34:2d:7e:55:bb:91:63:
                    97:a3:bd:f8:f2:f6:04:87:eb:1d:8f:6a:fd:8c:e6:
                    af:8d:a3:f6:45:72:b2:02:1c:24:97:79:83:26:79:
                    8c:01:3d:d3:8f:bd:9c:42:fe:01:32:09:72:a6:12:
                    98:8b:a1:8e:4f:33:8d:ca:10:e2:dd:a6:af:7a:5d:
                    3e:87:c2:97:e6:ba:8c:91:9f:24:24:26:fb:a4:ac:
                    14:23:4f:aa:62:93:8f:8a:7e:d2:88:81:5f:2a:a1:
                    7f:3c:44:8e:fb:87:5f:9b:ed:21:46:99:2b:eb:5f:
                    7d:93:bb:c4:9b:3b:2d:03:93:04:a3:4f:29:2f:aa:
                    2c:24:6b:43:28:de:c6:de:22:44:d6:3b:01:0e:07:
                    ec:da:92:d1:9e:56:8d:6a:89:ef:5f:bc:75:ac:1f:
                    78:fd:da:6f:60:e0:28:32:02:5d:ee:5a:d9:6d:4c:
                    9e:90:a6:89:e0:d5:f8:8c:36:c4:80:f2:f2:6e:ae:
                    a5:4d:64:60:9b:c6:5b:34:67:25:95:2b:c9:12:47:
                    b2:a9:24:5c:07:fc:ab:7e:a7:37:b8:16:ac:cb:b6:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:24:BF:DE:E2:50:17:8E:94:A5:C9:83:6D:1C:94:0F:E5:F3:1D:DB
            X509v3 Authority Key Identifier:
                keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:52:94:0a:e8:00:48:9c:5c:c5:32:68:eb:39:4b:de:87:
         b2:5c:b2:50:b4:21:ca:9f:86:f8:c7:43:c5:ec:12:2d:4a:27:
         38:f1:24:a6:53:99:66:27:41:f1:f5:37:1c:72:3b:63:21:ec:
         15:96:d1:52:d7:58:fd:bf:68:27:f8:6b:f0:e1:09:c3:f9:2a:
         47:91:16:28:b4:35:e0:1f:f7:e2:82:49:0c:8e:9e:ec:9d:ad:
         8d:5b:6e:6f:69:1b:3a:53:4c:c3:55:61:18:1e:57:0f:3e:de:
         3e:e8:5a:64:dc:6b:42:6e:7e:fc:85:f1:74:65:27:fd:21:5f:
         66:59:08:a0:86:f1:d5:9b:5f:da:a7:5f:a7:94:82:ac:c3:12:
         e9:6c:ef:55:51:cf:f4:a6:2a:51:f5:b8:c0:8c:9e:36:70:fa:
         26:41:08:17:f1:c6:fa:39:da:35:8b:28:1c:a9:c5:db:e9:ed:
         2f:61:42:a9:2b:11:46:d4:25:d5:20:c0:80:bc:ab:28:88:15:
         c9:df:4d:13:74:56:4b:a8:70:e1:a0:e1:83:4b:95:39:24:bc:
         2b:c9:12:ab:b6:b1:ea:b5:e3:76:7e:bd:0e:7b:e0:a1:dc:de:
         e5:48:b7:b7:3c:39:0b:70:da:b7:46:68:fb:3d:86:b9:cb:0d:
         62:29:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----