Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File:                     os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier:          Xzuvz8QffLCKmzd6go+5xsJorZNK6SK7/nbY/tx8N0s=
Subject key identifier:   26:E2:22:9C:C6:DC:E8:43:59:02:09:0E:57:23:37:41:2E:C8:C9:97
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer:       /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial:       019D28F2F6169D688FA1FDDF8088F4D1DFB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number:          10F8
Signing time:             Thu 26 Mar 2026 07:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:43 +0000
Files and hashes:         1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: rji44D91uuFo5sBGtAvZ2VgHlYjvRnMlCUQda9oyuWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:f6:16:9d:68:8f:a1:fd:df:80:88:f4:d1:df:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
        Validity
            Not Before: Mar 26 07:01:43 2026 GMT
            Not After : Mar 27 07:01:43 2026 GMT
        Subject: CN=26e2229cc6dce8435902090e572337412ec8c997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:ec:ea:29:5b:32:4f:f2:b2:93:f9:3e:28:
                    09:6f:22:c3:e2:97:62:d4:9c:08:ea:a7:ad:26:3b:
                    96:cc:43:e3:1f:de:ec:1f:31:8a:5b:82:c3:aa:f3:
                    f6:ab:8f:4c:7c:7e:63:e0:0a:1e:9b:39:85:a1:84:
                    e9:99:e3:a7:0c:32:6e:dd:b6:c9:24:3c:b2:c9:95:
                    72:54:ca:d1:38:e4:67:28:4d:70:31:67:cc:7d:c8:
                    17:97:54:e1:3b:08:a1:77:5b:ba:35:d5:34:e2:af:
                    e1:65:5a:56:98:42:80:4f:42:45:8c:d4:ab:0d:d7:
                    aa:79:a7:60:4f:9b:92:cc:51:98:78:85:c6:13:ec:
                    a6:dd:6f:ff:8d:d2:da:83:c7:22:2c:8a:be:6a:03:
                    77:cd:b3:0c:b1:b4:6a:d2:14:b1:28:93:91:cb:18:
                    84:82:9f:c0:ba:bc:bb:d5:b4:f6:46:f3:c6:32:04:
                    4c:05:a6:ba:51:b8:33:d4:71:11:e7:b2:4c:08:c4:
                    33:99:ca:18:52:f8:72:f4:d2:5f:f3:37:d6:1a:1b:
                    ec:77:88:ff:13:73:71:e3:31:f7:bb:5c:11:72:10:
                    25:fe:58:92:35:98:db:62:a9:45:5b:95:9a:16:36:
                    53:d6:de:72:a4:bb:7b:e5:81:50:cc:48:ce:8f:b7:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:22:9C:C6:DC:E8:43:59:02:09:0E:57:23:37:41:2E:C8:C9:97
            X509v3 Authority Key Identifier:
                keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:a2:58:a1:13:03:ce:b6:06:46:d7:10:75:e1:70:26:44:
         63:e0:01:73:4c:a6:2e:09:c0:43:5e:fc:4c:7a:79:fb:a7:a1:
         da:3e:bf:43:36:53:c8:1d:92:83:5c:57:bc:b1:f4:22:e4:ec:
         e1:14:8b:77:27:5a:0f:23:64:f2:c5:fb:29:0e:f0:f9:6d:4a:
         8c:08:4b:4e:7f:5c:7e:d1:30:ae:a2:e6:f2:d9:5e:aa:9f:50:
         24:78:b6:b5:6e:66:fb:35:91:5f:db:2c:4a:2c:06:64:98:46:
         51:b6:65:57:1e:f1:56:1f:e9:29:c7:a0:c5:12:c9:1a:35:68:
         d5:94:6d:ea:52:d9:4c:42:89:a3:85:bc:7a:21:9f:1e:dc:f7:
         3a:0d:7f:34:a8:d9:06:a6:c4:69:ce:b3:73:b3:e4:fb:dd:0a:
         4f:81:77:52:77:01:bb:88:3a:d2:bc:92:94:e2:4b:f4:f3:a1:
         84:fa:29:39:26:a4:84:24:0b:3b:ed:b6:1a:9f:e6:67:18:7d:
         02:eb:71:6a:e4:e9:e3:04:69:19:46:c2:ed:e4:e8:e1:01:8a:
         89:40:ef:ad:57:38:46:85:58:9a:5a:ee:f3:ba:3b:b2:04:05:
         1f:ca:12:24:f9:a9:e3:86:2f:74:76:67:59:0f:7a:09:2d:d8:
         43:0c:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:44 2026 by rpki-client