Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File:                     1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier:          ZpEJeJP060NADGe8YzXdqWeMBhMDmVP64HAiWxUnDkE=
Subject key identifier:   50:EC:CD:73:DD:34:0A:C8:97:F7:FE:5D:50:1B:D8:82:91:72:49:A0
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       019D27E0455290ECF85785D32796FB715BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number:          0BE1
Signing time:             Thu 26 Mar 2026 02:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:42 +0000
Files and hashes:         1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: nM3IW+VkKJSiZzoWmv7DhwkEvwvyw7mHysq+BqSsO0c=)
                          2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:45:52:90:ec:f8:57:85:d3:27:96:fb:71:5b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: Mar 26 02:01:42 2026 GMT
            Not After : Mar 27 02:01:42 2026 GMT
        Subject: CN=50eccd73dd340ac897f7fe5d501bd882917249a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:3a:2b:b1:5f:8b:c2:0b:3f:69:f5:4c:c9:
                    9a:5d:4f:8a:3f:06:86:e6:f3:a0:ae:1f:f6:46:3a:
                    ac:3c:ad:78:2a:91:c8:da:7c:9a:7e:a7:12:27:c3:
                    f0:02:f5:ef:93:13:f6:98:46:8a:71:2f:7e:49:21:
                    17:d5:60:43:0e:fa:f8:77:52:23:0f:f0:67:49:72:
                    52:54:6b:b7:78:0c:91:48:71:59:ec:0c:83:48:a5:
                    5c:4b:b7:76:b4:66:97:59:b8:ee:15:77:1c:4b:d3:
                    fb:62:17:99:fb:ba:5d:68:9d:83:af:e6:5d:4c:c2:
                    41:b2:c4:31:eb:b8:ab:c6:d6:a9:e4:22:b0:dc:e2:
                    7f:a0:cb:92:03:89:53:ab:23:72:5d:db:b0:32:11:
                    e4:f8:79:e7:36:77:f7:32:16:7e:ce:ed:34:3a:3f:
                    93:7a:6c:1d:b3:a3:f5:32:0a:1d:a9:2b:90:ac:69:
                    1d:95:c6:7e:c1:38:47:20:d9:4a:e1:1b:f2:80:68:
                    69:58:64:fa:9e:96:2a:7d:58:ca:bf:dc:a4:eb:ab:
                    d5:4e:34:b8:f0:42:c2:8e:ae:54:72:21:86:d5:15:
                    40:35:b2:cb:07:3c:fc:fc:68:f0:89:6c:ab:e2:70:
                    43:94:2c:66:a4:31:a0:95:aa:98:fb:93:c4:ed:90:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:CD:73:DD:34:0A:C8:97:F7:FE:5D:50:1B:D8:82:91:72:49:A0
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:77:b3:37:15:ac:91:7d:b6:37:94:28:b6:8b:74:2d:54:a3:
         f3:84:81:69:ba:69:54:b8:fe:a9:7c:82:a1:0f:40:ba:33:91:
         05:a6:06:06:6f:0c:24:78:ac:4d:f5:11:ac:55:f9:36:c3:74:
         6a:e5:e3:fa:40:80:da:93:ba:c7:f2:a1:75:7c:49:3a:04:72:
         a2:cc:5f:42:83:3c:bd:b2:46:ee:7f:c7:5e:bc:cd:d1:8a:22:
         e4:61:81:fc:4b:92:9b:25:c7:d2:48:0e:f9:ea:2e:f3:82:27:
         64:4e:e3:87:2f:88:a7:24:e1:9f:66:9b:87:9e:87:33:fe:14:
         2e:9f:59:b9:16:fc:c7:c3:e4:e1:b4:72:91:66:33:7b:e6:15:
         3a:7e:91:d2:d6:fa:45:98:5f:f8:01:c3:a5:d2:8f:5c:f2:66:
         9f:c1:ac:ac:4f:b4:fe:bb:d8:2d:9d:ac:02:23:84:42:49:c9:
         0b:81:4b:96:f3:0c:05:35:70:fa:c3:bb:eb:6b:eb:4d:c2:ee:
         51:32:31:1b:98:4f:21:37:21:f2:70:f6:2f:51:de:0b:2a:64:
         9b:24:98:6f:62:62:ec:99:d4:fb:bb:6d:51:09:84:8e:4b:4b:
         c5:44:c7:38:1b:81:53:8b:df:6b:fa:8e:83:b8:62:95:a4:e2:
         f7:0b:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:29 2026 by rpki-client