Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File:                     CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier:          j66g1gxvUjDysjeVdGKBWEpUTiT4Dvh78q+/KAlgx08=
Subject key identifier:   36:D5:E5:A8:62:C8:60:72:F1:81:90:05:CD:D6:58:70:AE:56:AA:58
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer:       /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial:       019E1EDA26A6BB2AFDB12F39B11AD09B9A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number:          027B
Signing time:             Wed 13 May 2026 01:01:13 +0000
Manifest this update:     Wed 13 May 2026 01:01:13 +0000
Manifest next update:     Thu 14 May 2026 01:01:13 +0000
Files and hashes:         1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: JG5B9Z6CnFyUaGVMGZ4dm2aog9KHGB4BTUSOvxb1c7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:26:a6:bb:2a:fd:b1:2f:39:b1:1a:d0:9b:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
        Validity
            Not Before: May 13 01:01:13 2026 GMT
            Not After : May 14 01:01:13 2026 GMT
        Subject: CN=36d5e5a862c86072f1819005cdd65870ae56aa58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:aa:cb:8f:70:17:40:63:55:26:79:f1:aa:
                    bd:f3:40:0f:00:f2:60:9b:c8:b8:96:68:eb:91:03:
                    a5:75:f5:c4:fd:27:a4:95:38:95:fb:a3:04:e7:66:
                    1f:97:e6:01:e2:dd:79:ef:8c:81:21:d2:06:5d:e0:
                    05:74:70:d3:be:30:bf:39:44:47:51:26:ed:1b:bb:
                    ce:c0:f8:15:6e:15:79:9a:50:d4:e3:64:3d:a9:48:
                    98:de:c5:b9:31:e2:5a:4a:36:5a:ad:46:90:ca:7b:
                    82:2d:e7:c2:d3:a2:66:da:71:f4:7f:21:fa:36:a4:
                    6f:f0:33:a9:d7:38:ae:5f:19:73:4e:0d:35:dc:88:
                    37:71:34:b5:11:fd:39:54:78:b1:c5:22:b7:d0:84:
                    6f:a5:38:68:a3:97:b3:0d:c0:1c:a7:cf:a8:fa:45:
                    5c:42:e9:e1:42:b3:5f:82:fd:d3:84:00:ba:39:57:
                    79:2f:4d:ff:57:2c:69:87:cb:10:b4:24:79:56:08:
                    7b:2e:53:a8:4f:4d:1b:30:bc:ab:34:8a:04:9c:f6:
                    60:75:9d:05:1d:98:08:0a:1a:af:8c:96:ae:03:f5:
                    14:d3:62:11:db:0a:af:3c:3e:ca:52:96:7a:6e:13:
                    e7:cb:48:47:73:86:b2:2d:ec:e8:c2:89:46:c8:c3:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:E5:A8:62:C8:60:72:F1:81:90:05:CD:D6:58:70:AE:56:AA:58
            X509v3 Authority Key Identifier:
                keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:ff:ae:dd:e2:c7:ab:48:f7:6e:19:f9:86:eb:57:fc:91:
         81:91:13:1b:8a:cc:3b:bd:f3:3f:d2:dc:f9:d6:02:d7:1b:c9:
         c7:19:7e:bf:5f:0f:c4:49:8e:4e:4c:4d:5f:f8:fa:ff:75:66:
         c5:05:4e:d4:d6:7f:ca:91:2b:3d:96:b5:38:b2:3b:12:2a:b0:
         1f:c4:f6:8e:94:96:ec:24:b2:c8:ba:b8:fb:5a:95:5d:0e:c7:
         89:bb:b9:f0:ce:7d:c2:df:4a:30:42:24:e6:52:6c:6f:9f:60:
         c9:16:73:2a:05:3b:04:fb:69:10:75:95:28:ce:e7:32:ce:34:
         29:ca:47:24:fa:1d:78:1a:76:39:20:15:2f:ac:45:b1:c7:8f:
         15:87:9c:6d:50:79:92:4b:dc:1f:aa:0f:16:ed:24:ad:84:c4:
         84:c6:2d:d5:b8:72:67:c2:9c:a5:1d:33:ac:de:4d:a7:37:6c:
         e8:99:36:70:54:1c:30:72:88:58:07:aa:1b:13:c8:a3:3e:d8:
         a4:8e:83:bc:36:77:03:7f:62:19:be:b1:c8:ab:5f:c5:54:a4:
         02:00:7a:27:7e:03:ab:78:a9:f8:a8:13:ed:4b:bb:93:2d:bf:
         0d:d2:5b:30:18:c4:c1:91:85:8b:f1:c6:bb:b9:7a:e2:f1:22:
         d6:c6:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:44 2026 by rpki-client