Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          3nnHYJgsqTib4eaCsdUF/LbSzxPJJZPKPpD+npsZbHU=
Subject key identifier:   4E:1D:2C:9B:F5:9C:F5:25:D6:43:CB:8B:1C:99:D5:92:BC:DF:EC:93
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       019D28168B4BE0F0D9C4B2E609CC008F0217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          0F66
Signing time:             Thu 26 Mar 2026 03:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:59 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: 012fkLkJkuuTf2FmSS3dZxre0uXEzzmjTZBTD2C+HTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:8b:4b:e0:f0:d9:c4:b2:e6:09:cc:00:8f:02:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Mar 26 03:00:59 2026 GMT
            Not After : Mar 27 03:00:59 2026 GMT
        Subject: CN=4e1d2c9bf59cf525d643cb8b1c99d592bcdfec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:4f:60:2c:e2:ba:74:d2:73:93:36:3e:29:
                    c9:cb:0b:44:65:6d:70:18:9a:53:d7:8b:2e:30:8f:
                    9f:5e:8a:dc:c3:fb:11:95:a3:d2:d6:42:86:bc:1a:
                    84:b3:1c:73:1f:f5:2a:65:b2:ce:93:7d:45:53:13:
                    fa:90:05:d0:44:08:99:7c:a6:3a:8b:9b:8a:23:36:
                    26:b3:6a:33:42:b8:98:4f:44:8b:53:4f:11:3d:a9:
                    31:34:55:e5:db:72:04:91:53:40:c7:f8:5a:d6:25:
                    fc:c0:b6:97:f4:31:6d:f4:a0:ae:f3:23:e3:5e:09:
                    9a:9c:ba:ec:32:ae:c8:f7:3f:ab:f6:6b:72:8d:fe:
                    21:13:d5:9b:96:1b:1a:20:25:84:49:2b:1b:eb:f7:
                    a5:fd:4b:81:c0:4d:31:16:7c:dd:b4:6a:10:70:65:
                    45:5e:40:90:49:1a:1b:c1:57:36:8d:12:c8:2e:73:
                    1c:ac:02:55:dc:53:f0:50:d1:36:ce:cf:43:31:ab:
                    f8:b0:e4:42:79:46:8c:2a:40:11:1f:ef:43:89:ab:
                    38:d7:4d:a6:13:fd:17:1d:f3:5b:fa:7e:44:94:63:
                    16:a6:c9:19:df:48:96:19:dc:4b:05:a7:e8:f8:fb:
                    31:15:fc:7e:c9:50:55:94:6a:fa:4e:3a:ec:b5:35:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:2C:9B:F5:9C:F5:25:D6:43:CB:8B:1C:99:D5:92:BC:DF:EC:93
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:7f:fe:86:30:10:22:01:73:25:e7:f2:2a:18:ec:5a:59:
         17:42:35:20:46:a0:2d:a6:fe:06:cb:a6:77:6e:4b:f8:a8:68:
         7e:e2:b7:3d:c9:68:e6:fe:b5:0b:ea:cc:9c:08:a6:b1:70:eb:
         1c:98:04:0d:d5:35:9e:71:1e:74:9d:ad:e6:18:73:f2:40:d3:
         a9:c7:cc:5b:3e:3d:9e:32:aa:b7:14:24:21:03:38:2d:0d:b6:
         fd:8e:45:35:3e:37:06:ed:cf:d0:8b:af:fc:f8:0c:01:64:05:
         d0:20:d8:a1:66:e4:70:2b:2f:f3:a4:a3:7d:86:3e:41:c9:9b:
         1f:d1:bf:a2:c6:21:0e:a5:a6:1f:02:13:6b:46:d6:0e:1f:35:
         bb:0d:c4:4d:be:20:d5:95:8f:9c:29:8f:7b:15:9d:bd:11:e5:
         71:cb:4b:09:d3:99:59:6a:10:ed:10:2a:69:00:66:16:09:32:
         76:da:36:c9:5d:cb:3e:03:67:c5:22:0c:5d:d6:8c:f6:d1:d8:
         a8:c7:8e:da:9c:c2:47:fe:e0:d4:08:3e:22:f3:88:39:45:55:
         06:40:11:81:33:27:68:40:58:60:16:a4:b8:1c:72:d6:04:4c:
         65:6b:0d:6f:f5:ab:d1:7d:9f:94:03:4d:09:fa:7f:92:45:55:
         97:bf:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----