Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          WNref63DXZ2Q+7QNflVUiCalOIgEllIA+HMTXAQ7Vj8=
Subject key identifier:   9B:7C:30:A5:53:DD:8C:02:DF:EE:82:9C:6E:69:8B:61:8C:F9:24:B2
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       019D28BB15711C3EEDD985E80293E7D310D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0D92
Signing time:             Thu 26 Mar 2026 06:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:42 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: SBBE2M2OWmpLvu1dLiXdEXEmdeef+IdK+I8SdENU2E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:15:71:1c:3e:ed:d9:85:e8:02:93:e7:d3:10:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Mar 26 06:00:42 2026 GMT
            Not After : Mar 27 06:00:42 2026 GMT
        Subject: CN=9b7c30a553dd8c02dfee829c6e698b618cf924b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:60:98:5a:d7:88:37:5b:88:05:68:34:ad:a9:
                    33:31:2d:6c:0e:94:f4:0c:3d:66:39:52:e0:22:b7:
                    76:6e:c9:0c:8c:5e:f0:d7:3e:61:ca:8a:b7:7b:89:
                    82:ba:31:17:c8:ca:3e:c1:aa:77:b0:a7:31:fe:9e:
                    67:97:a8:16:dd:df:6c:6b:85:21:5e:16:02:e9:73:
                    30:7e:07:52:e5:f6:fe:71:c3:a7:89:d9:52:9d:ca:
                    95:5b:47:82:a2:b1:ba:c2:ef:99:4a:6b:ac:20:1b:
                    a7:6b:3a:0b:74:2b:e4:6e:14:c0:14:af:ff:d3:30:
                    73:6e:b5:f6:be:d1:07:74:b6:4a:22:cb:29:ff:de:
                    8c:ee:73:20:e9:c9:c2:b2:9f:d5:7c:17:1d:d1:9c:
                    b2:ba:db:3c:72:5a:15:ab:48:66:1e:16:9b:a6:19:
                    b8:1d:4b:14:42:da:c0:2d:b6:05:e3:91:6f:e8:4a:
                    56:17:a9:7e:42:16:49:27:b7:62:1b:3d:47:67:ef:
                    93:82:e2:bd:c3:82:76:e3:a9:20:5c:db:47:91:ef:
                    7d:cb:3b:04:5c:ca:ed:c5:70:ec:fb:3e:6f:fa:16:
                    da:c9:17:5c:fe:96:7d:c5:58:29:bb:90:b5:3f:af:
                    c2:bf:48:82:ae:ef:05:e8:f2:f4:6c:4e:f5:4a:dd:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:30:A5:53:DD:8C:02:DF:EE:82:9C:6E:69:8B:61:8C:F9:24:B2
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:53:9e:eb:50:5d:54:01:64:6f:7d:10:6c:25:59:fb:98:
         19:8e:44:6c:32:0b:d5:27:87:83:e1:01:42:d7:96:2f:12:ac:
         10:77:95:e6:b7:91:ed:72:43:00:0f:60:14:d7:96:8b:88:47:
         94:20:ef:60:e3:95:dd:78:4e:66:a9:60:80:85:e9:be:f8:52:
         86:c8:c8:03:d4:2d:28:29:4e:bc:bb:a3:ee:83:94:c7:50:af:
         d1:bb:9e:40:be:60:90:c4:a7:ae:64:57:4f:6b:ca:ab:a6:16:
         bc:20:cb:e2:74:69:95:60:5f:e8:d1:ad:82:27:58:9b:db:12:
         67:fe:9e:2c:69:d9:ff:da:22:97:2b:dd:d4:d8:52:dd:ad:68:
         32:f0:de:34:32:8c:76:05:b3:65:40:9c:65:1d:86:4a:ba:4a:
         16:2c:c2:9e:83:55:fe:1c:2b:98:a3:4e:8d:67:8e:59:12:f1:
         db:55:d0:f4:50:a5:8c:5e:43:8b:0f:61:31:70:1a:ca:c6:44:
         3f:d7:4a:fe:0e:25:76:b1:2d:ff:41:11:b3:bc:d3:df:e8:a2:
         22:b0:16:c2:e0:4e:34:ce:4c:b9:49:d6:93:8a:87:34:c4:08:
         aa:64:b3:6d:74:de:dc:b1:c6:13:69:8a:9c:db:25:61:eb:79:
         06:24:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----