Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          kDZUPT0o4ClC1iSxfMp7Tr6vwHrZKNfIIQ/gI+Y5BZ4=
Subject key identifier:   D8:EA:D9:C2:F2:3D:E4:55:73:D7:B1:69:FE:69:84:E9:4C:C8:54:EC
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       019D265F70041FF4371CBACAB0287DB742EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          130E
Signing time:             Wed 25 Mar 2026 19:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:21 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: 5LCWvFfTXt7z21LEXNlxXfXYbfQ4/nJ9f/8F9DRBK2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:70:04:1f:f4:37:1c:ba:ca:b0:28:7d:b7:42:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Mar 25 19:01:21 2026 GMT
            Not After : Mar 26 19:01:21 2026 GMT
        Subject: CN=d8ead9c2f23de45573d7b169fe6984e94cc854ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:c4:7a:c5:dd:12:fe:ac:74:5b:ce:ea:1d:
                    95:3c:ea:9f:da:f2:dc:32:84:b3:92:04:8a:20:2d:
                    3f:e8:2f:de:4e:8b:26:08:06:bb:44:78:ed:77:03:
                    d1:07:41:fb:26:cd:29:76:74:0d:01:5c:f9:94:09:
                    9e:20:ca:a5:12:d3:60:c9:03:e7:76:86:b4:46:21:
                    4b:68:8e:53:02:a4:34:4e:29:b6:bb:d2:e6:72:55:
                    ca:fb:27:57:08:c4:59:ba:c8:10:5f:26:43:5c:e0:
                    64:48:cc:d7:e9:a3:8f:83:04:ed:07:10:45:43:1b:
                    69:1f:af:1d:a1:ec:da:f5:39:67:6e:14:e0:00:6f:
                    27:69:73:60:67:80:8f:4d:43:50:93:9d:87:36:94:
                    c8:fd:5e:4c:9d:b9:98:8e:ba:9b:b0:da:f0:98:c3:
                    0c:a8:a3:53:d0:1d:a9:f6:c4:16:f0:f0:c2:d6:8c:
                    e4:8d:5d:2b:e2:0a:c4:4e:a2:da:c3:c4:32:9d:f0:
                    38:96:72:cc:9f:bc:e0:ef:26:7c:d7:3a:10:0b:79:
                    30:b7:eb:d7:ed:3a:97:9f:99:04:55:a7:df:0a:14:
                    28:30:aa:d9:04:4c:4e:b3:99:90:da:bc:26:00:5e:
                    03:fc:78:4a:6d:13:57:19:e2:9a:a8:b5:15:ca:8d:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:D9:C2:F2:3D:E4:55:73:D7:B1:69:FE:69:84:E9:4C:C8:54:EC
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:70:dd:87:6e:24:e0:f6:04:08:5f:83:d7:9f:4e:96:96:
         6c:1c:08:a1:7d:56:42:c6:e0:d1:53:e6:6e:53:2c:a6:60:5e:
         ac:83:b7:be:86:93:02:99:c6:e0:8a:45:d6:e1:00:51:78:2b:
         48:c2:29:3b:96:49:6f:8c:06:e0:f2:5e:12:fe:c9:af:e2:06:
         fe:9b:50:bc:74:c7:ff:c9:79:b5:1c:fd:71:df:e6:b1:bd:d1:
         f1:a7:98:54:fe:ed:2e:b4:e1:85:35:f9:80:cd:4b:01:e3:4c:
         d8:14:8a:6e:f7:e9:19:c4:1b:50:0a:5e:c6:71:c3:4d:90:41:
         24:01:6a:c6:05:91:d0:f1:71:ba:f7:5f:78:f7:1b:05:8c:a5:
         6d:f1:8d:78:6c:4b:d1:ef:a2:cf:93:94:47:a1:cf:c0:24:83:
         2f:97:ee:ff:14:4c:5d:5f:43:01:f5:ce:91:20:1c:c5:66:45:
         0a:9a:0c:c3:57:e0:4b:87:0b:94:aa:60:b2:a4:21:9e:8f:36:
         7f:cc:69:8c:c4:21:00:a5:5c:cc:24:38:91:9e:f1:5a:b5:90:
         f3:30:03:fe:29:f4:68:75:c5:b9:e0:39:a9:d6:3e:14:1f:84:
         6e:cd:2e:99:b9:03:2b:6e:d9:cb:45:af:03:8e:07:03:52:59:
         10:c3:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:39:15 2026 by rpki-client