Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.mft
File:                     _H4V6VSNTS4t1ALjkZ7j8MOC_50.mft (raw, json)
Hash identifier:          MEFjm6ev58vhIZ9YUaIWpSnUs6+z3W5rFhr86Kf4G3c=
Subject key identifier:   47:EC:13:3A:26:EF:5E:4E:34:48:B1:76:15:8C:EC:65:B3:3B:50:17
Authority key identifier: FC:7E:15:E9:54:8D:4D:2E:2D:D4:02:E3:91:9E:E3:F0:C3:82:FF:9D
Certificate issuer:       /CN=fc7e15e9548d4d2e2dd402e3919ee3f0c382ff9d
Certificate serial:       019D33AC90DEE8CFD6CB71EF036675CABF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H4V6VSNTS4t1ALjkZ7j8MOC_50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.mft
Manifest number:          25
Signing time:             Sat 28 Mar 2026 09:00:40 +0000
Manifest this update:     Sat 28 Mar 2026 09:00:40 +0000
Manifest next update:     Sun 29 Mar 2026 09:00:40 +0000
Files and hashes:         1: _H4V6VSNTS4t1ALjkZ7j8MOC_50.crl (hash: 0WSSy+5iB12DiHUoNt3q3olTVDs2vHzOmNJeRYeCcXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H4V6VSNTS4t1ALjkZ7j8MOC_50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:ac:90:de:e8:cf:d6:cb:71:ef:03:66:75:ca:bf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7e15e9548d4d2e2dd402e3919ee3f0c382ff9d
        Validity
            Not Before: Mar 28 09:00:40 2026 GMT
            Not After : Mar 29 09:00:40 2026 GMT
        Subject: CN=47ec133a26ef5e4e3448b176158cec65b33b5017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:14:3c:f3:f0:05:1b:b8:44:6e:d9:e1:e9:
                    cb:7e:08:d2:45:ff:1b:93:aa:93:b1:91:3d:4e:99:
                    31:1d:5a:55:03:f6:95:40:b5:3a:59:b3:84:25:71:
                    e8:56:a7:b6:29:57:16:0a:f6:7a:7c:22:d0:dc:0c:
                    a1:28:ae:61:d5:1d:f7:2f:5e:0a:27:d0:86:91:1b:
                    07:37:e0:b6:ef:65:0c:90:00:b1:5b:f2:77:3d:f7:
                    8e:ee:9f:0a:39:13:b8:33:af:d5:ba:0c:3b:1f:b0:
                    e8:88:a1:3a:8f:a5:91:0b:4a:54:09:37:60:3d:cf:
                    95:41:5f:1e:47:53:9c:21:e1:ac:5d:24:6a:17:a5:
                    ed:7c:ee:c0:a5:00:ca:51:82:fc:da:22:44:69:b2:
                    8e:b7:d0:2e:4a:c8:d8:4e:2b:18:df:d1:36:5a:6d:
                    cb:d5:aa:61:85:dd:d8:49:e3:3c:b9:e9:50:b5:ca:
                    70:ae:55:7e:d8:37:b3:0b:d0:7e:9e:35:98:a9:d7:
                    0d:4b:7c:07:cd:f6:e6:41:5c:ef:19:45:3f:77:1b:
                    0f:0a:0a:4c:87:39:81:44:55:89:cd:47:54:2e:82:
                    22:e2:09:d1:4a:f3:0e:3c:bf:06:6a:b4:bf:a5:c0:
                    96:b1:96:20:94:df:ab:ba:0e:93:40:6e:c4:a1:aa:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:13:3A:26:EF:5E:4E:34:48:B1:76:15:8C:EC:65:B3:3B:50:17
            X509v3 Authority Key Identifier:
                keyid:FC:7E:15:E9:54:8D:4D:2E:2D:D4:02:E3:91:9E:E3:F0:C3:82:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H4V6VSNTS4t1ALjkZ7j8MOC_50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/013472-22fe-4cc7-930d-298c4836b29d/1/_H4V6VSNTS4t1ALjkZ7j8MOC_50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:4e:08:65:35:08:11:48:6f:8c:47:c2:1b:16:5b:9a:aa:
         0f:f8:b3:23:86:6c:5e:59:d8:e1:dc:c7:0e:18:c2:a0:91:76:
         22:6f:2e:a5:75:f4:87:ac:26:ba:8c:15:44:ba:b8:59:69:3c:
         bf:78:2e:2f:67:58:8f:59:e7:c2:85:4f:29:62:01:eb:5f:bb:
         96:11:ce:5a:9d:91:54:fe:bb:4c:9d:ca:66:6e:50:c8:e6:2e:
         b6:81:2c:cc:e7:fc:6e:f1:1f:f7:29:6d:ba:ce:41:8e:44:70:
         9e:07:53:13:88:74:27:da:48:47:e8:e0:50:7c:e1:df:b0:63:
         1e:8d:ae:f4:a0:39:cd:c0:57:70:e3:a7:d1:8f:5c:01:d2:f8:
         d5:8f:df:84:a9:5d:4f:0a:de:2d:82:ba:bb:ea:42:f7:da:14:
         33:6e:ba:cf:e9:2b:13:ce:8a:72:93:3f:c3:83:4e:b1:ae:2c:
         7f:21:c1:7b:02:c3:39:f9:df:22:a3:3a:c1:6a:ee:b9:e6:7f:
         f8:9b:de:ad:14:90:e3:dc:5e:38:79:c1:59:04:6e:11:88:40:
         34:9d:0f:ba:73:f8:e3:af:84:5b:e3:73:06:3b:a1:06:45:63:
         07:a1:4a:8d:30:a0:b2:4f:0c:e6:96:37:ee:2c:ec:c6:be:6e:
         0b:d1:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:07 2026 by rpki-client