Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          y4IxOXv+cwaInpfyMJlx7O56IjHJVeceXJPGAQ90Q5A=
Subject key identifier:   1B:5D:7C:94:98:15:BF:8B:12:C5:5A:DB:07:93:7E:A5:7F:BA:52:E8
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       019D2A04AFC0CE622F0FB3AF83C1886DAC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          0A0A
Signing time:             Thu 26 Mar 2026 12:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:43 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: /r+kzY7CaLLydITNfuh7STYmXqh9RP9ZSVS0wfSpdJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:af:c0:ce:62:2f:0f:b3:af:83:c1:88:6d:ac:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Mar 26 12:00:43 2026 GMT
            Not After : Mar 27 12:00:43 2026 GMT
        Subject: CN=1b5d7c949815bf8b12c55adb07937ea57fba52e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:c1:a7:53:96:e7:af:ee:9c:cc:55:11:08:
                    2b:cb:f2:74:f2:8a:74:d5:77:45:72:b4:76:7d:bb:
                    66:eb:12:d1:d8:d0:70:6a:fc:b0:05:3f:76:41:48:
                    63:1e:93:27:46:c5:e8:ce:af:e9:48:ff:04:6b:52:
                    5b:e4:87:48:18:99:cd:36:ea:01:65:e8:94:f2:3a:
                    29:e6:4b:c6:16:e9:c9:dc:2e:e0:41:1f:15:5a:02:
                    89:17:eb:64:4d:bd:2e:da:5e:96:55:1c:bf:9d:fb:
                    9e:b1:1a:9b:cb:69:2d:db:4c:f1:ed:8f:1f:6e:da:
                    52:c2:c9:e7:f2:6a:be:48:ae:f8:2f:d6:68:57:b0:
                    52:79:7b:0c:e7:c2:bf:09:d4:75:3e:f6:c5:f0:f1:
                    e3:97:ea:aa:a4:55:e9:c4:7e:8c:86:d7:d3:25:a7:
                    b0:4c:53:ce:11:02:67:42:d2:29:55:bf:58:d6:b7:
                    3a:6a:f2:e7:5d:1e:99:fb:72:25:3f:17:51:bf:47:
                    0c:c4:c6:70:74:06:a5:9a:aa:09:03:99:e5:62:53:
                    95:88:0a:73:97:d2:81:a7:70:4e:ab:7a:0f:a1:43:
                    61:dc:12:3b:2a:68:ba:6a:c2:7c:80:d5:9c:e4:aa:
                    32:7e:49:24:15:ff:93:82:8c:c5:2b:23:35:b4:c4:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5D:7C:94:98:15:BF:8B:12:C5:5A:DB:07:93:7E:A5:7F:BA:52:E8
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:24:36:18:47:9d:8b:25:8b:74:f7:66:0f:4c:cb:23:1a:ac:
         97:e7:24:31:92:c1:df:80:d6:4b:ff:93:bd:94:55:ab:2a:0d:
         57:e7:c5:14:27:4b:5a:6f:84:8d:9d:10:1e:6d:07:d3:57:e9:
         27:44:63:bd:ba:63:c2:13:81:0a:d0:c6:7a:ec:1c:d1:62:2c:
         d0:36:55:6d:e5:98:07:01:c9:4f:d3:33:e7:74:09:5b:8f:ea:
         73:7c:c0:07:fa:88:51:ac:2b:d3:b6:c1:37:1c:62:24:f1:84:
         97:64:28:e1:2b:0b:78:9f:62:5c:5d:ce:8f:1b:38:46:ee:34:
         9e:b7:17:b8:be:b2:a9:fb:4c:40:9d:8d:95:c1:d9:81:3c:25:
         c7:99:c0:5b:1f:7d:d9:4b:69:cf:51:bc:ca:23:40:c4:25:95:
         32:82:e9:32:9b:61:25:f7:00:c9:e5:5e:b3:f9:a8:22:3d:52:
         51:d7:7d:66:76:ce:0c:95:48:c7:26:e9:13:e5:d5:e2:da:ea:
         d6:78:3d:ea:b4:62:39:3e:7b:37:ba:48:6f:4c:ba:c6:b1:5a:
         e4:25:8a:fb:c1:ad:61:79:c7:aa:fe:3d:c9:01:37:32:5a:8a:
         47:2c:5f:9c:5a:d8:78:cf:2a:80:f1:38:b7:17:5d:a2:0f:02:
         7d:5a:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----