Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File:                     jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier:          Uk/4XS6Hm+ZrhwEtxp/vHIs9VopgexUxaAW6h0qltPE=
Subject key identifier:   01:85:EB:50:0E:8D:10:64:CC:AB:1A:F6:13:63:E8:BE:4A:BA:FD:36
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer:       /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial:       019D284D98FC2492BF7BF1E456DA9AAB3A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number:          1882
Signing time:             Thu 26 Mar 2026 04:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:07 +0000
Files and hashes:         1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: /bVBptvakQU7TsAZyughmFZq/QVr5jWV3hPWynZbdLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:98:fc:24:92:bf:7b:f1:e4:56:da:9a:ab:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
        Validity
            Not Before: Mar 26 04:01:07 2026 GMT
            Not After : Mar 27 04:01:07 2026 GMT
        Subject: CN=0185eb500e8d1064ccab1af61363e8be4abafd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:a0:b1:33:35:e2:46:af:89:68:82:6f:8c:
                    97:8c:7c:92:d7:76:60:c7:1d:01:44:69:bf:e5:5e:
                    d0:3f:f2:b1:02:8c:7c:01:12:01:fe:6c:b5:6a:fb:
                    0e:26:3b:0f:70:75:41:dc:cf:f6:f7:01:7b:6f:ad:
                    99:5f:0c:e6:0a:9b:e1:4a:f7:08:74:de:e8:59:51:
                    01:e0:d1:2c:93:f5:f3:37:f0:2e:b8:27:19:f5:73:
                    31:a4:68:c1:64:10:12:ba:22:1f:63:df:0f:c6:a2:
                    ae:81:c9:9a:e4:aa:a7:b1:55:81:e5:b0:b0:9c:5f:
                    85:10:f3:53:07:74:50:0c:8f:80:18:98:36:ac:dd:
                    02:51:3a:42:aa:15:23:8d:54:a2:67:03:a9:ed:e1:
                    ea:97:38:00:0d:11:e1:ab:cd:5d:73:29:76:90:81:
                    8b:44:13:2b:d5:16:88:f7:f7:ed:73:5b:90:92:fa:
                    8d:54:72:0e:ca:ff:5d:6a:1b:ae:c6:08:ca:d4:e1:
                    39:06:d7:98:f5:0e:e8:97:17:a4:96:14:09:e9:3e:
                    bb:b0:f9:3e:e9:a6:7a:7e:59:6d:4d:da:f9:8e:73:
                    bd:6d:99:26:e0:bb:e3:3d:4c:16:e0:5d:45:f5:55:
                    42:c7:bf:83:f5:0e:f1:13:21:36:12:1b:69:4d:d0:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:EB:50:0E:8D:10:64:CC:AB:1A:F6:13:63:E8:BE:4A:BA:FD:36
            X509v3 Authority Key Identifier:
                keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:16:a3:00:9d:b7:08:9d:99:67:b4:05:75:92:2b:ac:af:
         65:f6:b1:b1:d7:93:b3:33:d0:b9:4a:48:ca:90:8d:b0:7c:62:
         2e:13:7c:ca:64:33:d5:25:6b:29:b2:3f:1f:fa:4b:33:55:b4:
         4b:4a:61:6f:ee:df:51:79:c6:77:b5:71:e7:5c:de:e1:1d:48:
         75:dc:45:ee:5b:7d:4c:d7:0e:90:fd:ec:63:7c:35:2d:c6:37:
         81:c6:14:4c:2c:8f:83:58:69:80:ff:60:92:5b:fa:6c:80:1d:
         7d:2e:be:d3:3b:ce:86:ba:0f:b7:cd:a4:09:f9:c8:5e:44:d6:
         aa:9d:58:b4:1a:68:b8:cf:25:72:e9:c5:2a:db:78:28:e0:e6:
         23:95:27:0f:05:cc:26:5e:65:db:42:d0:76:72:a6:c0:2f:26:
         52:4d:10:09:c9:2c:55:6d:4b:c9:e2:ef:36:b7:14:ed:b3:3a:
         83:1f:70:30:22:c0:5b:6d:2c:be:70:74:fb:99:36:d6:9a:9a:
         88:e9:a6:ff:68:b0:52:d4:52:36:4d:43:7c:60:ee:ab:e5:7b:
         bd:dd:07:32:a5:5c:de:8e:d3:ed:67:d9:5e:90:4d:6b:d0:8b:
         b3:26:6a:be:ad:cf:2a:c4:89:0c:a6:47:37:8d:70:87:94:13:
         ae:11:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----