Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
File:                     Ek9FSJdR7bdg5nMi9lqQykncpB4.mft (raw, json)
Hash identifier:          66rrfEmvPbEW1+oq5rkG0ukUaiAH62aw9+f1ezvcAI4=
Subject key identifier:   AC:DD:19:18:92:68:59:52:FD:92:B9:98:82:77:1A:58:C8:59:D3:12
Authority key identifier: 12:4F:45:48:97:51:ED:B7:60:E6:73:22:F6:5A:90:CA:49:DC:A4:1E
Certificate issuer:       /CN=124f45489751edb760e67322f65a90ca49dca41e
Certificate serial:       019D32636420FCDE402788A71981ED792C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
Manifest number:          0F
Signing time:             Sat 28 Mar 2026 03:01:07 +0000
Manifest this update:     Sat 28 Mar 2026 03:01:07 +0000
Manifest next update:     Sun 29 Mar 2026 03:01:07 +0000
Files and hashes:         1: Ek9FSJdR7bdg5nMi9lqQykncpB4.crl (hash: VAiWj+V0W70KvZkhAnqh9d6SLFJuI2bDVBUTZ/gZetg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:64:20:fc:de:40:27:88:a7:19:81:ed:79:2c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124f45489751edb760e67322f65a90ca49dca41e
        Validity
            Not Before: Mar 28 03:01:07 2026 GMT
            Not After : Mar 29 03:01:07 2026 GMT
        Subject: CN=acdd191892685952fd92b99882771a58c859d312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:4a:e2:9e:da:fc:d9:47:a5:5b:3b:2f:0f:
                    80:ca:78:cc:1b:c8:31:0c:6d:45:55:6c:93:0d:42:
                    16:a2:fd:b7:f1:a8:06:19:60:a5:1b:71:75:fc:89:
                    4e:81:19:59:7d:90:6c:3b:52:f7:38:18:7c:fb:d6:
                    2b:ed:a4:a0:df:7f:63:99:68:c9:4c:6a:d9:db:0d:
                    49:e2:5c:e0:a4:95:89:87:d9:b7:ac:76:22:19:55:
                    12:c2:31:88:46:27:01:ee:a1:ca:40:05:4d:32:02:
                    17:71:3c:3f:d0:7a:69:3c:9c:99:7d:a9:9c:bc:f3:
                    d9:e5:58:75:8f:4d:8b:6a:4b:ca:c1:f4:24:c7:fd:
                    4d:5b:09:62:20:94:c8:1a:db:b5:55:7d:53:c0:c1:
                    56:85:71:4d:4a:5a:c4:a1:55:0f:92:d1:23:09:d0:
                    40:68:83:b5:c6:e6:9b:0c:82:2d:57:a5:98:08:92:
                    ef:97:6c:89:b0:5b:5b:60:cd:9f:87:b6:ff:25:be:
                    a5:af:cc:13:05:f5:72:7f:7f:66:0d:5a:7e:56:25:
                    9a:c3:b0:a8:5c:61:26:32:8a:29:3e:bf:94:17:45:
                    ec:91:c1:d6:59:43:14:1f:d1:79:21:e3:fe:bc:4c:
                    de:cd:ce:ff:5d:8d:f9:80:be:4b:d1:07:a5:9c:c6:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:19:18:92:68:59:52:FD:92:B9:98:82:77:1A:58:C8:59:D3:12
            X509v3 Authority Key Identifier:
                keyid:12:4F:45:48:97:51:ED:B7:60:E6:73:22:F6:5A:90:CA:49:DC:A4:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:32:83:74:a9:8b:0c:ff:44:9d:ee:73:a0:25:c8:fc:d0:
         39:2e:0b:63:39:56:9c:b8:ad:08:22:07:6b:c2:9e:f3:69:50:
         00:20:69:de:5c:27:c5:2a:31:46:1d:7c:ca:78:e7:56:d2:1c:
         1e:11:5f:99:f3:c2:67:90:a3:cb:a5:6f:79:fc:d1:86:35:36:
         01:91:9d:3b:12:2b:25:6f:f1:87:a2:28:c6:d6:85:d3:1c:3f:
         4d:e6:4c:b5:8e:91:dc:b6:3f:38:5f:e8:bb:d4:1d:6f:20:cb:
         94:79:5d:0f:9d:cf:6e:78:8c:6f:9c:0a:e5:48:56:ff:c1:fd:
         8a:4c:4b:6f:08:99:d7:ae:32:c5:9f:d0:12:75:14:31:a0:db:
         2d:18:eb:cf:41:06:ff:98:6f:65:a3:72:37:53:b1:05:61:4a:
         10:28:b5:3b:31:b6:d3:e8:a9:7e:d1:3d:6f:38:7b:7d:fe:83:
         f1:3a:d3:ea:31:42:41:85:e2:4d:45:a7:25:99:4d:82:b7:c5:
         71:fb:87:ed:6f:1f:14:a4:f7:95:44:e7:75:54:48:2e:6d:8e:
         fa:cc:e0:4f:28:a0:3d:16:f7:35:6e:ff:f2:51:ae:74:c7:72:
         dd:a7:ae:f7:96:5f:d4:9c:d7:b4:25:f3:19:09:1a:58:e1:78:
         b0:40:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:20 2026 by rpki-client