Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File:                     xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier:          krI/5okf8uCW7ZY9BurOJ2Jaaby5rNM0ng2lanIY0tA=
Subject key identifier:   4B:4B:AB:D3:3E:54:8E:15:F9:0B:AB:A0:51:FC:20:CD:E6:23:67:43
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer:       /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial:       019D31BE5F2EA1245F212C45B9F39875C488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number:          1887
Signing time:             Sat 28 Mar 2026 00:00:52 +0000
Manifest this update:     Sat 28 Mar 2026 00:00:52 +0000
Manifest next update:     Sun 29 Mar 2026 00:00:52 +0000
Files and hashes:         1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: kHbn6mtGZ0UywPWkLxypXS8bULJqYxbJDREXqI2QTis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:be:5f:2e:a1:24:5f:21:2c:45:b9:f3:98:75:c4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
        Validity
            Not Before: Mar 28 00:00:52 2026 GMT
            Not After : Mar 29 00:00:52 2026 GMT
        Subject: CN=4b4babd33e548e15f90baba051fc20cde6236743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:4b:fb:28:54:50:fe:17:00:5f:61:74:6d:
                    ac:43:fc:4c:53:7a:68:f6:a3:20:b5:0b:d0:55:7f:
                    26:b8:67:8d:8a:14:bd:35:61:9e:15:09:00:cf:d4:
                    80:34:49:12:db:a1:62:96:ef:8b:51:a3:65:1e:90:
                    90:ed:c1:a4:93:94:8a:9d:55:26:15:e3:39:fd:60:
                    6c:13:8a:70:f8:e4:c9:d1:34:0b:cc:c7:79:24:2a:
                    70:cc:58:a9:23:8b:52:2d:1a:aa:e2:07:cf:13:41:
                    3d:93:38:d5:d6:8b:9e:06:82:65:93:46:42:6f:34:
                    97:cd:35:e2:84:2a:01:48:ad:5c:25:48:0e:fc:8c:
                    8a:9f:2f:55:ae:b0:1c:fc:cc:31:db:6e:5a:06:08:
                    1a:4f:37:bc:27:b3:0e:0a:01:6b:90:17:95:99:8f:
                    1c:30:bf:0b:dd:a6:bd:23:bf:66:a1:33:ec:69:16:
                    f4:9a:f4:bc:65:03:45:db:fa:2b:3b:b6:7a:60:f8:
                    dd:d3:e2:8c:8a:58:8f:75:b2:21:ec:59:c6:0d:62:
                    0d:ce:cb:72:8d:8f:30:44:52:a7:c5:6b:4f:3e:18:
                    80:b6:5b:32:4c:f7:d2:99:e9:0e:05:98:e5:ee:81:
                    4f:04:99:b9:e7:81:cb:46:7c:34:6a:f5:20:bf:13:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:AB:D3:3E:54:8E:15:F9:0B:AB:A0:51:FC:20:CD:E6:23:67:43
            X509v3 Authority Key Identifier:
                keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:ef:e9:7a:3a:7b:c2:05:4e:c0:72:83:c9:c5:30:6c:4e:
         51:4a:06:1e:45:3c:34:e5:85:ff:00:b1:3a:31:2e:60:ce:bf:
         83:30:31:af:cb:8d:2a:c8:4e:b8:1c:8a:2b:74:c2:d3:fd:cf:
         bf:91:d9:11:8f:a0:0a:fe:4c:e5:b7:aa:6d:83:e0:e8:74:f5:
         b3:c7:d7:d7:c3:31:d4:64:0a:44:c1:86:a2:23:f1:fa:5b:b4:
         03:e9:7d:b6:bf:bd:c6:5a:2e:30:a0:9f:72:e5:1a:78:aa:9a:
         03:8a:25:c2:f5:8c:8d:b1:a9:ba:cd:db:7e:b7:99:d7:a1:51:
         73:9e:35:d4:1d:99:29:f1:d9:84:07:a0:04:4c:64:33:41:65:
         0b:b4:d5:10:65:e1:ec:f2:b0:d7:68:8e:df:0a:33:39:7a:ab:
         ae:1b:bb:a3:e4:f2:79:b5:a1:88:ac:ac:42:85:0e:42:de:72:
         2a:2b:d6:2b:cb:72:33:7d:6a:32:1a:e6:40:7f:a1:8c:8d:ca:
         0a:03:ef:1c:70:2b:41:81:a6:d4:1f:3e:71:f4:99:db:dd:62:
         3f:d7:5d:68:1b:ea:9f:5a:d8:34:f8:c1:f4:d8:4b:a0:c9:6a:
         1a:3e:7c:e6:6b:ff:0b:fa:d4:2e:36:e5:16:6c:a0:71:30:01:
         10:76:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----