Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
File:                     RE6tbxE5qlv2Y80A_myq4UpiFRI.mft (raw, json)
Hash identifier:          2HJ8Rry7WECAVghImArUog2Fq/poVIImC4pH+eJVk1U=
Subject key identifier:   C1:0F:C5:0D:5D:08:A3:B5:36:E2:42:BB:82:E0:DD:E5:71:90:E2:F6
Authority key identifier: 44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12
Certificate issuer:       /CN=444ead6f1139aa5bf663cd00fe6caae14a621512
Certificate serial:       019D2960E19E149B0855537E2EF42FEF4C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
Manifest number:          01F7
Signing time:             Thu 26 Mar 2026 09:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:48 +0000
Files and hashes:         1: RE6tbxE5qlv2Y80A_myq4UpiFRI.crl (hash: XHM73dKjfIl9hu9jLjjmQ2CfNOs/rhm3y73SmVhvKQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:e1:9e:14:9b:08:55:53:7e:2e:f4:2f:ef:4c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444ead6f1139aa5bf663cd00fe6caae14a621512
        Validity
            Not Before: Mar 26 09:01:48 2026 GMT
            Not After : Mar 27 09:01:48 2026 GMT
        Subject: CN=c10fc50d5d08a3b536e242bb82e0dde57190e2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:99:4b:9a:68:96:79:56:af:a7:d1:48:14:
                    99:09:d7:49:47:43:b6:57:47:43:de:98:d8:5e:a1:
                    7d:aa:6e:a5:5d:cb:54:ec:2a:71:58:b4:0e:cc:03:
                    27:79:c1:30:d9:97:97:f6:29:30:0a:ef:0b:ef:f7:
                    a9:5b:a2:13:cd:76:d5:f4:cc:b1:39:e7:72:78:c4:
                    5a:80:fe:74:56:cf:3d:a7:d5:0c:b3:27:ba:17:0b:
                    90:42:0d:b0:e0:35:dd:88:30:5f:9b:70:e2:1e:34:
                    30:6a:cd:5e:ef:a2:98:44:d3:ec:eb:e3:10:90:29:
                    dc:ad:38:77:1e:6b:23:61:b6:8e:e0:b5:08:e8:33:
                    7d:30:83:b7:33:69:e6:83:f9:73:cd:5d:27:b4:2a:
                    93:a0:9c:64:42:4c:4f:5e:05:04:88:32:ac:ec:ea:
                    b9:dc:5a:89:e3:41:48:d3:57:50:fc:0d:be:8d:94:
                    4f:cb:67:c1:48:29:17:02:d2:a0:d2:90:47:a0:5c:
                    a8:4b:63:81:37:62:11:47:48:1e:9b:d3:42:a3:8c:
                    ae:4f:36:be:c7:bb:2d:2e:e0:62:51:d4:7b:58:a8:
                    9b:15:60:9f:78:ab:82:30:93:cb:f7:c2:97:82:f5:
                    2b:cc:c9:71:8d:1b:10:ec:c8:60:cc:08:45:37:fb:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:C5:0D:5D:08:A3:B5:36:E2:42:BB:82:E0:DD:E5:71:90:E2:F6
            X509v3 Authority Key Identifier:
                keyid:44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:b6:d7:7a:50:58:04:ba:57:93:7e:01:d3:73:b7:1a:07:
         e6:80:32:93:7a:9b:2a:fa:61:97:c8:ca:ff:ff:31:56:c3:f0:
         8f:ae:69:f9:82:86:50:d9:26:22:34:a5:46:42:dd:06:8e:35:
         66:4f:e8:96:03:00:f2:89:8f:8e:2d:6d:57:88:98:48:b5:d6:
         2a:59:80:5d:23:78:5f:91:bc:1a:52:02:0d:ea:ba:74:52:a0:
         08:16:e6:23:0c:4d:b2:cb:c4:d1:61:38:1b:e2:a2:e8:5c:21:
         43:d3:f4:0a:06:e3:44:32:13:aa:df:3c:6e:f5:9c:09:b5:ec:
         e4:ee:97:20:3d:43:1b:7d:39:10:98:1c:94:08:b3:17:11:80:
         0b:45:bd:15:14:17:88:a2:5a:0f:c2:b7:5e:3d:12:80:a0:85:
         2d:69:1c:d1:94:63:e5:8c:b0:e0:75:e9:8d:50:f8:35:c1:ac:
         08:47:f3:6a:46:4e:f2:6d:fd:0e:cf:fc:2a:4c:7e:ab:6d:23:
         05:6f:f9:e2:f9:6e:39:16:4a:42:c0:b5:39:94:72:76:63:06:
         35:2a:2e:59:03:f8:da:33:bb:6a:1d:f4:47:1a:f1:f4:04:fa:
         1a:5f:13:bb:00:ed:ec:f2:65:83:2d:7f:bc:cf:bc:3c:15:70:
         a0:53:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:16 2026 by rpki-client