Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          lYK4XJ5GsgEZfUfH0U4gI50ePX0c3Mw4/aXa/l+SxJE=
Subject key identifier:   27:DC:22:EB:9C:C8:C1:77:15:9E:EE:FC:1A:54:13:91:C9:B1:C5:65
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       019D2703E62314532B857463553180403979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          0A5A
Signing time:             Wed 25 Mar 2026 22:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:00 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: IZbeqsLMQl/9bLM3G+JW+NwgxFt2Kb2esS9jImUYpqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:e6:23:14:53:2b:85:74:63:55:31:80:40:39:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Mar 25 22:01:00 2026 GMT
            Not After : Mar 26 22:01:00 2026 GMT
        Subject: CN=27dc22eb9cc8c177159eeefc1a541391c9b1c565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:04:bd:e4:d6:87:f1:88:1d:eb:71:4c:d9:
                    5c:7e:05:79:5f:b7:d5:6d:1a:ea:3c:33:00:3d:d0:
                    6c:ec:c3:08:38:5a:7c:7c:11:45:01:c2:2b:55:db:
                    11:77:29:a1:7e:a7:93:41:f3:44:b0:a9:db:1f:f3:
                    34:19:7b:d4:31:01:67:45:cf:52:45:64:f5:8c:b2:
                    ed:15:89:6d:57:7f:63:1b:27:1d:d6:17:71:b9:fe:
                    9d:b0:ed:2d:da:b8:df:1c:b0:21:02:c8:c6:43:34:
                    db:3b:99:85:a0:c0:af:20:9a:13:22:5f:7a:be:b9:
                    ad:c5:ae:aa:71:ac:e4:97:bb:d6:2c:3e:00:11:53:
                    77:52:a9:ac:84:b6:70:0a:dd:68:97:64:02:6f:e5:
                    10:0a:79:24:4e:4d:72:50:fa:89:16:49:70:8b:9f:
                    95:54:e5:25:4c:79:9c:a2:0e:8f:a9:e3:0b:47:d5:
                    44:6a:a8:83:c6:91:c7:ea:84:39:4e:f6:41:f7:f4:
                    0a:c9:e0:ae:0a:8c:b1:70:4d:a4:c8:80:c1:ab:c3:
                    8a:90:78:75:07:36:9f:4a:a4:cd:db:a3:73:af:f8:
                    b3:8c:62:66:85:2f:c8:33:2d:0f:35:ae:01:54:b8:
                    45:5d:36:d3:43:63:f3:db:41:09:a9:a7:d6:5a:eb:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:22:EB:9C:C8:C1:77:15:9E:EE:FC:1A:54:13:91:C9:B1:C5:65
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cd:8d:51:ad:c5:9f:22:d4:f7:65:d4:62:0c:76:c8:dd:e2:
         bd:9c:b9:6d:3a:7d:ca:d7:b3:bc:7c:37:74:fa:03:a8:a6:85:
         5e:57:df:20:e0:96:de:6a:3b:83:1f:c1:3c:ff:c1:dd:00:7e:
         cc:54:36:28:49:56:e8:09:29:71:79:50:16:b8:04:85:b1:73:
         c4:4c:99:a0:49:b3:76:47:bc:2d:61:d9:d8:6c:3b:5a:18:11:
         d4:cd:93:60:df:ab:5d:77:1b:6d:6d:75:3a:f0:8e:79:8b:f4:
         c2:0a:a8:0d:a9:ca:a1:71:5b:02:3d:9e:33:36:6e:2e:fd:ee:
         8c:13:52:6c:b2:99:ff:72:33:40:0a:b3:f3:b5:42:0e:ac:f2:
         8b:b9:3e:0d:6b:03:db:43:22:bf:4c:7d:02:17:df:38:d1:07:
         a7:6a:78:05:cc:93:bf:a3:63:3e:72:c5:dd:e5:22:3e:55:de:
         4d:ba:4f:3d:f5:7b:3a:a7:d0:41:74:1b:2a:45:35:72:f3:20:
         2b:0e:5a:40:64:6d:4b:1e:7d:82:c5:d4:26:fd:f7:5f:d7:7b:
         73:0b:b4:39:69:38:fc:df:1c:95:d6:e6:97:22:5d:08:7a:5c:
         b4:ab:b1:01:c2:95:16:17:e7:b3:b6:50:17:d5:ce:cc:59:f7:
         4f:7e:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----