Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File:                     kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier:          hfh510durTR+wwTXrUXXo/tkcsoxNNY21gahIdSa4gI=
Subject key identifier:   07:CB:5C:12:D6:63:C1:3E:DA:14:A2:7F:8E:E5:95:CC:83:1F:E8:C5
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer:       /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial:       019D265F759C96C90B5FDD63A3C1FF6D7953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number:          02A7
Signing time:             Wed 25 Mar 2026 19:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:23 +0000
Files and hashes:         1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: Inv/uDUKMw+EEFE1Z/CItBJS1s1JA064UMPF2Bkt6QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:75:9c:96:c9:0b:5f:dd:63:a3:c1:ff:6d:79:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
        Validity
            Not Before: Mar 25 19:01:23 2026 GMT
            Not After : Mar 26 19:01:23 2026 GMT
        Subject: CN=07cb5c12d663c13eda14a27f8ee595cc831fe8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:a2:d1:94:47:a9:c0:c3:17:b2:c8:df:5a:
                    4b:35:6b:0c:6a:fb:68:fb:d9:a6:fe:5f:f8:bc:6f:
                    8a:61:82:67:1d:06:95:ff:e0:4c:6e:38:91:12:1b:
                    42:f3:c9:9e:af:ff:46:24:aa:f0:5e:7d:e3:8b:5c:
                    e1:9b:0f:93:9b:36:96:f6:e1:d2:e6:cd:88:c9:0c:
                    7c:04:bc:15:d5:5a:db:d8:f2:3f:17:37:f0:c9:4c:
                    da:4d:88:43:df:fd:d8:67:e1:82:a8:d3:b6:7b:32:
                    40:c0:b4:3b:1b:ff:b8:08:4a:d6:41:80:54:74:3d:
                    2a:25:b7:83:f3:a2:3e:67:ef:95:33:eb:db:c3:71:
                    13:47:bc:cd:b2:dd:1d:2c:eb:b0:a0:e4:f5:e8:a5:
                    b0:11:61:01:f8:9a:9e:b8:67:41:c2:f4:90:ac:32:
                    69:d1:91:27:45:ee:1c:67:7f:2d:3e:b0:a7:2d:ac:
                    da:2c:b2:ed:e9:82:96:dc:a9:03:e5:ee:f2:d1:ab:
                    9f:34:b0:fb:d9:97:e4:d4:8f:26:eb:20:7b:88:be:
                    6a:0f:1e:ef:72:ee:fc:54:6f:73:7e:c3:b9:b7:fd:
                    2c:fb:7e:69:2d:28:e1:35:7d:84:8b:55:7e:b5:43:
                    cd:75:f0:4a:20:03:72:9c:52:35:1d:c5:e4:57:1e:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CB:5C:12:D6:63:C1:3E:DA:14:A2:7F:8E:E5:95:CC:83:1F:E8:C5
            X509v3 Authority Key Identifier:
                keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:6d:7a:c1:a5:13:33:1b:8d:c9:f6:34:9f:45:c9:98:0f:
         8e:75:dc:75:12:46:b8:46:3e:da:62:04:34:44:42:db:91:d6:
         40:86:ed:2b:28:f6:1d:64:ac:1e:e2:90:9d:4c:05:29:ca:d4:
         a3:39:a2:67:96:fb:98:99:44:7d:a0:63:a7:c1:82:99:15:0c:
         ff:bb:4f:a1:d8:93:ea:79:4e:ea:55:9c:9c:0a:71:dc:90:fe:
         ed:7b:a5:21:42:3e:68:e5:60:57:f6:f6:47:c4:b1:08:b4:92:
         fa:d8:95:a3:82:d8:56:e4:cc:2e:cb:27:a8:f6:09:87:15:33:
         05:e4:78:13:f9:09:bc:80:3c:04:fa:22:67:ba:75:17:15:27:
         8a:e2:91:d3:2a:35:36:08:3c:2d:91:12:8b:ac:61:b2:2d:e8:
         d6:0b:73:e3:16:d5:9a:0d:22:36:38:a2:a9:aa:8f:c2:0b:0f:
         71:94:af:10:63:7b:79:96:7e:83:db:f0:b5:1b:a0:a2:8a:60:
         1c:8e:3c:6c:24:c7:4d:31:de:73:02:c9:24:60:78:e8:1b:51:
         bf:b0:f9:02:07:b2:e1:5e:a6:9a:7f:99:bc:0e:e3:3d:a9:7f:
         1b:a1:a5:d0:a4:e8:4a:6f:ab:b3:0d:43:2d:94:81:67:a9:23:
         4a:3e:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----