Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File:                     tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier:          rgiHWNraFFYitUO9ZvMERmvFxNOQXzGiv/DTSxORMzE=
Subject key identifier:   05:56:A9:EE:F3:48:43:03:72:C2:FC:A3:01:02:45:8B:14:F7:37:9C
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer:       /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial:       019D329A68C33F3EB6EE216E4413BC35BF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number:          108F
Signing time:             Sat 28 Mar 2026 04:01:13 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:13 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:13 +0000
Files and hashes:         1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: sXEkCuylM3WranGSK4bIUL5dDEuU8+VgMgAgaEPMD+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:68:c3:3f:3e:b6:ee:21:6e:44:13:bc:35:bf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
        Validity
            Not Before: Mar 28 04:01:13 2026 GMT
            Not After : Mar 29 04:01:13 2026 GMT
        Subject: CN=0556a9eef348430372c2fca30102458b14f7379c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:af:e4:5c:b0:2f:81:8a:21:80:4d:fa:6c:
                    94:63:3d:2f:4f:91:ce:68:b6:2a:5c:4e:b8:3a:19:
                    6c:c0:65:86:2d:db:ba:83:0f:26:f4:d3:18:08:b1:
                    a5:8d:0e:bc:e0:c0:c6:8c:ee:b8:41:37:70:46:92:
                    32:1c:38:55:fe:51:40:ae:5e:5b:8b:32:e4:6c:a1:
                    7e:cd:72:8f:29:ba:65:8e:5a:00:a8:bf:2f:fd:75:
                    74:73:98:a4:52:68:aa:8d:a2:b0:8b:8d:d2:cd:74:
                    fd:f7:78:e0:c5:cb:0a:7f:5b:34:cc:16:f0:5c:9b:
                    9a:b2:70:2e:ba:6c:d9:d6:a9:f3:03:f4:8d:e7:69:
                    ad:07:6e:c6:ff:92:2c:c8:3d:ac:07:86:40:7d:74:
                    f6:60:1d:35:f4:ad:b1:21:54:41:25:1d:65:50:a1:
                    77:68:22:8b:4e:fd:3f:7a:e8:e5:fa:50:1d:d2:1d:
                    b2:1f:fe:3b:89:1c:a1:dc:44:41:46:49:0a:39:fc:
                    72:04:ce:83:ea:55:15:d9:b8:83:ef:93:0e:fe:b2:
                    cc:7f:79:e8:48:8d:d3:59:01:2c:9b:86:d6:08:f2:
                    3a:65:0b:3e:fd:1d:aa:a8:6a:58:08:66:1b:7d:cc:
                    af:6a:d5:c0:1f:a8:f1:52:6d:81:5a:cc:af:71:93:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:56:A9:EE:F3:48:43:03:72:C2:FC:A3:01:02:45:8B:14:F7:37:9C
            X509v3 Authority Key Identifier:
                keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:89:5e:fc:26:51:16:37:e0:d3:cd:57:12:7c:18:99:88:
         34:6d:bb:d9:14:1c:50:06:3d:fd:5b:49:68:da:b6:8e:b5:f7:
         98:b3:40:5e:f2:90:35:8a:2a:ac:e3:69:91:73:ae:8e:e0:ab:
         11:5f:d0:81:b6:bb:89:78:32:48:88:1c:30:9c:a4:e1:e9:9f:
         cc:9b:c3:60:15:c8:53:83:e2:49:ac:2c:77:09:69:cc:eb:34:
         f5:d0:f2:cf:bc:51:3b:f3:0e:bc:34:de:97:fa:d5:47:6b:e0:
         4c:ae:4a:eb:bd:73:af:47:b2:30:05:5d:7c:f4:07:6e:4e:39:
         94:af:8b:81:42:a1:45:e1:24:2f:da:58:7c:d5:e9:1a:50:02:
         b0:48:a4:bc:be:5e:50:60:9d:17:04:b4:e3:c3:cd:11:ae:01:
         9e:3b:1d:80:ac:e4:d8:76:a1:b2:1b:70:67:99:bd:69:11:d5:
         72:b5:99:bf:89:39:c4:bb:82:f3:20:38:e6:61:ec:06:4e:d8:
         5c:06:a0:38:5b:ec:2b:ee:22:bb:f7:44:6b:9d:5b:f1:ac:0b:
         a9:5d:dc:cc:50:c8:7c:f9:3c:e2:45:81:00:92:6f:20:2a:6d:
         87:21:2e:cf:44:fe:45:09:b0:4d:4e:8e:c6:d7:9a:f8:63:72:
         f8:2e:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:25 2026 by rpki-client