Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File:                     fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier:          0EFhOISgvXBYGJ1/u2av6EnFztvvHpLsi8G53yxgof8=
Subject key identifier:   BB:7F:FE:74:7A:F5:FB:04:3D:63:CE:89:88:80:96:31:F9:77:BF:C4
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer:       /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial:       019D27A9253E103B01F8758593CE429B0ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number:          0865
Signing time:             Thu 26 Mar 2026 01:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:29 +0000
Files and hashes:         1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: zymRbKmZdbX/lSZ2gzIQbFAN/bFmFmxzFsi4FVZsCiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:25:3e:10:3b:01:f8:75:85:93:ce:42:9b:0a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
        Validity
            Not Before: Mar 26 01:01:29 2026 GMT
            Not After : Mar 27 01:01:29 2026 GMT
        Subject: CN=bb7ffe747af5fb043d63ce8988809631f977bfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:07:48:0a:c7:f4:42:75:cc:48:ea:da:a3:
                    f5:8d:cc:e9:01:2f:60:72:36:37:ef:05:c6:d6:bf:
                    5c:17:34:9e:02:cb:24:d6:3e:ac:4e:0e:24:a8:d9:
                    33:ff:25:a2:67:1f:ae:38:10:09:6b:99:76:f3:58:
                    c2:c8:22:b6:ac:20:8a:45:75:7a:7a:a0:39:3d:76:
                    69:17:b2:7f:0e:41:4a:b1:c2:ea:1f:90:6f:13:02:
                    85:d7:c3:fd:65:42:ab:b1:94:44:11:ca:57:39:dc:
                    0a:02:e7:4c:dc:77:f6:2e:8e:a5:7c:e5:36:d7:c4:
                    c1:6e:cd:e1:42:8a:64:7b:8b:e8:a4:54:d3:d4:72:
                    af:ae:74:61:62:c2:0d:b5:1a:4f:50:c1:8b:4d:58:
                    e1:f8:dc:8a:21:c0:e8:80:aa:e6:8a:e5:80:cf:30:
                    c9:37:8e:f6:1c:2c:18:64:5c:85:b9:8a:9e:5d:de:
                    3c:10:b8:e0:ad:a4:ef:ef:c9:8a:af:1f:8a:2f:c5:
                    51:b3:9b:b9:2c:e1:84:bc:2e:66:64:4c:b7:3e:1c:
                    85:a1:95:a0:d9:30:0b:80:b2:cc:2d:2b:cb:33:8e:
                    2e:fe:e5:3e:6b:47:37:92:a6:e8:ab:18:3a:d0:28:
                    c7:c4:85:9e:9f:4b:3b:63:63:02:73:b5:98:12:79:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:FE:74:7A:F5:FB:04:3D:63:CE:89:88:80:96:31:F9:77:BF:C4
            X509v3 Authority Key Identifier:
                keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:df:6c:87:04:57:c7:88:9d:4b:aa:e8:4f:70:05:65:7a:91:
         33:cf:22:eb:de:55:da:09:ec:3c:9d:54:56:e1:21:25:34:0d:
         8e:e4:ec:5a:33:55:42:f1:fa:3a:43:02:c5:35:01:2a:7c:55:
         40:62:e2:c6:66:48:96:f3:f3:d4:bb:3b:68:7e:28:48:8c:e1:
         2e:41:06:aa:ca:6a:6c:44:d1:69:51:e7:f0:ee:04:67:c7:cc:
         fe:c5:9b:ae:d6:f5:7d:0c:4a:15:cf:98:e7:8e:eb:64:5d:c9:
         94:20:a3:57:ae:28:72:e2:5c:6e:84:aa:6a:5c:ab:e7:b7:e6:
         1f:f7:c6:77:b9:c7:7f:28:05:7c:27:02:03:81:d0:96:29:9a:
         18:13:87:cd:19:2d:aa:d1:d7:ba:9e:f4:50:a5:8e:2d:d8:43:
         c0:1c:fb:74:a7:c4:27:49:e1:4e:da:b3:eb:c4:33:e7:fd:e6:
         bc:b3:c2:af:ee:af:34:63:e0:29:e7:5f:d9:8f:cb:6c:cf:06:
         54:d4:92:00:2a:44:8e:7e:6b:66:62:c7:9a:59:1f:1a:5c:9f:
         98:a8:a0:a1:49:44:9c:e0:bd:3b:68:d8:d1:17:1a:ce:72:b8:
         8f:b0:65:29:06:2b:ff:7d:9b:0c:79:52:68:87:36:e2:d4:c8:
         72:d7:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:09 2026 by rpki-client