Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier:          /SHytXwZM9iY5vNB/Xc7H7hQclaKsFBDa8Ortl3zMb4=
Subject key identifier:   92:82:1C:76:C8:B3:F6:D3:C8:8E:C8:5F:F2:13:5C:D5:33:F5:1B:51
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer:       /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial:       019D25F0F30C1EB8E8849B87A924579A2A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number:          0F65
Signing time:             Wed 25 Mar 2026 17:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:40 +0000
Files and hashes:         1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: PrPgsLSzdJd78lCOKQTFCPUPQ+ao4sdFi6UWwWIx08k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f0:f3:0c:1e:b8:e8:84:9b:87:a9:24:57:9a:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Validity
            Not Before: Mar 25 17:00:40 2026 GMT
            Not After : Mar 26 17:00:40 2026 GMT
        Subject: CN=92821c76c8b3f6d3c88ec85ff2135cd533f51b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:4d:cc:5a:73:63:d3:fb:1f:25:fa:c2:26:
                    e3:a6:70:95:e7:cb:f0:45:17:cb:ee:09:08:62:c5:
                    53:2a:66:d5:c5:5c:f9:76:4a:c6:87:89:d0:1a:bf:
                    38:32:01:48:83:7f:8d:02:0c:63:3c:77:5c:70:bb:
                    f5:50:83:02:6c:ce:46:57:c4:0a:80:10:31:88:d1:
                    bd:5c:de:6b:83:09:dc:32:4c:ed:d8:b9:4b:c7:96:
                    97:51:d4:47:d8:e7:ab:ca:c4:da:6a:9d:c4:3f:c5:
                    70:75:54:ae:aa:27:51:f9:64:1c:29:e1:5f:7f:0f:
                    64:8e:05:f5:af:30:4c:3e:60:32:d3:ed:94:b0:a4:
                    0c:14:f5:19:dc:dc:8f:32:f7:cf:8e:b5:b2:c1:7f:
                    43:29:f7:0d:b3:19:07:b7:36:1f:ee:69:2c:74:36:
                    00:59:2c:1c:5d:f6:cd:36:94:b1:36:c3:46:56:c0:
                    2f:3d:cc:ac:3b:92:93:80:69:d5:4d:c3:78:8a:38:
                    cb:1b:ad:ec:96:f5:f9:60:d0:3f:8f:27:38:4e:0b:
                    d2:a5:db:fe:0d:ff:39:5d:46:b0:bd:f1:58:77:4e:
                    3a:12:e7:ca:f2:11:43:3a:e5:86:a9:01:9b:87:0f:
                    6a:00:39:d0:6c:fa:d5:06:c1:da:5a:a7:cd:cb:92:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:82:1C:76:C8:B3:F6:D3:C8:8E:C8:5F:F2:13:5C:D5:33:F5:1B:51
            X509v3 Authority Key Identifier:
                keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:bc:8d:28:f8:09:9d:71:52:34:8e:a9:d8:06:c1:c6:46:
         7c:26:69:17:c9:a1:d1:76:a5:dc:ef:63:bb:25:11:38:4a:4f:
         11:8d:d9:51:e7:90:46:82:f4:1a:9c:27:f1:24:31:f5:61:e0:
         1f:da:d8:3d:5e:9d:5a:39:52:99:17:42:cc:fb:4a:6f:48:db:
         2d:95:ff:aa:18:49:61:33:37:65:89:cc:c3:b2:b7:82:32:33:
         7a:fc:51:f0:5a:1f:95:4f:63:e0:d1:28:1a:ed:97:dd:fe:bc:
         06:1d:a5:e5:0e:47:51:12:ce:fb:61:57:f5:19:6f:25:b9:e1:
         9d:3b:60:86:02:5f:98:0d:a6:23:12:6f:b9:b6:89:88:70:6b:
         91:3a:c1:0d:03:ae:59:5d:d3:04:36:0e:75:fa:d7:6c:c2:30:
         92:62:26:1f:17:b0:f9:5c:61:ab:f5:aa:60:6c:ed:31:84:5f:
         86:6f:d6:4d:0b:c0:db:c1:95:89:f1:da:ad:2b:e5:8b:96:11:
         bd:29:87:05:e2:4e:08:24:f2:32:c3:fa:9e:44:a2:ee:76:53:
         02:35:90:37:67:75:97:b8:8d:74:a6:0d:e8:ce:a8:18:6c:15:
         66:55:ed:c4:f3:f2:c9:27:16:85:3e:8f:ab:60:8a:6a:3c:97:
         23:e8:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:05 2026 by rpki-client