Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
File:                     7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json)
Hash identifier:          X7lfrzrbtEI6FGCmZEN4uKmsmcFNZKhGyRNlKr8o9yM=
Subject key identifier:   44:57:0F:2A:97:0A:F3:20:FA:F1:F4:01:72:6E:D8:21:30:A8:D6:6E
Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69
Certificate issuer:       /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
Certificate serial:       019D2AE046422A139AEC6B852AD74EE02F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
Manifest number:          0169
Signing time:             Thu 26 Mar 2026 16:00:34 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:34 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:34 +0000
Files and hashes:         1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: ReyEWKyLBL+i4cCg4PKxvEVWMk8/x4PRg7fp7u4PcNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:46:42:2a:13:9a:ec:6b:85:2a:d7:4e:e0:2f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
        Validity
            Not Before: Mar 26 16:00:34 2026 GMT
            Not After : Mar 27 16:00:34 2026 GMT
        Subject: CN=44570f2a970af320faf1f401726ed82130a8d66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:84:0f:61:90:49:a0:98:de:b1:eb:d1:cd:
                    a3:4f:ff:2c:58:70:c5:dd:65:fe:32:9f:25:93:0f:
                    34:62:0e:fd:84:bb:bc:5e:26:ef:de:7c:1e:22:04:
                    32:4a:2b:3e:c6:f9:72:4c:9a:e8:c4:a4:eb:82:63:
                    74:9d:b4:89:4f:4e:35:49:c4:c1:34:c3:52:11:e8:
                    9a:01:6a:02:60:06:84:62:df:7c:12:28:63:fd:22:
                    ca:2e:c6:76:11:1c:21:5f:62:b9:54:81:cd:0b:a3:
                    13:9a:87:aa:cf:c9:cd:2b:86:69:54:bb:ae:98:78:
                    7b:e9:e7:5b:6c:f0:25:d0:54:a4:5e:72:d6:85:60:
                    f9:43:b3:b8:1a:f6:4f:86:73:89:30:16:31:b0:4c:
                    9f:9e:96:cd:d0:3f:4a:5b:dd:94:93:81:c8:cd:ca:
                    72:8f:85:65:15:ec:d3:7e:a8:17:98:17:b8:11:c8:
                    6a:15:c8:c9:3a:89:b8:4c:c3:a7:89:23:1a:e5:34:
                    c3:2b:fd:fc:ea:23:93:f8:1e:49:a9:64:0f:29:70:
                    48:01:e8:96:4b:04:cd:8d:0d:61:1e:80:10:c8:06:
                    b4:e8:2e:af:1b:f9:20:44:d6:c6:a2:75:1e:d9:16:
                    b7:9c:35:da:68:46:4f:3d:5c:7c:0b:b3:a4:6d:fd:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:0F:2A:97:0A:F3:20:FA:F1:F4:01:72:6E:D8:21:30:A8:D6:6E
            X509v3 Authority Key Identifier:
                keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1c:ae:0e:43:28:d5:ca:87:ca:76:f7:ab:16:b7:f1:6d:fa:
         1c:d6:68:b2:df:38:62:a6:f3:7a:8b:5b:f4:ae:63:d2:4f:4d:
         11:63:10:db:4e:87:11:76:72:a4:a5:28:7b:06:41:0b:5f:4f:
         46:06:3c:86:60:bb:43:13:d9:d9:3c:d8:ab:d9:b0:da:fc:b6:
         88:b9:ff:4e:5f:2e:27:43:c0:7c:8f:54:11:85:8e:54:27:94:
         80:df:04:97:c2:24:45:ab:1a:bd:ca:87:9c:87:bd:e6:9d:3c:
         ce:64:7e:b9:ca:a5:44:bf:61:4d:3e:b6:95:74:83:bb:b9:f1:
         45:6e:7c:a8:a9:f3:d9:98:2a:26:44:20:85:a1:19:67:ce:c9:
         15:61:e1:52:1a:1c:10:1c:2a:ea:49:5d:0c:18:89:da:1d:fb:
         02:3f:13:f1:94:6c:50:65:fc:f7:43:fa:66:57:1a:94:c2:5b:
         a9:13:46:a2:e0:dc:c1:a8:d3:be:7f:ec:89:3a:1d:8d:9c:13:
         a2:31:e8:9e:b1:05:7a:c6:36:42:5f:15:8f:c5:36:b6:56:76:
         a8:ff:c6:a0:7c:0f:82:9a:26:cc:10:6a:1d:84:e9:27:57:f0:
         40:8a:b0:45:83:a9:99:94:05:0f:99:b6:f2:27:82:ae:68:bc:
         4d:93:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:10 2026 by rpki-client