Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          gtZPhB09rBzZPV1x1upYOC++CZ439YtgjrfDesZZMNc=
Subject key identifier:   FD:AC:1B:8C:BA:63:0B:8C:67:7E:C0:8B:C1:0E:B7:48:54:B2:E8:49
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       019D284E32F0B82F177AD61A666A3C061A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0EB3
Signing time:             Thu 26 Mar 2026 04:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:46 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:46 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: skzFrCsrPuAGZAfRL0tBt2hs/YZnptJLB2pt5iVgXGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:32:f0:b8:2f:17:7a:d6:1a:66:6a:3c:06:1a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Mar 26 04:01:46 2026 GMT
            Not After : Mar 27 04:01:46 2026 GMT
        Subject: CN=fdac1b8cba630b8c677ec08bc10eb74854b2e849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:23:92:6a:9f:d9:a5:08:99:55:86:cf:f4:
                    b8:f2:b8:23:50:c2:3e:96:dc:15:43:4e:9d:ee:15:
                    19:e3:d0:d4:16:55:d2:18:ff:78:75:8c:89:35:79:
                    61:91:99:03:29:11:41:f1:07:03:79:8b:3f:b8:25:
                    54:1d:ed:b8:91:f6:84:50:51:44:1e:ce:7d:b2:e1:
                    d9:8a:b2:db:0f:1b:24:34:e5:2a:7c:3c:2e:7f:fc:
                    19:d8:2b:f1:77:aa:dd:07:7f:63:c2:c3:bd:06:5c:
                    1b:03:96:09:bf:08:ce:4d:a6:d0:cc:ca:3d:33:d1:
                    76:ad:9a:61:99:f0:4b:4c:6e:f0:19:c4:3d:ac:f2:
                    f6:89:48:cd:20:4b:3d:ad:8e:ef:24:0c:7f:c1:b9:
                    a5:65:22:69:07:76:6d:91:a2:34:56:52:ce:22:ca:
                    15:09:e4:d0:c8:b1:38:f1:44:8b:f1:38:99:6c:0a:
                    27:3f:45:21:c5:2c:39:fb:28:19:7c:67:72:e7:03:
                    53:1e:d1:c0:5b:e4:2a:9d:e0:25:d7:5b:f8:71:bf:
                    34:a2:7d:27:32:a9:37:1a:fc:e1:af:97:d1:06:2a:
                    f8:b0:fd:05:41:96:67:0e:c2:04:01:55:7d:a7:85:
                    ab:a0:f5:ab:0f:97:ec:2e:4d:24:6c:a7:0a:72:35:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:1B:8C:BA:63:0B:8C:67:7E:C0:8B:C1:0E:B7:48:54:B2:E8:49
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:67:c7:07:93:65:64:a5:90:3c:8a:54:11:be:e0:83:23:
         1e:43:52:ad:1e:56:fe:4e:a0:4e:f1:d1:c8:3d:4c:2d:a7:0a:
         9c:22:1f:5a:7a:39:0c:b8:3b:20:6d:26:0f:f5:e8:88:77:14:
         b1:0c:5a:89:fd:ad:80:4b:1d:a6:a3:c4:b0:79:e0:10:e2:d9:
         61:ad:7d:50:2c:bb:e3:a0:bf:5e:be:54:46:43:91:6c:c5:15:
         ae:48:33:b2:bd:ac:5d:fe:39:27:9e:f0:a2:d1:f6:ac:27:10:
         30:7a:2e:91:46:df:80:48:bb:10:16:72:f0:e9:94:6a:e0:25:
         bd:d2:d0:a2:40:08:8a:7f:a7:66:a4:34:fd:e3:d1:2e:61:78:
         15:70:2e:9d:c1:23:9a:a9:92:71:ac:6d:3d:d4:09:37:1c:64:
         c7:df:b3:3e:4c:e7:1e:b3:70:c6:bf:3f:77:92:ba:ce:11:88:
         97:0b:c2:df:00:c1:d8:09:10:ce:6c:01:72:5b:93:4b:96:e9:
         e7:cf:40:28:99:e9:7e:9c:0e:3a:86:b6:8f:0c:f2:c1:08:37:
         99:c0:c8:a6:a3:75:13:fc:34:cd:1c:43:3b:58:60:53:46:78:
         e1:af:5f:97:c8:aa:f1:26:68:c8:3c:44:34:2c:f4:3b:53:b8:
         95:1a:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:29 2026 by rpki-client