Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          HuEjtfRtClGDwiRSIENFX/af6X4GzTKdj8aFOheIwU4=
Subject key identifier:   43:25:D0:D6:F6:0C:F5:64:40:A3:E1:8E:41:28:30:2B:F0:92:E2:56
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       019D28F24586BB768DCDA951348DD09F49D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          083E
Signing time:             Thu 26 Mar 2026 07:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:59 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: jgdPlNXr9zKwOiJEtFdsdMK+o25nD+QNODtWkC/BEPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:45:86:bb:76:8d:cd:a9:51:34:8d:d0:9f:49:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Mar 26 07:00:59 2026 GMT
            Not After : Mar 27 07:00:59 2026 GMT
        Subject: CN=4325d0d6f60cf56440a3e18e4128302bf092e256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:b0:0d:e8:03:cb:b6:fc:f5:e0:af:5b:c0:
                    7a:c7:c2:48:f8:87:82:fe:db:d1:f5:89:cd:9a:83:
                    62:8a:f6:0e:2c:d0:f1:70:b3:e3:b7:4f:b1:ed:df:
                    a3:8d:c6:7c:9a:e2:ce:ff:3a:21:fa:7e:f4:77:11:
                    04:2d:e1:bf:ef:0d:f1:b7:a4:24:2a:25:2c:51:f4:
                    a6:d6:37:86:43:aa:61:f6:7d:c2:72:c6:68:b7:05:
                    28:8d:59:26:e8:55:1d:a4:20:a1:08:1b:c7:ed:b9:
                    01:fe:c2:d5:fc:2c:34:6e:b9:0e:10:05:dd:5e:0f:
                    23:8a:0c:0f:a6:54:14:a6:ca:6a:f0:16:a9:e0:ea:
                    7a:60:7e:f2:b8:9e:ca:3a:a5:96:4a:7c:80:ac:53:
                    25:a7:f9:22:5f:d3:1b:27:e7:e9:68:55:2c:2f:a7:
                    9b:fd:76:51:16:70:00:19:c2:4f:e5:a9:28:ce:6f:
                    0e:45:3f:c5:ff:97:eb:a2:5f:84:08:2f:e8:5a:bf:
                    b8:62:fa:7d:4d:39:c5:82:b5:80:94:ce:ea:7d:18:
                    17:34:80:63:6a:85:c5:c1:a8:2f:c3:50:36:ac:82:
                    2e:eb:21:10:e2:d9:6e:65:65:63:54:1d:3e:a6:fb:
                    57:1a:15:8e:c4:19:a4:27:78:75:9f:fa:2a:34:bc:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:25:D0:D6:F6:0C:F5:64:40:A3:E1:8E:41:28:30:2B:F0:92:E2:56
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:70:46:e2:3f:e6:ee:ab:f0:db:7e:bf:43:84:dc:e8:32:04:
         fc:bd:4c:7f:9c:ea:88:e2:fa:fa:d2:e9:82:a1:0b:7b:20:9b:
         70:7b:56:d6:be:56:d2:69:1d:90:05:21:ec:2c:22:db:d3:87:
         25:15:9b:72:2f:01:b6:69:46:3d:60:55:b1:39:07:da:56:db:
         3b:5b:79:f2:f6:fa:af:e6:01:5a:b5:2f:ca:a7:d8:4d:6f:1a:
         0f:a9:01:5e:58:59:7b:08:67:e0:a7:a8:a0:af:8f:47:60:c8:
         6e:af:c6:43:e7:4d:b4:2b:f2:13:8f:29:66:55:fa:4b:92:9f:
         64:2e:4c:23:37:63:5c:da:b2:11:63:b2:84:46:d9:b5:22:c2:
         7d:c9:0e:aa:90:bb:a9:55:dc:9a:c3:e5:09:80:0a:7b:b4:ba:
         ea:54:2e:84:d8:ef:b7:f4:04:7f:73:45:96:cc:63:f1:c0:89:
         04:96:34:70:27:1c:3a:a4:2d:b5:e1:40:70:15:d9:6c:33:38:
         67:08:28:d6:1c:73:b4:25:1a:f1:cb:ba:f0:ac:02:8c:7c:ed:
         b7:6e:4d:c3:39:8f:77:5a:5a:07:e8:19:08:cb:33:7c:54:75:
         49:ef:62:8c:78:eb:c1:fc:61:cc:ee:8e:2f:8a:c7:e3:4a:ba:
         8d:de:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:46 2026 by rpki-client