Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          /jgeVKPuidSe7QLDdTksmzgjO27rAFVRQ3q87WAkdss=
Subject key identifier:   32:67:F0:89:61:0E:5D:D9:6A:ED:D7:72:C3:E7:7A:B9:60:F5:82:36
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       019D38655B285BF64B6DE3F05CA4EABBF30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 07:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 07:00:59 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: pi6K8K22We0oI5/NiyeCsVPfvrSw8DpBHpHKhrF3Fyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:5b:28:5b:f6:4b:6d:e3:f0:5c:a4:ea:bb:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Mar 29 07:00:59 2026 GMT
            Not After : Mar 30 07:00:59 2026 GMT
        Subject: CN=3267f089610e5dd96aedd772c3e77ab960f58236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:b3:8d:06:32:23:d8:a6:0e:d6:5d:ad:c0:
                    29:2a:b4:b5:bc:ac:39:24:77:62:a2:5c:77:1b:0b:
                    5a:52:cc:05:d5:3e:95:e9:ad:44:d9:a0:1c:32:32:
                    86:db:2a:55:7f:a0:9b:f4:0d:46:3f:dd:54:42:f6:
                    21:58:1f:90:ba:e0:51:10:89:78:60:a0:78:4e:c1:
                    b0:6b:73:94:62:bd:7a:02:6c:32:ad:d3:f8:b2:01:
                    7d:7e:14:d1:ea:f4:de:32:ed:2a:f6:d8:35:92:d0:
                    fb:c7:59:dc:45:f8:16:f7:fd:15:e0:53:65:ce:cd:
                    ae:9c:2c:bd:8a:b1:9d:47:8b:7a:63:f1:71:0d:0b:
                    d5:a5:8c:f1:ea:44:af:e2:a3:e3:42:c8:74:97:bb:
                    5b:82:19:d4:ea:ba:d8:81:24:cb:7a:9b:8d:80:00:
                    5c:0c:b5:c2:42:24:d0:45:84:99:4b:d7:b6:f7:71:
                    b5:0d:af:6c:4c:20:3c:06:35:da:f5:4d:63:9f:71:
                    f5:5d:41:5e:e5:74:9c:52:f3:25:20:a1:8d:71:7c:
                    ac:a9:e7:40:4a:0d:49:80:ff:d0:c4:cb:f6:0c:ea:
                    6a:94:55:7d:54:41:68:8f:38:13:40:56:b9:83:1a:
                    77:ce:f4:42:6d:1f:df:df:e1:a8:e6:2f:de:ee:9a:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:67:F0:89:61:0E:5D:D9:6A:ED:D7:72:C3:E7:7A:B9:60:F5:82:36
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a0:3d:67:22:29:de:f2:30:b9:17:7c:d5:35:5d:35:60:72:
         7f:0a:7c:fa:4b:cd:4a:a2:22:5f:96:6a:bc:37:3e:40:3c:00:
         0c:ad:86:8f:94:47:89:3d:fe:1c:bb:79:bd:8f:25:02:d1:f3:
         20:69:ca:aa:98:fb:19:1e:b9:df:53:39:99:b5:cf:a6:73:b0:
         73:af:25:e7:4a:0a:9e:6d:c0:4d:8c:8e:a8:31:06:79:53:70:
         3c:07:88:2a:dd:ee:71:4d:89:aa:a7:fa:7b:2f:85:86:76:6e:
         85:2c:cd:80:aa:dc:00:a5:17:d2:d4:b8:f7:c7:8f:64:9e:10:
         a3:ab:22:33:6a:5f:66:81:d5:22:ce:02:c8:6d:22:1a:2c:fb:
         e8:2f:a8:c9:74:c3:9d:e4:96:8f:00:e8:bf:ac:87:50:c3:9c:
         cc:3b:ff:64:ac:34:50:94:bb:d5:69:59:a8:18:37:60:77:d1:
         ec:12:c1:f8:40:52:58:b2:eb:64:ce:1c:11:79:3b:01:50:4f:
         8c:f3:a8:10:1b:03:a2:7a:a2:5b:05:81:d5:8f:9f:71:f3:ff:
         87:e2:67:11:1f:da:01:89:ab:d6:c6:54:5c:3d:6d:4b:bf:c3:
         fb:19:b0:42:7d:00:5b:2b:62:a8:28:e5:e9:bc:9b:f4:99:61:
         c6:04:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:03 2026 by rpki-client