Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          1e243d0DY9+O3KGa/aKuF+CXHC0maeYLJXiDqAXG3HY=
Subject key identifier:   EB:29:20:9E:0E:33:14:E0:C5:3E:D0:51:27:E6:03:C3:8C:84:66:45
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       019D37C062726F063DD0713922858F94FD73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          1376
Signing time:             Sun 29 Mar 2026 04:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:48 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: RnN/hMI0qAQaS1PJ+4WTjLuI+keO7Zy2bysjrQJoywg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:62:72:6f:06:3d:d0:71:39:22:85:8f:94:fd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Mar 29 04:00:48 2026 GMT
            Not After : Mar 30 04:00:48 2026 GMT
        Subject: CN=eb29209e0e3314e0c53ed05127e603c38c846645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:9d:e0:ac:4c:2a:96:df:ea:f4:58:d8:86:
                    a9:d8:e9:c3:e0:46:fc:70:1f:65:d2:5d:9f:74:64:
                    78:8e:a5:13:86:89:c1:2d:8f:ec:83:24:6c:e0:9e:
                    fb:4d:7c:f5:71:ea:4c:d2:71:ad:04:a7:10:a7:45:
                    17:97:d7:cd:6a:7a:73:79:d9:02:90:65:28:48:78:
                    41:4e:3f:88:2c:8f:0b:29:f6:3b:c7:e5:d3:67:b8:
                    60:8a:09:e0:4f:3a:0b:8a:50:86:c7:e0:fd:fa:27:
                    72:e5:f8:41:2b:c0:06:df:0f:61:a0:20:da:2d:d9:
                    05:9c:66:ae:aa:af:67:92:a3:c1:d7:a2:91:a1:58:
                    46:ce:c0:44:31:98:58:6b:2c:20:52:f3:fe:a4:9f:
                    db:1b:1f:97:c3:0d:bc:85:64:b2:e3:30:d3:f9:7a:
                    b5:a5:c4:b7:21:d4:c8:53:f8:97:c0:fe:57:c3:fe:
                    03:d7:7c:35:bd:49:85:d2:58:ba:a4:75:c3:43:5e:
                    29:06:81:b1:9c:e9:c8:e8:09:f2:5f:99:12:15:63:
                    f9:d0:6f:57:88:fa:06:fc:c4:8e:4b:7c:23:c0:34:
                    89:1b:7f:a3:74:04:15:b8:70:0b:ba:13:7f:ae:95:
                    74:b5:5c:0b:88:86:ef:a2:cf:06:ca:a1:4e:bd:13:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:20:9E:0E:33:14:E0:C5:3E:D0:51:27:E6:03:C3:8C:84:66:45
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:47:ff:d2:2d:3b:8c:58:bf:65:fa:a6:05:86:86:f8:45:74:
         f5:2c:fd:ef:71:82:1b:25:0b:34:bb:d8:ba:bd:f9:f8:cd:f6:
         a4:d3:75:95:e8:cc:fd:af:32:21:42:3e:1c:0d:5a:e5:b5:06:
         84:81:b9:a6:91:99:99:b7:50:02:e3:bc:93:9c:96:0b:f4:0e:
         3a:c0:e6:51:52:73:bc:03:60:1f:b9:48:54:1d:08:8d:ba:37:
         78:7b:81:fa:a0:b0:4c:68:77:90:af:ad:a5:ba:77:97:9d:31:
         2e:a5:43:22:55:cf:39:38:e0:b7:b1:8c:d4:ab:1a:1e:f5:c7:
         4e:0c:f8:34:06:93:0b:dd:c7:95:a2:a7:ac:80:f0:8f:4c:5a:
         a7:53:ea:aa:02:c3:25:be:54:9e:60:a6:15:00:46:2f:eb:6a:
         0d:86:d8:86:15:7a:f2:ef:c6:12:82:60:10:79:51:00:f1:fb:
         67:9c:6b:0c:f0:28:a7:ca:26:92:db:02:8c:10:3f:2f:5f:51:
         d0:03:91:de:15:b9:d3:3e:37:c0:6f:56:7f:63:02:ff:51:e4:
         67:49:71:87:3c:10:7e:95:19:9e:4f:b4:0b:67:15:b4:14:f9:
         05:2d:80:b6:0a:b8:a7:53:6d:31:bb:03:5b:27:4a:07:9e:d0:
         81:4d:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:47 2026 by rpki-client