Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File:                     SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier:          820DCid1+7sJy3gp7CxRKkoQJ1TKiWw5xQpGf0OK1lc=
Subject key identifier:   10:D6:A8:BC:F6:FD:B0:95:B2:68:E4:25:86:B0:6B:AB:1B:F4:D3:2C
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer:       /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial:       019D38666E74E7A9F384245316542BB85FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number:          0600
Signing time:             Sun 29 Mar 2026 07:02:10 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:10 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:10 +0000
Files and hashes:         1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: pkSnxDLuxTt1r/PTh9J+8fUiZBDtpYIiG9wopvXzEHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:6e:74:e7:a9:f3:84:24:53:16:54:2b:b8:5f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
        Validity
            Not Before: Mar 29 07:02:10 2026 GMT
            Not After : Mar 30 07:02:10 2026 GMT
        Subject: CN=10d6a8bcf6fdb095b268e42586b06bab1bf4d32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:ab:c4:50:25:2f:7f:a9:90:a7:13:99:22:
                    c5:cb:d3:cc:22:3d:cd:79:e6:61:92:3a:b5:5e:b6:
                    1c:4f:89:ff:49:41:2a:8e:25:ad:be:7c:56:ab:8a:
                    cc:a9:73:eb:ab:2b:37:57:02:cb:65:dd:da:33:99:
                    c7:7c:c8:a6:e7:79:d5:5c:e6:08:98:51:39:08:94:
                    17:c6:bd:47:13:de:dd:3b:e8:79:06:03:5b:b8:0e:
                    f5:93:ca:ba:5b:5c:68:11:0e:82:c2:f6:82:05:18:
                    01:b2:ea:9f:eb:a1:45:92:63:9c:b1:13:c4:d5:d7:
                    08:c4:99:91:6e:52:a6:70:57:7e:4e:42:2b:da:6c:
                    f8:07:8d:44:27:a3:0b:f4:57:80:f4:62:f6:33:e5:
                    a1:49:03:62:d6:00:8f:ae:af:a9:6b:b7:38:ac:20:
                    1a:01:dc:28:d8:d0:1e:64:58:22:99:30:07:25:b1:
                    03:cc:7e:d9:2f:35:cc:db:d7:34:6d:48:2d:92:d4:
                    18:b1:c1:fa:da:eb:ee:0c:32:aa:78:9f:a2:e9:92:
                    9f:35:8f:fe:c5:17:21:b5:22:4e:09:7c:d7:a6:03:
                    39:fa:17:88:24:e1:76:16:99:50:cc:74:50:ab:d9:
                    39:fe:10:f8:6e:55:e0:27:f4:91:38:b5:1e:8e:43:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D6:A8:BC:F6:FD:B0:95:B2:68:E4:25:86:B0:6B:AB:1B:F4:D3:2C
            X509v3 Authority Key Identifier:
                keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:05:e5:da:5e:e0:fc:7e:22:fe:1b:af:77:a3:86:80:96:ce:
         44:6a:58:94:48:4e:79:53:cd:a6:27:db:6a:ab:51:10:89:41:
         ca:2e:26:75:c3:b9:72:23:50:3e:9c:40:cc:5e:73:e9:c0:30:
         7b:e3:b5:e5:b3:0a:d5:19:ba:d7:4c:f0:46:0f:19:b2:36:b0:
         c6:a4:e9:a9:dc:f3:49:50:c2:b2:f5:21:fc:c5:d4:68:4f:76:
         97:25:6c:e0:97:72:a0:e6:5d:b1:ca:a2:52:70:4d:b9:c9:c5:
         87:4f:9a:cd:79:6a:67:1e:69:fe:95:d4:b7:d4:d1:26:43:60:
         78:b2:ce:c0:fe:1b:b1:1e:7a:17:fb:12:77:2c:74:ce:49:6b:
         14:d6:1a:98:c3:23:8c:1a:c5:2c:45:35:73:e3:8d:d1:6a:49:
         01:6a:10:47:57:79:2e:ef:19:72:6e:65:cd:f3:51:64:e1:2b:
         79:fc:fd:80:84:52:6d:00:f7:22:01:1e:cf:98:24:11:ad:38:
         c4:8e:bd:10:43:d4:11:7e:14:af:8d:4a:02:15:ea:1c:f0:a2:
         f5:20:6e:fe:ec:fe:b5:fd:59:43:08:64:e2:71:1e:b1:34:34:
         8a:74:7b:54:80:50:89:24:5c:03:8a:b9:3c:54:46:77:09:cd:
         52:7b:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:23 2026 by rpki-client