Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          y9vv9q7QTAzl2hoQyeEP4eSWJ1PDvErabsdJ2zGL8J0=
Subject key identifier:   9B:6D:25:72:1A:B1:17:36:1B:B8:63:30:B5:3A:AA:B1:D9:68:72:9A
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       019D3865DF9CBE63A5AA17ED4F7CE936BD3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0F4F
Signing time:             Sun 29 Mar 2026 07:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:33 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: of1jIeemlEsb6jQWg7ZOe5zFSI03VzPSzs2HnivbWEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:df:9c:be:63:a5:aa:17:ed:4f:7c:e9:36:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Mar 29 07:01:33 2026 GMT
            Not After : Mar 30 07:01:33 2026 GMT
        Subject: CN=9b6d25721ab117361bb86330b53aaab1d968729a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:35:cf:3b:66:2b:e0:22:da:ce:3a:cb:8f:
                    9f:a7:47:85:8f:e3:2a:4a:d6:91:29:d7:20:3d:2d:
                    ac:db:4e:bb:95:ab:22:8a:49:09:08:7f:2d:4b:b8:
                    91:54:26:0e:29:f1:f7:18:17:e0:9c:b1:3d:d9:40:
                    e4:53:5b:a0:a1:f6:cc:9f:06:eb:e9:60:a4:63:d8:
                    0d:bf:43:e6:86:54:ce:df:a7:f2:9f:6a:71:59:42:
                    29:be:6c:18:d6:bc:5b:56:d0:b7:62:03:1e:8d:67:
                    55:f3:62:38:f0:44:c9:9d:80:a9:9c:2f:2a:02:46:
                    0c:9b:b0:3a:f5:84:8e:d5:7f:8e:4c:60:71:38:ba:
                    6c:9f:14:79:cd:d4:bd:70:56:cc:35:b8:4f:8e:bd:
                    32:a4:dd:24:6b:43:f7:82:b7:ff:fe:44:77:55:60:
                    c6:d6:ec:8b:2d:7c:d8:07:18:c7:6e:05:32:06:65:
                    2e:ef:c3:7d:5d:39:9a:cf:ef:f3:51:9b:49:92:16:
                    f9:e7:e5:4f:1b:99:9d:74:16:78:8d:6b:7a:95:b6:
                    22:00:03:bb:eb:1f:14:0a:d0:c3:53:ba:b3:9c:14:
                    df:78:ba:68:19:b0:21:5d:be:75:a0:a1:3f:e8:8b:
                    65:d5:0f:5c:f0:18:01:29:f6:72:8c:75:77:e3:6f:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:25:72:1A:B1:17:36:1B:B8:63:30:B5:3A:AA:B1:D9:68:72:9A
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8c:40:89:03:b9:6d:a1:6e:07:f7:92:44:4d:ba:71:78:c3:
         eb:12:d8:3e:ec:fe:3e:1c:af:16:70:9e:cf:fd:56:c5:5b:6e:
         bf:84:9a:29:31:b0:39:2e:fa:3e:12:95:20:61:82:9e:f5:cf:
         27:40:97:8a:0c:74:24:78:61:ce:e2:d3:f0:ae:58:c6:db:32:
         d7:3e:f9:bc:af:28:fc:06:e3:6f:49:71:2d:bb:5b:25:03:c9:
         c7:68:1b:46:7a:9b:2d:e4:11:73:2b:44:f8:24:71:ed:21:09:
         85:e0:11:37:e5:77:1e:d6:af:21:a7:57:63:e3:24:1d:d4:a1:
         7f:b5:a0:24:89:0e:30:d1:7c:c2:25:23:a7:97:f3:56:12:a6:
         cd:98:aa:30:87:83:23:d1:d1:0f:cd:23:84:84:08:e5:a5:af:
         f6:3b:0a:ec:41:11:22:4f:de:9f:bf:5c:ae:76:21:d2:0a:db:
         05:c6:58:70:0c:eb:1e:ce:9c:59:4c:fe:ae:a6:03:cb:68:cd:
         29:5a:96:40:8c:44:74:3b:59:da:b3:55:7d:a7:da:e1:87:6c:
         45:07:14:41:e8:ac:25:9a:9b:af:a5:da:06:8f:42:a2:4d:07:
         f6:e2:cf:00:9e:c7:b1:f2:c2:5f:2f:a0:78:21:e9:84:6b:bc:
         a8:ee:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:30 2026 by rpki-client