Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File:                     65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier:          ACKx7BanKAFmJ1ST+1UgMzCmV46FxCjgOQIPD9VawIY=
Subject key identifier:   E0:39:68:65:81:EF:C9:3F:02:58:A5:3C:D2:79:B3:94:7D:1D:25:EF
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer:       /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial:       019D39411CE9DC25B153E5BDC7D994AFC402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number:          181E
Signing time:             Sun 29 Mar 2026 11:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:01 +0000
Files and hashes:         1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: w7Rgb17jSp1J6wiwhv+y6BjsMSGIpDpZ2dsLAgYaTAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:1c:e9:dc:25:b1:53:e5:bd:c7:d9:94:af:c4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
        Validity
            Not Before: Mar 29 11:01:01 2026 GMT
            Not After : Mar 30 11:01:01 2026 GMT
        Subject: CN=e039686581efc93f0258a53cd279b3947d1d25ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:8c:b0:dd:e9:e1:f0:78:85:3c:e1:4f:f0:
                    ab:2c:53:9a:67:14:66:b1:28:8a:0c:e1:a2:83:40:
                    28:be:cf:16:c0:e7:80:34:f7:d1:45:1f:1a:54:39:
                    ef:4d:80:cd:33:a0:5d:4c:9d:6b:8e:1d:df:2c:7c:
                    4c:3a:71:84:3e:f7:2d:78:8c:45:96:7b:20:df:3d:
                    59:ed:ff:29:37:f4:c0:f9:1a:b2:cd:79:ff:17:01:
                    73:1d:7b:78:27:73:dd:64:39:43:54:98:40:89:9c:
                    c5:1d:2c:e4:de:a0:08:fe:01:ce:fc:f0:24:a9:47:
                    a2:e0:5b:ee:52:ce:bc:b8:9c:76:8c:cf:76:a3:c3:
                    80:1e:c6:8a:9d:29:4e:89:8c:fc:d0:4b:e0:97:56:
                    fd:b0:9e:ab:c3:88:35:e2:78:09:74:be:41:d9:a5:
                    82:bf:d2:69:72:46:30:e2:07:36:22:53:4e:a2:ef:
                    31:66:78:ca:d9:bc:fa:47:e7:05:df:5c:59:a9:bf:
                    5d:89:ec:a8:96:b6:05:d5:db:ff:5a:24:f6:82:52:
                    38:72:68:d8:55:b3:00:18:96:0d:e1:51:f2:ea:d9:
                    ef:9c:92:07:30:9e:fb:00:6b:6a:b7:8c:2b:61:22:
                    93:ad:c6:9f:6e:60:6b:fe:cb:e8:ad:d6:91:b7:7b:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:68:65:81:EF:C9:3F:02:58:A5:3C:D2:79:B3:94:7D:1D:25:EF
            X509v3 Authority Key Identifier:
                keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:91:03:0f:d8:3c:b7:89:15:97:f6:21:3a:1c:35:1f:69:51:
         16:4a:aa:b0:fe:73:52:e4:f4:8b:67:00:93:a9:8d:2d:b4:a2:
         0a:bc:9b:c7:50:b5:7d:ad:39:13:4e:ac:d1:59:59:31:b8:b6:
         a4:a9:a4:7a:b4:bb:59:6e:d3:0e:62:35:ae:f2:11:fc:60:d1:
         5e:87:83:d4:38:dd:89:9f:da:7d:1a:4d:f0:29:64:d0:91:fc:
         cd:d3:17:45:e8:88:28:2a:50:fa:be:c9:6e:3a:21:c2:e8:00:
         d4:63:ae:6e:5d:61:23:4d:4c:e3:7b:88:3d:37:34:34:d5:11:
         d5:78:b9:0e:b4:f5:7e:b7:02:59:a7:d0:94:ae:07:3e:aa:51:
         fb:b2:18:36:dc:d1:bf:83:7f:f2:24:b4:f7:56:26:6d:ae:9b:
         29:96:ee:41:48:63:8a:e0:38:8e:d1:21:f1:00:28:a2:fa:35:
         d0:ee:6e:92:8e:45:b7:87:6b:a2:20:a4:d6:8b:4b:01:d4:bf:
         b1:ea:c8:50:2b:ec:d2:0e:1c:4a:64:c4:ae:b8:07:03:42:e2:
         a4:fe:eb:f1:ef:9b:1a:97:e2:94:f9:4d:5c:c0:48:53:84:18:
         02:8a:54:d4:c9:65:95:2b:70:52:34:c1:aa:cc:f6:ab:3e:07:
         48:27:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client