Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          x+WHcuUrBhw+PUi1yRSTSuQ0b6b++fTBRcqcNFksPpA=
Subject key identifier:   E6:36:38:C9:CF:68:65:5A:09:49:40:6C:27:C8:6F:B4:A5:CF:74:D1
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       019D3909AE61029730FCC96F0F69FA644175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          07EB
Signing time:             Sun 29 Mar 2026 10:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:28 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: 55liWg0fjAl6077JAkoxSXw36fNzqDhhoPVjRkttHy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:ae:61:02:97:30:fc:c9:6f:0f:69:fa:64:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Mar 29 10:00:28 2026 GMT
            Not After : Mar 30 10:00:28 2026 GMT
        Subject: CN=e63638c9cf68655a0949406c27c86fb4a5cf74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:f5:64:17:ed:9d:68:c9:b6:ed:ce:17:10:
                    33:74:4c:29:cc:b2:15:8e:4d:5c:f1:41:67:d3:cd:
                    c4:09:d9:26:3e:f2:ca:47:f0:94:3f:a7:d1:28:ea:
                    ab:3a:04:01:b6:7a:e1:ff:dc:08:37:13:37:1a:ea:
                    31:a4:8a:02:ce:d6:7f:27:f1:00:5a:5b:c7:fd:35:
                    ee:8e:c3:28:9e:0a:95:ea:7b:ec:7b:a9:8a:81:ee:
                    08:20:c0:90:3f:d2:f5:3b:5f:d9:7d:bd:55:d5:2f:
                    ec:9e:1d:1b:b6:1d:0c:aa:75:b1:00:14:0e:b7:d3:
                    1f:fb:57:9f:8a:48:14:d0:1f:98:50:33:f0:44:87:
                    36:c6:a8:fe:66:84:6b:04:92:89:db:c6:59:50:10:
                    d7:e4:cd:ba:24:57:6a:f6:00:86:55:51:45:49:ea:
                    cc:4e:90:f8:a4:a4:86:28:82:f6:c6:f7:ec:11:a3:
                    c2:65:40:33:76:fe:26:7e:75:8a:38:9d:ea:5b:ad:
                    d8:61:e7:9d:12:7b:e2:12:43:af:f1:5c:46:00:b0:
                    8a:44:87:f8:29:22:61:88:2d:78:aa:82:e0:56:67:
                    fb:9e:61:c5:ed:ed:77:cb:2a:c3:68:08:77:f6:34:
                    8d:35:1a:41:f9:5b:0d:42:c4:ca:2b:3a:27:fb:fc:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:36:38:C9:CF:68:65:5A:09:49:40:6C:27:C8:6F:B4:A5:CF:74:D1
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:ce:da:cb:cc:db:7c:73:16:d6:75:a5:0f:c4:a3:ed:df:
         ef:eb:6d:33:03:1f:73:df:e2:11:58:89:c3:de:92:55:9f:8f:
         19:b7:8e:0e:cd:08:f4:0c:5a:2b:b3:13:2f:cb:6f:87:a9:0a:
         ff:69:7d:bf:45:33:63:89:bb:b3:f1:fb:46:c1:5e:6c:13:f1:
         df:a6:86:b7:38:19:32:8d:25:e9:37:04:20:74:af:f0:69:af:
         6e:d7:94:a8:a0:69:d0:5f:e0:4b:88:38:30:9d:07:ac:e7:44:
         98:c5:41:83:8c:50:7b:53:7f:c0:f5:60:9e:f2:9a:b1:e0:28:
         9b:95:b7:61:3c:14:b8:c5:1b:bc:66:65:7f:c6:7e:35:f8:61:
         23:ac:5e:e9:ed:ae:06:f2:f1:c3:c3:b6:6a:fb:eb:e7:90:44:
         4b:d9:81:5a:58:b2:83:fe:58:4c:cd:94:44:aa:52:44:2f:73:
         fa:d3:7f:9b:84:43:53:e7:1c:03:e7:43:a6:08:e7:9b:b3:80:
         bd:fa:21:9b:d4:69:41:65:3f:d9:85:8d:7b:1f:13:8f:8c:32:
         d5:38:7c:55:63:30:6f:2e:00:b7:58:20:24:61:f6:5d:df:84:
         02:2f:f1:f9:62:49:c3:80:a2:f8:b6:45:ff:61:b0:ea:ce:48:
         af:2e:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:27 2026 by rpki-client