Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          Q1BrYSijf880fxK/oeOzSPfJBEWPH244eBzix4J1Kok=
Subject key identifier:   50:C4:B6:BA:21:D0:BD:29:6F:14:98:36:71:17:EC:EA:40:06:A2:EB
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       019D389BB9A9C55764B127CCF5C2D2CB9062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          0731
Signing time:             Sun 29 Mar 2026 08:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:22 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: nRDtpr/tP7aKIP0T0hvctfmXxXgguroRHv1+2FN8f1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:b9:a9:c5:57:64:b1:27:cc:f5:c2:d2:cb:90:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Mar 29 08:00:22 2026 GMT
            Not After : Mar 30 08:00:22 2026 GMT
        Subject: CN=50c4b6ba21d0bd296f1498367117ecea4006a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:1e:95:41:7f:82:d6:09:e3:cc:26:1f:7d:
                    56:20:c4:a7:f5:de:a7:6a:3b:af:74:16:0c:3c:7c:
                    81:d9:91:0e:cd:de:a1:2e:e5:90:f5:25:35:a1:c1:
                    ba:a0:23:09:a0:6f:91:c2:e9:f5:fb:e3:89:93:67:
                    95:27:b3:b9:d1:3e:7a:b4:4d:ea:9e:9d:11:ed:b3:
                    2f:f8:80:b9:d6:5f:98:1c:aa:0b:bc:5e:9b:25:96:
                    0a:a9:fd:22:1e:80:ee:8c:82:3c:ce:a0:5d:8f:fc:
                    38:da:35:92:0a:52:87:4d:1e:e3:2e:97:c9:77:e0:
                    b1:81:ba:d4:94:a6:d9:73:9b:c9:ce:61:f3:73:6a:
                    e2:af:4e:a2:93:f6:e2:71:8a:94:e9:c3:a0:23:c9:
                    a8:15:ee:f3:91:52:a5:86:fe:d2:bd:74:5f:20:03:
                    6c:00:45:a2:61:88:90:ae:47:12:f4:33:6c:16:d0:
                    e9:58:03:bf:b9:8f:13:50:fb:bf:11:33:04:3f:1f:
                    ff:f7:27:48:09:95:95:4e:86:ec:9b:6f:90:88:84:
                    b2:ba:ba:74:2c:14:e5:e2:f5:e9:ab:bc:de:a0:95:
                    4d:51:82:78:30:37:22:7a:00:ab:5e:5a:91:cf:f2:
                    f1:9d:e7:34:07:17:1e:07:cb:4a:5b:83:fe:f7:a6:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:B6:BA:21:D0:BD:29:6F:14:98:36:71:17:EC:EA:40:06:A2:EB
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fb:fb:f8:35:d9:ce:79:0e:22:54:bc:f9:7b:d2:7f:da:c7:
         d1:48:92:83:c4:d9:91:d9:88:1d:e4:b4:16:d2:bd:27:6c:71:
         64:52:b5:76:ab:ba:5f:f8:0c:d8:b0:2d:1d:67:33:fd:84:18:
         e9:0d:18:7d:8b:c4:8d:55:59:0b:2a:a5:9d:e6:fb:70:f6:f4:
         b3:2f:e3:14:43:91:c0:69:4f:e5:39:d0:12:dd:65:8e:2e:5f:
         07:ad:bf:32:52:97:e8:d3:46:bc:fb:6e:31:e3:9f:8b:5a:bf:
         4c:f5:2e:d4:5d:23:1e:db:fc:3b:65:d4:f6:ea:83:e8:3d:5c:
         32:4c:b7:3d:9b:db:e2:66:a7:f7:d9:58:55:de:eb:a0:58:80:
         54:61:b3:3f:1b:d7:70:59:41:90:35:73:a0:da:ea:cb:4b:5f:
         1d:01:37:29:b9:0b:10:c7:fd:da:e2:07:16:55:59:b3:2c:1e:
         64:24:15:a0:3b:fb:f2:e1:e7:9b:ce:e3:f9:63:a0:37:3c:e3:
         69:58:98:1c:c4:4d:df:e5:3f:00:f8:43:85:d3:39:71:5c:20:
         3a:bf:51:37:8c:2f:77:fc:7b:91:85:93:69:07:c4:da:b0:86:
         2a:ac:bd:4c:07:34:02:4d:f5:4a:2a:78:bf:ef:42:9d:d1:9a:
         0c:5b:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:35 2026 by rpki-client