Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File:                     me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier:          TZd0qy9nelZDPlguqdmQaH65TGengHsY5uk6LUcdsjU=
Subject key identifier:   0A:C8:36:86:7A:DC:33:F6:27:42:FB:39:96:3E:6A:5C:9E:C0:CA:47
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer:       /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial:       019D37C0625188CA75B42277A9AC8E61E910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 04:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:48 +0000
Files and hashes:         1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: zJSijUeHkaG1IX+ipoLcp0gHECoJQ/jnJxZ7RU1n0/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:62:51:88:ca:75:b4:22:77:a9:ac:8e:61:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
        Validity
            Not Before: Mar 29 04:00:48 2026 GMT
            Not After : Mar 30 04:00:48 2026 GMT
        Subject: CN=0ac836867adc33f62742fb39963e6a5c9ec0ca47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:4b:19:c4:68:46:9d:81:24:51:f1:a3:45:
                    4b:ae:d3:6c:ca:c6:7c:d2:42:9f:8c:39:4d:86:fc:
                    3a:6d:bb:26:dd:d9:b7:4b:3f:f7:7a:85:ed:54:de:
                    6f:bf:44:5a:bd:4e:df:55:7b:01:0d:15:71:ca:08:
                    cc:5d:7c:e4:4f:f7:38:76:01:78:e7:f6:17:8f:fd:
                    f2:12:b1:c6:7c:42:30:eb:3a:32:2b:1a:8c:78:36:
                    d8:ee:9f:cb:1e:b0:46:0f:06:ac:c6:20:e3:f0:43:
                    5e:51:13:34:19:f8:6e:9d:0a:ab:34:2d:f2:ef:9e:
                    f1:98:c6:68:a8:35:03:06:82:dc:e0:e1:4f:0f:5e:
                    00:e4:3d:4d:44:bb:90:00:7b:f3:c3:9e:fc:bc:3c:
                    ad:da:70:c0:60:eb:81:91:2e:f5:a4:cd:82:4f:20:
                    29:00:00:e2:d4:e7:08:59:43:ad:ea:3b:a9:fa:81:
                    eb:f7:32:1d:f1:8b:80:cc:13:d4:a2:86:b7:00:73:
                    53:06:93:cb:2e:c5:79:7a:a1:f5:b9:44:ed:98:57:
                    90:c3:4d:0b:25:9c:70:dc:02:c4:bf:e6:ab:2b:a3:
                    34:af:e6:31:42:d6:8f:7b:58:00:6a:7f:c6:62:6f:
                    3f:47:c6:53:2f:66:54:96:6d:0f:a7:85:34:75:35:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C8:36:86:7A:DC:33:F6:27:42:FB:39:96:3E:6A:5C:9E:C0:CA:47
            X509v3 Authority Key Identifier:
                keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:34:fc:9d:74:db:7b:b4:bb:79:42:11:a7:cf:30:c3:06:
         de:c2:be:00:e3:7f:58:f7:9b:ed:14:4c:e4:86:65:0d:f3:be:
         36:cc:07:f0:6f:4d:4d:04:26:27:e8:50:f2:8c:6b:cf:83:70:
         c5:9e:39:56:ca:b3:08:b4:e8:77:fd:6b:c1:a9:2d:2f:e4:7c:
         82:8b:e1:3c:a3:01:a8:38:8d:76:b2:f5:a9:93:06:5f:8c:d6:
         d6:72:0e:6d:12:d9:bc:09:b9:74:d9:52:f6:c8:cd:32:70:89:
         fa:d5:45:32:fd:79:c0:4b:4b:c3:b3:1a:20:1d:66:19:3e:ba:
         22:61:10:b7:5f:7e:50:71:58:a3:10:ef:69:40:52:0b:fd:11:
         de:5b:27:7c:88:36:59:82:52:18:e8:8e:77:56:29:4c:63:f3:
         3c:5b:00:f1:2f:0c:3d:ee:24:2b:ba:32:f8:8e:f5:3b:14:5b:
         d9:a7:52:a8:7c:ac:65:8a:af:97:fa:66:73:9c:2b:07:19:22:
         57:d8:f0:4d:de:c1:aa:c4:f2:f2:74:72:c0:ab:ce:65:2d:4a:
         2d:0e:a5:f9:96:ce:00:72:19:d3:94:1b:da:08:48:b2:a8:9d:
         01:ed:ec:8a:75:43:87:9b:d7:21:9b:6d:8d:a0:91:48:34:01:
         7e:b6:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client