Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          Ksu1BitR5ix3mDn6oKaqQhkL5ExrgPvR+5+0lJuPwQo=
Subject key identifier:   B7:13:FF:F5:1F:81:1E:4E:CF:99:B7:BF:3F:0D:60:2C:11:BA:4E:C0
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       019D394130A65AE95C9CC63EBDF99CE52DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          1460
Signing time:             Sun 29 Mar 2026 11:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:06 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: Mijp9NbZxXQaoJwILMudX9YHIw5zIcvkyh3rU+ZfxA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:30:a6:5a:e9:5c:9c:c6:3e:bd:f9:9c:e5:2d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Mar 29 11:01:06 2026 GMT
            Not After : Mar 30 11:01:06 2026 GMT
        Subject: CN=b713fff51f811e4ecf99b7bf3f0d602c11ba4ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:63:05:4b:93:84:17:a8:07:11:ca:45:92:54:
                    5c:09:72:c0:f6:41:ac:0a:50:aa:23:94:49:a2:3d:
                    2a:48:17:82:1e:3a:ba:c4:c4:ee:95:f5:90:04:f3:
                    e0:f3:91:16:df:8d:10:d7:1b:e4:a5:e5:eb:ce:65:
                    bb:f5:03:7d:f4:5a:2d:25:00:e4:d8:5f:9c:f1:fb:
                    66:47:77:ea:fe:ae:eb:b7:9e:93:f6:f1:62:a1:cb:
                    8a:55:6c:47:b5:58:0a:f1:db:26:db:99:27:94:88:
                    4d:1a:a2:48:0c:37:15:b1:9a:06:82:fe:00:85:8d:
                    d4:72:b7:1c:1e:40:07:e8:9e:3c:b1:b0:0e:b7:50:
                    26:55:9e:a4:3f:0a:35:82:92:13:18:5a:73:04:e5:
                    c2:c2:52:72:5a:f7:20:ce:96:ba:f7:f0:4c:30:4b:
                    05:bf:1c:ab:f3:2a:fe:4a:a5:34:c8:72:8a:98:ad:
                    db:ff:af:a6:c0:d7:d8:c2:60:76:fe:d4:17:eb:53:
                    d5:e4:60:21:83:13:1b:48:a5:ce:7f:e7:32:21:16:
                    52:14:89:f2:15:b8:fb:5e:13:48:57:1d:8b:fa:72:
                    91:f6:e6:34:85:28:fc:b0:56:98:cb:72:e3:81:22:
                    16:b6:8d:5f:f0:4e:68:fa:33:42:fe:9d:89:ee:42:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:FF:F5:1F:81:1E:4E:CF:99:B7:BF:3F:0D:60:2C:11:BA:4E:C0
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:50:96:46:8d:d3:cd:b0:1a:77:74:90:0b:7d:d6:39:52:b9:
         55:4d:65:1d:7d:03:47:76:8a:34:b5:67:d3:ae:87:7b:fa:ab:
         8f:45:db:61:28:e8:26:3d:c6:48:8e:5b:8c:80:88:66:67:f4:
         50:ff:e1:54:4c:fa:ae:03:3a:2d:93:fa:19:d5:5e:a1:82:e7:
         21:fc:40:d6:85:b1:63:98:15:a8:83:85:af:30:be:3c:c6:fa:
         75:52:72:02:6d:20:41:41:e0:6b:68:fd:f1:90:21:87:f1:f4:
         ec:5b:6f:81:02:7b:d8:31:16:7a:9c:0b:dc:1b:19:61:b3:28:
         08:de:0d:ca:74:6e:55:64:f3:96:2c:60:2c:4b:50:24:0c:12:
         db:cd:1a:87:86:82:f5:a5:20:33:03:e8:9c:74:68:23:a6:53:
         b3:0f:03:41:be:41:72:d4:d7:91:ad:2d:c8:30:d3:3c:ad:ea:
         20:d3:b2:c7:9e:ca:22:d1:f8:db:5a:7e:7c:6f:28:29:31:85:
         21:36:73:7a:2b:23:f6:4a:98:9e:39:09:58:09:cd:20:6a:0d:
         5b:3f:b2:9b:7c:48:71:79:94:e6:de:94:3c:b2:24:e7:74:37:
         84:4c:77:e9:b2:51:82:0f:39:36:83:28:cf:c6:a2:ee:b3:ab:
         2e:3d:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:14 2026 by rpki-client