Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File:                     fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier:          HMXkm9rNkiH6fg+D/F8frVByz+IgUGrlSBpnBF2iatA=
Subject key identifier:   51:41:9F:0F:F0:59:80:30:5B:35:11:FF:E0:22:B0:8D:D5:4F:45:57
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer:       /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial:       019D371BA0D3043A3997B9F772CA8FEF169A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number:          07CB
Signing time:             Sun 29 Mar 2026 01:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:50 +0000
Files and hashes:         1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: g+jRHS9YyUEPAPsvOpe/HOHPE+g+RvLgQi7xJLaEJKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:a0:d3:04:3a:39:97:b9:f7:72:ca:8f:ef:16:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
        Validity
            Not Before: Mar 29 01:00:50 2026 GMT
            Not After : Mar 30 01:00:50 2026 GMT
        Subject: CN=51419f0ff05980305b3511ffe022b08dd54f4557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:0e:f2:4c:13:68:d2:a2:e5:da:e2:d1:91:
                    3d:12:ba:c1:21:41:95:8e:9f:32:3e:4a:03:74:f2:
                    46:17:ec:2a:c8:a7:09:a4:65:ef:96:0a:cd:b4:e6:
                    da:55:49:7d:c2:a1:6b:03:1b:d2:f5:86:39:68:a7:
                    09:df:81:a3:a1:fa:92:71:c7:8b:bd:25:fc:7b:e1:
                    ab:33:38:7d:03:a5:c7:75:67:39:e2:70:d7:89:05:
                    e5:84:a3:f7:14:ea:d6:7f:a5:ba:e2:f5:1f:ae:1e:
                    d7:df:46:56:d7:07:47:d2:3a:86:77:3e:80:d2:79:
                    7d:b8:36:51:92:a5:4a:9d:13:19:91:10:20:71:5b:
                    f4:e5:3d:57:99:09:66:bd:26:eb:68:13:92:bb:a5:
                    28:b4:cf:f8:64:ae:50:ee:19:22:09:c1:cd:9d:18:
                    43:40:ab:fb:cb:a4:34:1d:a9:ce:51:c1:7e:53:c6:
                    58:1e:82:c4:93:c9:e8:7b:d5:24:d9:5e:82:8d:43:
                    ab:c6:27:e7:d2:ad:82:c5:c3:85:b4:a1:aa:05:41:
                    8c:0f:a7:7c:f0:46:95:ad:f9:b1:ed:89:40:a5:03:
                    31:84:b0:4c:e2:d1:e2:50:cf:e1:1e:60:9e:7e:6d:
                    90:88:31:95:56:48:be:44:e9:38:2c:68:0e:ff:f3:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:9F:0F:F0:59:80:30:5B:35:11:FF:E0:22:B0:8D:D5:4F:45:57
            X509v3 Authority Key Identifier:
                keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:44:59:94:43:4d:ba:62:1c:c3:ff:94:1f:a0:23:13:16:40:
         e6:f6:a4:f5:6b:67:cd:f4:17:40:84:c4:bf:80:32:01:6a:38:
         72:04:71:64:00:56:d9:90:60:b4:a6:77:79:5a:8f:41:4b:5a:
         01:58:29:6c:dc:c0:d9:c9:20:67:7e:c4:cc:13:42:e0:56:a3:
         ff:8a:d7:a5:e3:8e:68:01:93:36:84:7e:73:1f:a2:cd:d6:a2:
         b2:14:4e:42:60:ee:df:ec:38:36:69:77:84:41:57:bc:bc:1b:
         53:d5:7e:68:3f:4d:ec:36:ac:eb:5d:93:8e:72:3d:12:d2:f1:
         42:5e:4a:06:91:41:db:7c:31:d0:a0:fd:a4:f5:87:bd:e3:19:
         b6:09:d7:8c:ce:e0:e7:27:54:3d:28:84:91:bc:d0:95:2c:77:
         dc:51:70:f5:5f:46:f3:34:95:69:22:24:53:b8:fe:bc:db:ac:
         62:ea:13:cd:66:3d:0e:3e:f1:a1:82:20:e9:1a:a2:52:cc:d3:
         c5:51:44:14:21:94:72:f1:4a:6f:38:e2:65:07:1a:4d:c3:90:
         13:f5:bf:f5:b7:ba:33:28:a9:94:23:fc:74:de:df:96:97:72:
         70:20:38:f5:aa:be:3d:78:b6:61:0c:af:64:86:88:51:22:b1:
         30:50:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:41 2026 by rpki-client