Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File:                     1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier:          Ws80RcD9clfxFBOg1iRQKo3m98IBmG6RYefhzdmajgg=
Subject key identifier:   09:CE:1E:94:78:E4:02:9B:8E:7B:2C:C4:EA:4D:E4:CC:11:38:DF:9E
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer:       /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial:       019D07790FC4710BAA8C898452287CB3D41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number:          097A
Signing time:             Thu 19 Mar 2026 19:01:07 +0000
Manifest this update:     Thu 19 Mar 2026 19:01:07 +0000
Manifest next update:     Fri 20 Mar 2026 19:01:07 +0000
Files and hashes:         1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: R92HDD8UqDhPIIfrWmiTXZEz8mvpzdNaN8T8p1v8m0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 16:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:07:79:0f:c4:71:0b:aa:8c:89:84:52:28:7c:b3:d4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
        Validity
            Not Before: Mar 19 19:01:07 2026 GMT
            Not After : Mar 20 19:01:07 2026 GMT
        Subject: CN=09ce1e9478e4029b8e7b2cc4ea4de4cc1138df9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:01:52:18:d1:d9:8b:6a:72:ff:08:00:c7:
                    c3:8a:a4:28:31:53:51:c7:95:79:12:d6:b9:a8:cf:
                    1f:fc:3d:11:6c:49:26:da:dd:f5:99:2a:b4:e5:68:
                    52:92:70:29:0e:b8:6f:a0:7b:bd:a0:a8:0b:8e:36:
                    b6:a6:06:5a:60:6c:e4:06:87:6b:f8:4d:58:00:73:
                    ee:85:a0:b3:c3:c1:53:e3:d9:d9:d5:49:c3:ca:6d:
                    fd:66:8d:90:05:8e:90:fc:8d:b4:b7:7f:89:af:79:
                    7d:3d:53:b4:9e:15:96:83:fe:82:fd:b7:79:9d:c9:
                    fe:94:af:58:81:08:78:d6:5d:c8:e4:4a:c5:cd:14:
                    e5:cf:c7:e9:3b:c6:b0:e3:62:99:ba:06:07:8e:f1:
                    c7:54:25:a4:d9:20:68:a6:80:94:4a:d4:3a:bd:65:
                    67:4e:ea:cb:df:41:59:f5:5e:f1:40:f5:22:7e:fd:
                    ab:09:55:3f:bf:b6:41:d0:5d:9b:ab:fd:31:06:ab:
                    c7:01:6c:94:f4:b8:ad:65:12:e8:0b:74:2d:b9:90:
                    d2:b6:e6:b1:53:e4:4c:be:3e:3a:de:f1:a0:97:d1:
                    c6:ac:28:e4:12:73:58:20:ce:cb:4e:ad:4d:5f:4d:
                    fc:b5:05:d9:bb:48:06:ac:f3:9f:04:04:4e:59:8e:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CE:1E:94:78:E4:02:9B:8E:7B:2C:C4:EA:4D:E4:CC:11:38:DF:9E
            X509v3 Authority Key Identifier:
                keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:3d:2e:6b:80:38:1e:74:62:a5:53:04:48:a4:b0:bc:83:
         c0:e5:ed:93:da:4c:d9:8d:05:07:0c:6c:fb:b5:b9:29:57:82:
         b8:e9:87:2f:a6:39:de:3f:00:25:73:21:44:04:e0:10:d5:8a:
         fb:83:12:89:08:89:bb:e1:cc:61:e4:0a:58:72:9b:18:6e:60:
         82:b8:42:dd:41:3c:04:b3:6a:e2:6a:0b:80:de:ee:f0:6e:2d:
         54:b2:a8:95:98:d9:b7:88:8b:8e:45:c3:45:30:4b:e9:9a:e3:
         78:e5:1f:08:1d:6a:09:55:9a:37:fa:31:be:3c:dc:7c:88:aa:
         01:a5:e8:51:bc:b6:23:79:f3:90:a6:4d:ef:41:27:45:c8:ab:
         c0:a1:19:0a:4e:e1:47:b6:da:f7:86:61:49:1d:ba:c3:be:6d:
         5d:b3:bd:0e:7a:bd:ba:53:eb:8b:47:f8:05:0a:ce:c3:0f:29:
         f2:c3:77:8d:4e:a0:dc:96:fa:db:81:4a:dd:eb:0b:bc:04:b0:
         f4:43:03:2d:48:54:b2:31:76:67:ed:7c:e1:26:47:dd:20:d7:
         e9:e9:5d:8b:42:94:fa:88:32:42:69:40:ed:2d:cd:67:8b:b5:
         88:0f:b8:69:17:6f:93:82:09:44:6e:4e:33:6a:8c:2c:91:3d:
         3e:4f:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:07:58 2026 by rpki-client