Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier:          rRzFlm13uhotDSYf1Ev6WcnPEAUlYdSZqcFqgd2bSBM=
Subject key identifier:   73:36:83:E8:F3:AA:82:8C:11:3C:43:4F:D5:5E:30:E2:70:E7:13:E0
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer:       /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial:       019E2F971F87A2B5FF3EB72034D1044A2BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number:          0EBC
Signing time:             Sat 16 May 2026 07:01:33 +0000
Manifest this update:     Sat 16 May 2026 07:01:33 +0000
Manifest next update:     Sun 17 May 2026 07:01:33 +0000
Files and hashes:         1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: HjlP5HrCekoWGGUPHrRqA/ZnTb9q43r/5cnt+wgHwcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:1f:87:a2:b5:ff:3e:b7:20:34:d1:04:4a:2b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Validity
            Not Before: May 16 07:01:33 2026 GMT
            Not After : May 17 07:01:33 2026 GMT
        Subject: CN=733683e8f3aa828c113c434fd55e30e270e713e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:48:73:37:a5:2e:b5:fa:aa:21:74:3c:5d:
                    88:b5:a7:6d:01:16:91:b5:e2:06:b4:33:38:0b:bf:
                    95:c8:09:cf:77:56:17:e8:94:6d:1d:9c:98:7e:97:
                    84:79:42:ac:89:4a:85:b1:b0:3f:cd:f2:ab:2d:60:
                    b7:c9:97:2d:4d:43:b5:80:9e:74:a3:0c:12:ea:da:
                    24:04:37:eb:3e:5a:88:a8:56:46:55:a3:7d:b9:83:
                    ba:1c:69:74:16:30:26:43:6e:22:cb:7f:8a:22:a2:
                    fc:cb:3b:08:f0:17:db:7f:38:fa:03:5e:f3:4a:04:
                    08:ac:75:84:cf:8d:94:86:09:e5:ef:03:c1:44:80:
                    1d:a1:37:06:e0:e7:c1:b0:06:8b:d1:4f:ea:91:94:
                    26:d6:91:da:27:98:6f:c8:26:31:bb:77:94:29:91:
                    d7:41:86:19:e7:ba:df:8f:a7:3a:42:6f:1f:16:e0:
                    48:e6:ed:b1:32:88:9a:f3:ec:fc:e2:c3:74:fa:3c:
                    39:3d:ee:9a:25:8d:23:21:60:3e:89:ae:d4:d1:1c:
                    ef:79:dc:c5:68:e0:9a:20:08:ec:96:ca:eb:29:0d:
                    94:cd:fb:bc:c1:bd:48:ac:41:c1:01:bd:03:64:63:
                    5f:d3:0a:dd:c7:c3:7c:7f:42:c4:0a:43:6f:11:4e:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:83:E8:F3:AA:82:8C:11:3C:43:4F:D5:5E:30:E2:70:E7:13:E0
            X509v3 Authority Key Identifier:
                keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:8b:c4:19:ee:c8:b2:24:af:79:81:17:b5:5d:31:da:d3:
         b3:29:75:66:45:21:f8:61:8c:c2:d0:70:52:f5:e8:c7:83:4a:
         8a:32:5f:24:20:0c:83:88:c9:fb:1b:34:8d:e4:74:31:4d:04:
         68:cc:f8:a0:7c:34:7b:f0:eb:fa:6b:28:53:e1:8b:66:1c:b1:
         6b:23:31:4c:82:98:73:36:9c:50:8f:b4:99:e0:2e:6f:66:b9:
         9d:a1:b0:9f:4f:a7:dd:63:e2:b9:8e:f9:a3:c8:4d:07:fa:f8:
         1d:94:be:b8:5c:35:cd:4f:1c:cc:04:61:c8:2c:f7:2c:10:6a:
         2e:6f:2e:9c:5c:97:1f:c4:1c:e3:51:4b:69:86:a4:14:eb:d6:
         02:98:97:96:0c:ea:2d:23:81:c4:d1:56:cb:2a:2c:4c:b3:60:
         af:b5:50:db:3b:53:e7:0b:36:04:60:0e:d0:fb:2e:ef:e4:a9:
         b6:1d:40:57:c8:87:d8:91:06:ec:3f:7d:71:c2:6b:7a:17:49:
         5e:07:eb:61:ec:ea:0d:b8:0d:f3:c4:d1:3c:ed:67:cb:89:3b:
         de:3f:ab:9a:1e:5c:f5:65:d7:8b:51:d4:85:7d:07:a9:04:c1:
         8f:42:ca:81:83:b4:11:9b:df:96:ee:f8:14:57:22:a9:71:59:
         3a:bc:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:12 2026 by rpki-client