Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          5LbepLLiJhhIko1Vg5Dl4MOYF/6mQgXX19S8r2vKemE=
Subject key identifier:   36:CA:35:39:F9:82:66:19:AE:F0:8E:AE:BE:22:84:28:69:3B:61:29
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       01A001011D60ADF3F3E7A42B0AE0C1916FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          0EE4
Signing time:             Fri 14 Aug 2026 16:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:45 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: 8XDzEJwqUMG0LNRBDVXgetsaiX/JeBqNTq9c+A0qeyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:1d:60:ad:f3:f3:e7:a4:2b:0a:e0:c1:91:6f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: Aug 14 16:00:45 2026 GMT
            Not After : Aug 15 16:00:45 2026 GMT
        Subject: CN=36ca3539f9826619aef08eaebe228428693b6129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:93:2c:7f:46:31:53:ea:3e:d9:15:bc:dd:
                    58:d6:05:a1:27:97:e2:23:c0:6c:4a:20:42:e5:9c:
                    4e:48:f1:29:cc:a8:81:0d:53:8f:27:7a:8b:e3:6c:
                    42:62:ed:7f:54:90:e4:a5:d1:b4:f8:d1:62:1f:d1:
                    f9:fa:2d:c3:b5:e7:52:48:55:51:53:2d:2f:58:bb:
                    74:7d:d8:06:1f:12:00:98:f3:1e:96:19:18:ff:c0:
                    ce:55:cc:ef:23:be:e2:4e:08:d1:0e:f6:4c:d7:d4:
                    62:05:fc:9b:da:e2:24:04:21:2e:64:95:6a:3a:60:
                    2e:ac:3b:45:4b:14:ae:8c:3a:66:7e:a3:44:f3:c3:
                    e6:9b:30:aa:78:b2:dd:30:a0:00:27:df:78:0f:09:
                    ca:c9:e7:47:58:23:30:5d:61:28:07:bc:50:9e:ad:
                    77:03:27:a8:15:ff:24:3e:74:8c:36:ca:aa:ff:39:
                    37:64:eb:de:35:45:b9:d7:a0:5a:cc:c3:e3:2c:bf:
                    67:55:94:3c:57:c5:92:80:8e:55:c7:17:af:30:95:
                    fe:8c:fa:7b:9b:65:c7:ed:d7:73:e3:8b:cb:42:f4:
                    94:9c:d9:8d:86:9f:c8:73:7b:55:9d:35:38:fd:4f:
                    79:32:ff:23:fc:e7:97:9b:7b:b2:28:d5:35:55:ed:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:35:39:F9:82:66:19:AE:F0:8E:AE:BE:22:84:28:69:3B:61:29
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:51:93:3a:0e:ce:3a:98:5f:00:2d:d8:10:61:34:46:ad:
         e7:b0:c3:7a:f7:36:f7:22:5a:84:d9:ff:02:7f:c6:d9:bf:8e:
         4a:68:85:6b:5a:56:8a:6f:a7:98:64:35:97:ef:fe:64:e3:86:
         c8:55:ca:05:14:ac:2b:26:54:a0:f7:96:8f:3b:12:e4:02:95:
         b4:f3:b3:f4:35:63:59:fc:b3:c5:7c:a6:0e:6b:4f:de:b0:1b:
         af:4d:8d:46:4f:ab:a3:3a:eb:72:af:d2:46:59:9e:b6:2f:b9:
         fa:31:77:fa:23:4f:c9:19:68:9e:5e:73:e9:bc:cc:3c:c8:dc:
         b2:8f:41:18:b6:62:e1:2f:1a:df:9a:f2:e3:5d:1e:54:1f:a3:
         a3:26:1a:c5:d6:60:24:d8:23:3f:f8:75:58:00:90:85:b5:90:
         27:f4:e7:cf:98:60:27:a1:0b:f6:e7:9c:ee:47:99:81:fa:8c:
         e3:1f:d6:36:52:45:8a:fe:e8:ed:f8:06:eb:35:23:05:e5:7f:
         4a:67:34:e9:20:6b:27:dd:b4:88:4d:74:73:6f:24:1d:5d:a0:
         4e:7f:8b:e1:5c:ec:8e:7c:97:14:9a:6b:1f:4c:c3:24:9b:98:
         62:a3:4a:e8:5b:79:e9:9d:b1:aa:fa:12:ea:ed:43:4a:ec:b6:
         2b:7f:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:05 2026 by rpki-client