Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
File:                     rmmejy1W6TrqTaYW2HK2VX1w35c.mft (raw, json)
Hash identifier:          rY/cm1cvlq2yVD995lxOipzc/vWH8VBds1uNhDloR+A=
Subject key identifier:   FD:26:D7:81:D9:F4:5F:A2:3A:51:87:95:7A:E1:5C:B3:6E:E4:62:BE
Authority key identifier: AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
Certificate issuer:       /CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Certificate serial:       019D386643E2F7217679D74C1B8B7ADC4C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
Manifest number:          0873
Signing time:             Sun 29 Mar 2026 07:01:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:59 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:59 +0000
Files and hashes:         1: rmmejy1W6TrqTaYW2HK2VX1w35c.crl (hash: 9MaJkuOXrnAAaCqwzMJuBr6znic7+LgqiW0Rgi2EEaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:43:e2:f7:21:76:79:d7:4c:1b:8b:7a:dc:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae699e8f2d56e93aea4da616d872b6557d70df97
        Validity
            Not Before: Mar 29 07:01:59 2026 GMT
            Not After : Mar 30 07:01:59 2026 GMT
        Subject: CN=fd26d781d9f45fa23a5187957ae15cb36ee462be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:b3:5a:1c:9e:d4:e4:25:ee:a5:76:ee:56:
                    5f:9f:02:e0:c4:fd:54:48:a4:13:39:ce:31:b8:fe:
                    48:9f:84:a2:61:d3:2e:5e:10:89:3a:d4:8a:be:30:
                    84:ee:b2:5c:dd:81:73:24:8c:ef:04:0c:31:62:bc:
                    e9:96:91:e9:f6:be:91:10:41:04:7e:c0:f6:74:2c:
                    d5:e1:3a:53:f7:c6:ec:2e:b6:7c:dd:52:e0:9a:9f:
                    51:6e:08:54:d0:7a:07:a0:a0:33:d2:6c:98:35:e1:
                    18:54:b2:cd:c7:d5:c1:0b:d1:fa:cb:0d:cb:3a:88:
                    22:f6:9e:18:11:0b:65:70:7a:df:9d:94:dd:75:ff:
                    aa:3a:27:ab:3b:28:6a:44:a2:2d:49:f9:c3:fc:61:
                    a5:45:64:21:83:6a:bc:0c:2e:e7:d5:1b:8c:78:87:
                    8a:7f:88:71:4b:d2:13:77:f2:df:d2:aa:c6:7e:17:
                    da:0c:e8:8b:2f:17:f2:f9:d2:24:1d:14:1c:fe:b3:
                    60:98:77:9a:b4:0f:cb:b2:4d:93:66:88:58:54:ca:
                    2b:44:bd:8b:41:d1:8b:59:64:e7:c3:23:82:82:0c:
                    8f:12:e5:78:fc:e8:cc:f2:a1:cd:b6:1e:3a:b4:42:
                    11:47:1b:46:d8:e1:f2:ec:5f:19:0d:1e:cc:e6:c3:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:D7:81:D9:F4:5F:A2:3A:51:87:95:7A:E1:5C:B3:6E:E4:62:BE
            X509v3 Authority Key Identifier:
                keyid:AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:b8:92:ec:cc:16:87:59:d3:45:7d:9c:ba:f5:e4:5f:58:
         50:36:06:90:56:4f:96:8b:f7:13:3a:26:68:f8:a6:df:48:20:
         77:ea:82:70:18:ee:d3:17:c2:4b:bf:7a:55:49:e3:0e:17:df:
         c1:1d:4f:c6:e6:6a:2e:6b:c0:40:87:52:66:11:b4:09:d8:94:
         5c:3c:55:de:23:28:1f:4e:c8:c1:4d:80:20:09:a6:29:1e:c9:
         95:bb:b4:68:c5:cf:d8:9a:25:08:f4:e3:40:0e:1c:ea:bb:36:
         f1:3a:98:3b:0e:42:aa:eb:5d:0a:36:5b:b6:69:b4:59:11:04:
         c9:98:da:65:ec:b3:9a:61:01:c2:c1:dc:61:55:f7:58:0f:a7:
         1e:dd:e3:73:96:6e:66:0e:f8:c4:d4:e2:15:8c:07:98:7c:c6:
         a6:48:47:ed:60:6a:a7:1d:b9:80:86:9d:81:d4:fa:30:f7:bb:
         9f:86:9a:cb:93:3e:8e:c9:7f:76:30:66:e4:3d:9a:eb:59:b3:
         fd:86:25:03:81:5c:57:c1:b4:56:8f:49:19:cc:99:29:68:c2:
         b0:43:eb:a2:d5:ad:34:1d:70:3a:12:b3:40:59:c8:fb:dc:b6:
         c9:31:33:e0:d5:54:6f:7e:58:dc:66:79:0d:46:97:44:56:75:
         cf:39:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:49 2026 by rpki-client