Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
File:                     aedSc-eU9kwv4TwmA00JJw-oRxY.mft (raw, json)
Hash identifier:          e8itHX9Rgp/q5S4ggV61+CbkE4ajSXh8siAkey4jbAs=
Subject key identifier:   F9:B9:30:EE:9D:01:D6:FA:22:77:9C:4E:25:D8:19:81:B3:25:80:CC
Authority key identifier: 69:E7:52:73:E7:94:F6:4C:2F:E1:3C:26:03:4D:09:27:0F:A8:47:16
Certificate issuer:       /CN=69e75273e794f64c2fe13c26034d09270fa84716
Certificate serial:       019D390A2E3FE9B5E9981A0DF570BB5D7D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
Manifest number:          79
Signing time:             Sun 29 Mar 2026 10:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:01 +0000
Files and hashes:         1: aedSc-eU9kwv4TwmA00JJw-oRxY.crl (hash: 0NpcNfAnTux0ZhgDZxUuW6gJ2VEybzc0+63eXUTUq6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:2e:3f:e9:b5:e9:98:1a:0d:f5:70:bb:5d:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e75273e794f64c2fe13c26034d09270fa84716
        Validity
            Not Before: Mar 29 10:01:01 2026 GMT
            Not After : Mar 30 10:01:01 2026 GMT
        Subject: CN=f9b930ee9d01d6fa22779c4e25d81981b32580cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:01:e6:69:e7:c2:d3:6f:f0:9b:8d:1a:26:
                    10:37:53:9e:f0:cb:b1:da:23:28:f4:f0:8d:64:33:
                    00:af:7a:9a:b4:76:8a:dc:4f:4d:7c:71:fb:d0:f1:
                    8d:1c:9d:b9:26:aa:8f:c0:cb:8e:0c:91:46:a3:39:
                    62:41:bf:2b:c9:e4:8e:2e:05:1a:f4:b5:69:90:6d:
                    0c:da:29:a2:c3:b8:78:38:e3:63:98:b6:99:fa:92:
                    b9:6b:5e:9d:c8:c0:74:0f:77:02:c6:35:81:3a:17:
                    26:7f:d5:4d:7c:a8:c8:16:ff:d6:d9:3a:d5:9b:29:
                    23:53:6c:f5:84:ee:6d:07:59:b6:26:9d:f8:9f:59:
                    e4:ef:7b:e6:28:4a:5d:de:d7:dc:a3:2d:c2:03:69:
                    0f:f5:06:41:a7:e0:38:be:6c:c7:63:3d:97:7c:c1:
                    24:e3:ac:36:95:14:76:f2:73:f0:d2:76:10:15:10:
                    99:b9:51:16:90:f6:3c:cb:49:3d:52:8b:6c:ce:e2:
                    d6:46:be:f9:a2:27:41:dd:23:e6:fe:a4:b7:0f:77:
                    7c:e1:25:23:48:d9:8b:1b:59:91:87:c8:de:60:02:
                    12:62:6b:ca:e8:04:1b:cd:e8:d0:22:1c:53:a6:dc:
                    62:b3:89:16:21:f7:b4:67:20:bc:c1:f5:c3:b7:84:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:30:EE:9D:01:D6:FA:22:77:9C:4E:25:D8:19:81:B3:25:80:CC
            X509v3 Authority Key Identifier:
                keyid:69:E7:52:73:E7:94:F6:4C:2F:E1:3C:26:03:4D:09:27:0F:A8:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:a0:82:0f:ad:a7:3c:9e:aa:f9:f6:74:92:cc:23:3f:a9:
         d9:7f:c8:72:ac:11:0e:86:ea:7f:ba:86:ac:83:88:79:ef:b3:
         69:69:b3:4f:1f:39:83:5e:27:ac:1e:45:17:0a:93:52:6c:17:
         6f:cf:66:9c:46:12:9c:3b:d2:ca:1d:c3:72:b2:d2:ec:41:3d:
         da:d4:a6:9c:e8:d6:ea:4d:a9:77:78:f7:3e:46:1c:03:0c:68:
         17:b3:ee:6a:5c:6d:54:c0:1d:9c:7d:c6:69:06:2d:17:26:93:
         1f:04:e8:fe:ed:4c:eb:3c:9b:9c:57:46:5f:37:f9:2f:b6:dc:
         3e:5f:c0:3c:b0:a6:c4:67:c8:b4:e9:55:5e:7c:3f:1d:d9:26:
         5a:9a:72:45:30:56:e3:f7:b8:cf:03:e2:ac:4a:eb:ab:49:98:
         c4:06:00:02:c7:de:20:8b:82:47:7c:12:da:8a:1a:02:77:e0:
         5e:cc:c5:4c:de:40:09:b5:75:76:3c:6c:49:c8:34:95:63:d1:
         4d:00:76:c0:e7:5e:8b:b7:69:46:6d:85:b2:99:58:ee:1c:9b:
         e2:15:1a:2d:70:e6:a5:6a:95:01:6d:7d:44:fc:7e:af:d2:49:
         21:5c:89:b4:09:0d:f2:fc:24:ee:83:cf:35:df:ab:5d:84:b1:
         12:fb:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:43 2026 by rpki-client