Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File:                     e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier:          jReMr3MW7eoWmYnWf0W+dQF8N77kI3P6k5Y8Ah/epcg=
Subject key identifier:   3D:23:0C:CE:B4:5B:61:18:22:41:D1:33:B2:EC:71:93:72:A3:30:44
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer:       /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial:       019D38666DA8AB0A8C9B93037ED0B9673204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number:          0915
Signing time:             Sun 29 Mar 2026 07:02:09 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:09 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:09 +0000
Files and hashes:         1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: ggExeqTJxem5xPLv2wlb9HLXh07uz9T2kT3okxYjOYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:6d:a8:ab:0a:8c:9b:93:03:7e:d0:b9:67:32:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
        Validity
            Not Before: Mar 29 07:02:09 2026 GMT
            Not After : Mar 30 07:02:09 2026 GMT
        Subject: CN=3d230cceb45b61182241d133b2ec719372a33044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:d2:b9:b3:25:3b:3e:15:93:d5:ea:9f:da:
                    67:39:94:81:de:c3:03:2a:bb:ab:48:11:bc:1d:5d:
                    9d:dc:54:05:2b:e0:9e:8f:83:2e:da:e5:61:f2:30:
                    b6:55:26:16:97:e7:69:2f:00:f2:f9:5a:cd:c6:9a:
                    c5:6d:ed:00:1c:4a:7c:50:bf:d9:52:84:a0:c5:f9:
                    16:86:1f:a3:77:c8:88:3b:6f:1f:7d:25:2c:6c:3c:
                    eb:f7:0e:a5:f8:42:ce:e0:2d:d2:37:ab:5b:04:32:
                    83:b9:ec:12:72:09:e5:4d:0a:5f:95:a6:04:f2:dc:
                    d4:41:08:30:d4:25:22:b9:1f:c2:9c:5c:8e:9d:8a:
                    1f:10:b0:3a:b1:41:5a:84:a6:39:e7:60:37:d1:a9:
                    bd:49:2a:aa:1b:c2:45:99:d7:65:f6:71:b8:1a:eb:
                    1c:90:11:01:bd:b8:c0:03:fc:e0:54:01:9c:f9:94:
                    10:e2:ed:2a:ec:7b:ea:1b:b3:58:01:c9:9e:d4:44:
                    76:a3:11:53:57:50:d7:09:23:78:a4:5d:01:2a:ae:
                    26:e0:6a:2e:24:05:b7:31:7d:54:92:f9:61:7b:99:
                    ed:dc:56:be:14:f6:f4:4b:4b:9b:3d:b1:d5:10:31:
                    8c:28:f4:5b:1f:53:90:24:30:57:ee:c5:5a:64:7d:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:0C:CE:B4:5B:61:18:22:41:D1:33:B2:EC:71:93:72:A3:30:44
            X509v3 Authority Key Identifier:
                keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:f7:0a:76:ad:5d:01:92:7f:eb:f0:e2:4e:1b:25:44:8a:
         51:55:8a:e7:8a:61:96:86:0b:04:dd:bb:c5:34:79:f8:fe:50:
         8f:cc:eb:bb:b8:52:d3:78:6d:a2:e0:f4:d9:e2:42:cf:0e:12:
         22:9d:af:e8:16:12:11:c6:27:4f:b6:f4:30:a0:c7:7a:5f:9f:
         b1:36:ec:df:41:03:36:d7:f3:af:96:7a:59:7c:2b:55:52:25:
         d2:cb:58:9d:b3:22:1b:8a:10:45:47:92:9c:d5:1c:fe:6c:3e:
         92:fe:26:4f:db:de:24:cd:34:42:8f:16:eb:62:97:57:26:40:
         c0:18:3f:26:76:cb:a8:82:04:47:af:1c:6d:a1:ed:9f:f5:f1:
         bf:8f:3a:23:3a:c6:35:fe:45:ab:69:0b:a9:65:d8:b1:9a:12:
         3b:87:0f:59:dc:80:30:4e:1b:b2:5c:5f:74:54:a8:26:87:66:
         c0:ec:9a:25:61:bc:ff:57:4a:5d:a5:94:60:e0:3c:fd:0f:71:
         ba:05:7e:e8:5c:04:9e:33:1c:72:bf:54:25:54:a2:c6:88:e1:
         9e:55:be:11:42:85:b8:f1:a8:3b:1a:ad:b6:e3:e7:c3:4c:c6:
         93:28:24:b3:28:4f:65:2c:f1:b8:03:46:8f:66:a2:75:96:36:
         33:3b:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:26 2026 by rpki-client