Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          vqoJnnPmjvTiaX0xRWJ0uDpOOHEXvVRrNiyaSGo/7wU=
Subject key identifier:   9A:26:45:FF:00:5F:7B:35:F1:8C:81:74:12:00:6E:E0:36:08:B6:D5
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       019E30E082648A9A387F61D2B50747D5FC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          1398
Signing time:             Sat 16 May 2026 13:01:20 +0000
Manifest this update:     Sat 16 May 2026 13:01:20 +0000
Manifest next update:     Sun 17 May 2026 13:01:20 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: Kr7swiONYZYD8UPlapU3lqg9LfpiGZFI/xLg7Pp8kGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:82:64:8a:9a:38:7f:61:d2:b5:07:47:d5:fc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: May 16 13:01:20 2026 GMT
            Not After : May 17 13:01:20 2026 GMT
        Subject: CN=9a2645ff005f7b35f18c817412006ee03608b6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:b5:d7:30:40:a4:2d:8a:97:b0:13:7f:cc:
                    61:f7:8c:b6:c0:d3:ba:8a:d5:04:1e:20:07:d1:6a:
                    66:aa:fc:cc:4f:15:08:a5:55:96:b5:0b:56:9e:66:
                    15:9d:1c:3c:ea:00:87:b9:f8:ad:4b:0d:e1:c7:56:
                    1f:c3:97:d3:4b:26:cf:35:da:05:30:00:9f:e2:e9:
                    de:68:8c:89:bb:b8:26:01:12:3f:04:f2:5e:13:0e:
                    2c:52:ea:4f:12:50:06:39:f9:34:1d:26:b3:01:17:
                    54:1e:c1:01:60:01:cd:6d:25:8e:b1:ee:31:65:31:
                    5d:eb:61:99:97:7f:1a:5c:96:b0:47:a3:7b:70:7d:
                    51:ac:7a:d2:c2:e7:93:64:ca:e6:ab:d6:39:51:fd:
                    37:96:1e:8a:ce:cb:7d:13:0c:10:71:f8:7b:a7:db:
                    7e:9a:1c:21:5e:40:2c:05:a2:6f:9d:85:58:99:8a:
                    60:f6:2b:2e:ae:b9:cf:27:96:47:03:6d:5c:1d:db:
                    c8:04:6b:42:6f:82:6f:ec:79:15:9d:a4:c1:e0:99:
                    fc:00:e5:f9:25:05:9c:dd:4c:06:fb:82:ef:4a:c7:
                    02:df:63:8c:75:ac:c7:c8:aa:e8:d7:1a:96:d6:7d:
                    24:46:24:18:6e:a7:9b:60:62:33:8e:6e:df:ef:32:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:45:FF:00:5F:7B:35:F1:8C:81:74:12:00:6E:E0:36:08:B6:D5
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f5:1a:ca:1c:38:e5:e7:2e:c1:45:43:cf:83:3f:f3:d3:c1:
         f7:3f:cd:ca:aa:93:57:2b:08:ab:4b:26:7b:0e:1c:66:62:5d:
         84:b5:2b:42:28:93:ba:55:09:75:95:94:9f:fe:5e:d3:87:8c:
         81:ba:d3:22:d1:c1:ee:b8:89:c7:58:27:01:db:4f:94:20:3e:
         26:b9:72:25:67:ff:b2:b9:52:1e:0e:4f:80:ac:08:31:2f:68:
         8c:58:21:40:03:a7:71:38:df:4a:34:f5:5d:17:98:7a:13:2f:
         a1:28:87:0e:cc:fa:d2:f5:74:70:08:76:c0:d5:a8:5b:fb:8b:
         d0:36:d5:ed:b4:5a:17:80:5c:44:48:d1:f1:4d:69:38:96:c6:
         50:8d:63:3b:32:51:3d:27:d4:05:49:da:bc:a6:7c:2a:d4:db:
         2e:90:7c:44:6d:2f:f2:e7:bd:d4:2d:5c:40:b6:a5:f0:35:54:
         56:c6:cb:32:fe:fb:cf:02:cd:f7:53:61:f9:24:43:3f:a1:10:
         3e:7d:b0:df:26:64:db:e0:08:bd:51:f8:74:2e:ad:c8:47:24:
         61:0c:f9:b9:99:8f:13:3e:f8:b7:26:66:ba:14:7d:92:e0:fd:
         f1:e3:8e:a7:92:54:a2:8b:12:1d:6b:a2:71:bb:b2:66:4a:98:
         ad:d2:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:51 2026 by rpki-client