Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File:                     1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier:          A8sEJtUeevhSXUy0i4xZ1tHwdSN4S65hIjrZ+3WF+kI=
Subject key identifier:   C7:7B:28:CC:EA:9F:F0:D0:0D:20:6D:67:FC:9F:A3:BC:92:36:4A:A6
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer:       /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial:       019D3866A01C96113C053614220E0EF279BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number:          0D5D
Signing time:             Sun 29 Mar 2026 07:02:22 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:22 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:22 +0000
Files and hashes:         1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: nGCwYx1FillKtoayX+dn1VjKHq5n490nYyBR1BtHLyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:a0:1c:96:11:3c:05:36:14:22:0e:0e:f2:79:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
        Validity
            Not Before: Mar 29 07:02:22 2026 GMT
            Not After : Mar 30 07:02:22 2026 GMT
        Subject: CN=c77b28ccea9ff0d00d206d67fc9fa3bc92364aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:72:0b:73:51:22:19:d5:47:47:0b:f6:4c:
                    36:81:ab:fd:f5:e5:0e:55:98:9c:36:a1:2a:93:87:
                    23:7c:69:4c:b9:ac:41:10:55:ff:ad:75:fb:49:f0:
                    9b:66:1d:38:bd:68:7c:66:99:00:3b:06:09:5c:ba:
                    3f:67:a1:d1:70:9b:d8:79:46:43:0f:ed:13:0c:e4:
                    a9:8e:48:04:ca:d4:27:69:3f:b3:4d:81:ad:ea:39:
                    00:ae:c6:87:33:61:92:80:5e:fe:2a:52:fc:0e:07:
                    0b:08:64:19:70:4d:7d:ea:35:b0:b0:95:4e:68:d0:
                    92:b9:72:6e:a5:27:2f:b2:7d:23:34:8c:d3:a3:a2:
                    23:55:5a:f1:6b:99:96:0b:82:76:39:4d:23:bb:78:
                    89:d8:4e:bc:d7:5b:cf:98:dc:ca:4d:9f:a5:23:74:
                    75:ae:b1:91:5b:aa:37:b7:b5:77:05:62:03:69:c4:
                    cd:ba:a3:be:b4:c2:77:4c:d6:19:ee:32:7f:6b:29:
                    8a:a7:8f:a3:14:4f:d7:0a:90:c4:67:54:7b:40:dc:
                    68:16:1e:a4:8a:44:cb:00:64:bb:a8:69:5c:88:60:
                    54:60:22:1c:e5:60:f8:f9:38:6b:95:81:e1:7a:60:
                    e0:ca:7a:be:ac:1d:2c:9d:97:2e:08:ce:f6:a5:99:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:28:CC:EA:9F:F0:D0:0D:20:6D:67:FC:9F:A3:BC:92:36:4A:A6
            X509v3 Authority Key Identifier:
                keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a2:19:2c:d9:7a:90:15:58:b1:a7:0e:34:41:8a:1a:17:c9:
         9e:b0:99:1b:0d:b0:c8:51:c1:9c:83:1f:86:c5:21:b4:15:4d:
         1d:8d:0b:ac:03:84:61:7d:fa:3d:c0:23:7c:21:c9:b3:34:b6:
         aa:6b:fb:99:80:63:62:47:1c:c8:44:b6:ad:94:7b:58:74:cc:
         7e:ec:ca:5b:9d:08:ed:1c:6e:27:0e:90:a4:84:04:f4:b9:55:
         97:dc:5f:eb:99:86:f0:fd:67:7f:90:ac:90:d3:2a:f8:f2:1b:
         f1:76:f8:58:62:83:4e:7f:f8:12:07:fa:d8:78:25:56:51:5b:
         ae:05:55:e1:e4:41:00:2c:57:af:f9:c5:91:ae:70:ed:76:c8:
         03:5d:64:83:96:d0:f3:8a:39:53:12:91:62:39:13:d4:51:9d:
         f9:d0:17:ec:4a:c8:f5:46:08:f7:ec:9c:bb:52:fd:f0:5b:90:
         fc:91:d5:42:2d:0d:2a:81:36:e3:85:16:5f:74:d3:df:17:81:
         8e:ff:70:43:96:ec:87:22:ed:24:e0:b1:88:da:c2:6c:05:69:
         dc:68:82:2b:03:5b:34:6c:ce:b0:9b:ee:00:f6:14:f8:d0:15:
         56:75:a9:6c:8a:20:70:54:94:ba:f5:5e:cc:91:e9:38:d4:50:
         f5:95:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:30 2026 by rpki-client