Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          scmCE5tqRJNg8bykTVLwMrXyYoiRjg8MIMlSjp6Gb+0=
Subject key identifier:   8C:CE:03:88:83:2B:E0:83:7F:9B:B3:86:8A:C3:E0:3A:24:22:3B:BC
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       019D3865668B8E2C97893157F995D0A1FA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          092D
Signing time:             Sun 29 Mar 2026 07:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:02 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: B2GGke//pMkW73E/FGQ3/ZaCtNRCBws2E4bOmuuzEiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:66:8b:8e:2c:97:89:31:57:f9:95:d0:a1:fa:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Mar 29 07:01:02 2026 GMT
            Not After : Mar 30 07:01:02 2026 GMT
        Subject: CN=8cce0388832be0837f9bb3868ac3e03a24223bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:86:95:9c:43:d1:32:53:6e:e1:a3:09:20:
                    15:d0:31:c0:bf:7b:8f:02:20:07:c8:8f:20:11:6b:
                    cb:a8:42:78:03:8d:3e:e8:db:63:d6:17:27:b0:ba:
                    2d:db:df:93:8e:74:08:d5:86:42:ac:2b:81:76:e1:
                    14:bb:a4:a3:6a:20:f0:74:fc:f2:c6:32:bd:f4:48:
                    06:fe:a1:d0:b5:55:43:c5:c1:bb:c4:6a:e6:3f:59:
                    71:b5:97:ff:88:5a:04:7d:cd:6b:4c:66:4c:68:77:
                    c0:eb:51:ca:fb:e8:38:8a:94:15:27:4c:05:41:47:
                    d9:53:11:3e:3c:c6:60:62:6d:d0:46:1f:78:30:c6:
                    7a:c1:ee:28:7f:f7:58:53:9e:ee:c6:ef:2d:2f:2a:
                    61:81:a3:cc:f9:96:39:13:ae:95:44:1a:39:b4:3b:
                    a9:d7:9b:8c:f1:2a:bc:6f:74:79:ac:4d:a5:60:93:
                    ce:4d:6f:85:47:38:23:67:e9:d8:6f:39:ea:6b:57:
                    d0:15:47:9a:13:e7:bd:7c:67:27:06:4d:1d:d5:72:
                    cd:d0:ce:71:f0:35:90:ac:77:f3:78:c0:7e:24:fb:
                    67:e0:5c:a8:06:ef:78:10:8a:36:cc:8e:f2:78:98:
                    06:c4:ed:f5:8d:2b:4b:f5:c8:b6:10:d6:5a:d8:46:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:03:88:83:2B:E0:83:7F:9B:B3:86:8A:C3:E0:3A:24:22:3B:BC
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:0c:a1:58:34:86:0f:aa:52:a3:56:9a:28:25:27:8f:9d:
         9a:99:59:ab:af:23:a3:2a:ed:3e:c3:6c:83:a4:68:c7:43:af:
         4b:4f:22:bc:25:6a:cf:e2:f0:21:c8:e4:51:4a:73:76:34:a5:
         cc:cc:75:17:46:92:fd:0b:01:90:ca:1c:2f:66:3c:3f:19:4a:
         7c:08:1d:ed:93:1f:29:c8:46:34:da:2e:8e:17:26:7b:04:1b:
         26:71:46:f6:03:70:ff:04:d6:26:87:12:5a:c9:57:4b:11:94:
         df:4e:e6:28:ec:6c:ec:a2:c5:c8:ed:25:4f:1a:24:43:ff:f8:
         ad:69:44:6f:36:cd:3d:36:75:92:77:46:60:e2:c6:74:81:05:
         ce:06:8e:48:7f:e2:8f:f1:60:08:8b:98:f9:3d:b0:ec:f0:c5:
         e2:f6:aa:1a:b3:49:83:c7:c9:db:d0:04:d8:13:6c:8a:cf:07:
         af:14:8d:71:67:3f:be:74:6f:ac:80:f0:aa:2d:3c:1f:8a:54:
         85:65:58:77:dc:29:da:59:9e:05:63:4a:db:c2:9a:74:ef:fd:
         ba:6a:bf:e1:86:79:87:4b:a7:4c:a7:f4:66:83:36:7b:14:a1:
         81:69:b1:2f:2e:e6:0c:f4:74:13:21:0d:8f:f6:97:30:b6:08:
         0f:8b:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:12 2026 by rpki-client