Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
File:                     C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json)
Hash identifier:          rJ0sOhPELDEhAIacOdvJVmZ4Rv4PXq8tvin7rEI02qw=
Subject key identifier:   09:2E:BA:94:EB:54:4B:0F:EE:2B:C6:4D:9B:97:2B:1C:18:5C:66:CE
Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
Certificate issuer:       /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Certificate serial:       019D3A8B01302EC365F6C6F279E1C291F590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
Manifest number:          01B4
Signing time:             Sun 29 Mar 2026 17:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:21 +0000
Files and hashes:         1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: NBSTEoZ2WxgroksTn1h6ooc216JF/XtY8Mzz0rlEXYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8b:01:30:2e:c3:65:f6:c6:f2:79:e1:c2:91:f5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
        Validity
            Not Before: Mar 29 17:01:21 2026 GMT
            Not After : Mar 30 17:01:21 2026 GMT
        Subject: CN=092eba94eb544b0fee2bc64d9b972b1c185c66ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:78:46:8a:ca:cf:5d:8d:39:f5:67:11:10:
                    17:80:9c:5a:21:0f:e0:61:f8:33:57:76:96:2a:c3:
                    2f:df:c3:2f:26:87:08:72:34:ba:db:8c:36:35:0e:
                    4d:08:fd:d7:2c:f4:ea:d5:0a:d8:84:a1:ff:a3:1a:
                    65:10:56:39:75:0f:4d:e2:60:0c:40:9f:9e:6a:47:
                    a9:b0:47:7c:ee:32:f8:fb:2e:be:8e:e2:3e:53:a7:
                    06:b4:4e:b7:b0:24:45:af:84:a8:4e:45:a1:16:dc:
                    d6:2d:69:ed:79:6b:ac:47:38:22:37:54:28:82:82:
                    0e:d3:4d:1d:6a:17:03:9e:79:ad:2b:f6:7c:f5:88:
                    72:a8:d6:9d:e7:6d:9e:68:07:06:6f:c6:e4:ad:52:
                    ca:03:44:92:2a:35:12:05:8b:e0:ea:af:b6:0c:83:
                    21:03:26:bb:3d:cc:76:70:fc:98:9f:fe:85:df:46:
                    ea:f6:a2:6f:39:0c:67:21:e4:9b:9a:46:50:58:c9:
                    26:42:94:1c:c3:79:a6:31:88:d0:cd:6a:7d:8b:e6:
                    64:10:f0:14:75:4f:e2:26:61:78:bd:de:33:3f:a7:
                    6c:c0:ab:b6:e8:d7:9b:d5:25:ad:b2:5b:1b:13:82:
                    4b:b9:e1:ec:24:a8:88:71:9e:e0:f7:27:cc:ed:8c:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:BA:94:EB:54:4B:0F:EE:2B:C6:4D:9B:97:2B:1C:18:5C:66:CE
            X509v3 Authority Key Identifier:
                keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:e5:d7:59:9d:97:e4:92:b0:f8:7c:53:02:ce:ab:3a:1e:
         4e:75:b5:b3:51:9d:f3:d6:a5:8d:65:48:1b:be:62:64:fb:cc:
         ed:24:ee:fb:c4:95:e1:2d:3c:6e:fa:ce:14:23:eb:d4:1a:93:
         8e:86:fe:54:22:6f:b6:99:ce:7b:6a:cc:d1:87:bd:fd:cd:db:
         5c:61:49:55:63:80:9e:e7:c3:3f:66:26:0e:15:2b:ed:21:eb:
         cf:9c:98:f8:1c:ad:3b:c2:89:f2:aa:9a:65:8d:97:9f:66:8d:
         40:ed:a9:37:56:78:18:b1:a3:36:ba:b4:3e:8f:5b:d0:7d:a5:
         5c:74:74:ff:31:ae:4d:38:da:90:17:09:0d:6d:1e:3f:45:f1:
         87:c9:50:f2:d7:9d:95:bc:db:e6:85:46:f0:d1:ca:53:a2:a8:
         8e:a6:c9:54:d5:f3:c2:d5:39:6d:14:8b:b1:d0:fc:23:3c:62:
         cd:4b:e3:13:e5:91:da:5d:61:d6:06:44:dc:68:c5:76:1e:dd:
         8c:29:a6:e6:05:14:b0:48:21:db:e2:3d:b8:e8:66:3c:79:bd:
         23:03:47:76:fe:09:cf:a9:31:1b:43:19:af:62:52:ec:49:5e:
         6d:d1:7a:87:ad:bd:c7:52:15:34:26:99:ce:a4:6f:10:2e:dd:
         e9:30:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:50 2026 by rpki-client