Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File:                     gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier:          0wX9SNTrzMKeDfqhyjw+rbIoKgmb+KvfnnAZxV03JuU=
Subject key identifier:   97:BA:10:7E:5B:97:FF:EC:6A:C2:B9:31:7E:7E:EA:75:19:87:10:B7
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer:       /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial:       019D38D383A13EEEFC5A4586FB6D7518239C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number:          07FC
Signing time:             Sun 29 Mar 2026 09:01:18 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:18 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:18 +0000
Files and hashes:         1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: XjbUVz026A5ECkPNePJN5w+So5E0F0c0uDtgsfoLPMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:83:a1:3e:ee:fc:5a:45:86:fb:6d:75:18:23:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
        Validity
            Not Before: Mar 29 09:01:18 2026 GMT
            Not After : Mar 30 09:01:18 2026 GMT
        Subject: CN=97ba107e5b97ffec6ac2b9317e7eea75198710b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:7d:2b:42:df:d5:ca:ea:40:e0:2b:d7:50:
                    72:fe:58:5e:16:71:42:46:70:53:a4:3e:69:fa:ab:
                    95:d0:74:f2:2c:5b:ba:3c:c5:d4:cf:fa:60:36:e8:
                    4b:60:5b:24:4e:0e:7c:c6:27:97:7a:7c:04:bd:6b:
                    bf:e6:53:5a:f1:9e:07:30:0a:18:fa:72:c3:8c:e9:
                    a0:63:20:74:97:52:7e:67:0f:17:a8:2a:1a:3e:00:
                    cf:43:6a:b2:81:ee:b2:7e:0c:b9:ea:55:13:2d:de:
                    03:e5:9d:f3:0e:25:7b:2b:35:f6:74:78:3d:cf:22:
                    0c:9c:8d:a5:34:0a:7f:91:7e:4c:75:b4:17:d2:04:
                    c1:8d:5f:68:47:99:4c:3c:4f:d8:46:94:8b:01:7d:
                    07:dc:75:b6:53:1f:07:7a:b9:c0:c5:a7:a5:bb:89:
                    8c:ea:11:5e:7e:88:d4:92:35:62:ef:ff:f0:73:ef:
                    f0:a2:5f:60:82:49:be:e6:a2:32:6c:75:02:d0:1e:
                    0b:22:ae:dd:55:56:19:25:c6:4b:4b:5f:c9:9a:9c:
                    6e:6c:83:ac:1c:e2:e4:9c:6c:c1:66:74:e8:57:3e:
                    9b:9e:25:12:72:12:8a:ba:7b:df:4f:67:35:28:84:
                    29:3b:eb:50:e7:45:81:41:b5:a7:94:35:b7:48:79:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BA:10:7E:5B:97:FF:EC:6A:C2:B9:31:7E:7E:EA:75:19:87:10:B7
            X509v3 Authority Key Identifier:
                keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:7e:96:6d:d2:ff:53:ef:30:d5:5e:e6:16:10:1d:79:5a:
         49:a7:a2:9b:e2:51:3b:04:38:58:58:eb:69:5e:a1:64:12:25:
         b1:6c:c1:61:42:3d:6d:d1:8a:a5:e2:31:42:2d:02:79:2c:ba:
         fd:9a:87:01:c1:76:92:61:4d:d2:93:1f:82:ea:aa:cf:b8:12:
         b8:31:13:f2:0f:a5:b5:37:f6:1d:4b:3b:3f:b4:71:ab:df:3b:
         41:3d:11:15:af:5c:39:e1:a6:c0:70:03:b7:cd:2f:e4:6f:c4:
         f1:71:0f:72:f2:8c:43:2d:8a:bf:66:eb:8d:bb:0a:4c:cc:1e:
         bc:de:43:5f:09:89:59:97:a4:0d:3f:84:d6:f4:36:8c:ad:91:
         8b:57:da:12:e7:c6:8a:b2:69:bf:45:b9:df:b2:87:4d:3a:b9:
         6e:9c:f3:95:cc:de:94:b4:d0:21:8f:ec:ee:26:28:12:45:9f:
         2c:08:0b:b5:58:1f:42:33:8b:4e:a6:98:bb:67:fc:48:ee:d1:
         e2:f9:19:4a:48:19:83:76:b8:d4:74:82:cb:f1:49:08:65:9b:
         f7:c0:5a:75:e1:98:aa:d1:04:65:14:02:ca:20:05:e9:d7:94:
         b6:f5:f3:cb:e2:63:3b:7b:d2:c9:53:10:3b:0d:8e:08:35:69:
         d6:94:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----