Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File:                     1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier:          Imh4g7IzWMjFJB7JB/W6TK6Oxuz70murgNswvwGGLy4=
Subject key identifier:   E9:51:A8:FE:F4:D1:D9:37:8B:35:25:E8:05:75:F9:4A:83:EC:65:D7
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer:       /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial:       019D39776011AAD41F081DAA61D29CA6F179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number:          07B4
Signing time:             Sun 29 Mar 2026 12:00:17 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:17 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:17 +0000
Files and hashes:         1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: rYXCvQm2KPjRlfy5BSIVWmg/MePM89XUThGjaI40JgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:60:11:aa:d4:1f:08:1d:aa:61:d2:9c:a6:f1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
        Validity
            Not Before: Mar 29 12:00:17 2026 GMT
            Not After : Mar 30 12:00:17 2026 GMT
        Subject: CN=e951a8fef4d1d9378b3525e80575f94a83ec65d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:68:00:d6:e9:c0:6d:c6:ed:1b:37:e6:38:
                    ec:0c:9d:8b:15:a3:93:76:3d:aa:f8:0f:7a:bf:d3:
                    6b:1c:31:e9:ea:c5:29:28:bc:dd:c0:98:df:e9:b4:
                    0c:db:20:23:d0:7d:24:d9:a9:00:6b:31:df:63:16:
                    f0:04:67:10:81:5d:0e:e0:3b:3e:39:87:3f:04:7a:
                    1a:14:3b:4a:76:d7:36:57:15:71:1b:61:67:ce:9e:
                    3a:7a:bb:05:cc:34:1b:be:a6:4a:7c:fc:38:77:52:
                    3e:96:df:ec:fb:83:fa:7e:3a:46:57:97:2a:c5:c9:
                    f0:30:47:a2:72:33:1d:30:44:fd:02:3d:00:3c:17:
                    32:34:15:da:39:40:7c:db:01:ca:e7:22:51:59:a2:
                    8a:c9:f3:4b:00:2e:b2:50:c0:0d:81:98:9a:9e:95:
                    6c:a6:ed:96:11:a2:bf:a1:82:0b:7c:9b:63:08:12:
                    9d:86:c4:e5:4a:e0:ee:cd:60:24:56:97:3f:f7:df:
                    c1:b3:b2:26:b5:e9:d3:32:4a:3a:b9:e7:72:da:b7:
                    db:8e:78:2d:2e:d6:06:bf:88:58:ee:24:56:c7:7e:
                    fc:5e:b0:a0:03:ee:d6:f9:82:d2:1b:36:a9:35:29:
                    e9:70:31:10:7c:cf:4b:19:e7:4d:51:53:cd:e7:27:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:A8:FE:F4:D1:D9:37:8B:35:25:E8:05:75:F9:4A:83:EC:65:D7
            X509v3 Authority Key Identifier:
                keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:53:f1:e1:c9:34:82:80:96:aa:f0:c7:b4:25:5e:3c:d6:
         d4:97:c2:3e:4c:98:54:37:f3:fe:93:1b:07:66:b6:cd:7d:fd:
         7d:a0:c0:92:a9:43:ab:68:79:0d:ff:e1:29:10:ab:d7:6a:37:
         ad:86:f1:8f:2d:4e:78:d5:7d:2c:9f:3d:7d:90:1d:7b:2a:14:
         a0:5e:c3:6e:f8:44:c2:52:cc:4e:61:e4:80:e2:91:3a:3f:10:
         2f:1d:10:6b:10:7a:02:96:0d:af:3e:fe:97:cc:f0:73:7d:03:
         55:4a:1c:d9:22:44:db:01:24:b6:b7:29:48:9d:39:07:4c:96:
         d4:c4:fb:5c:74:b5:ce:fd:25:d5:be:ff:08:52:99:88:30:c1:
         4e:8b:84:3c:56:f1:d0:4d:1e:22:65:57:cf:76:b1:12:bf:4a:
         67:4e:0a:03:38:80:21:39:83:5a:6e:42:22:02:a5:1e:48:9c:
         b9:85:bf:38:d6:a9:2e:ae:5d:4c:26:31:37:fb:2d:a3:11:23:
         22:0d:6c:da:1d:37:02:76:33:fe:b6:40:a3:a4:1e:10:c0:d5:
         73:bd:34:91:49:e4:d4:f7:8d:87:78:54:c4:19:30:6c:ca:fc:
         64:80:5a:e2:fe:d5:83:b5:f3:4a:e5:ba:9c:d9:98:32:0c:c4:
         24:f3:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:34 2026 by rpki-client