Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          jEimfppvSFjw6RPiIhOVBxhcU30M+HMnF5btqhLrAA0=
Subject key identifier:   C1:87:5A:82:E9:32:ED:94:2B:4A:B6:93:05:4C:A2:98:F2:63:91:F4
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       019D38D3450314561F11B5E9BE3C8A7541F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          0B45
Signing time:             Sun 29 Mar 2026 09:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:03 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: tRpm5+s7VXu+dvahbEegkO370DdAS1BavBN5n1jzotg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:45:03:14:56:1f:11:b5:e9:be:3c:8a:75:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Mar 29 09:01:03 2026 GMT
            Not After : Mar 30 09:01:03 2026 GMT
        Subject: CN=c1875a82e932ed942b4ab693054ca298f26391f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:eb:0a:4c:ff:ce:9b:4c:b9:14:24:de:64:
                    6f:95:c3:b4:44:41:b5:76:a0:c5:eb:8e:57:10:7f:
                    ca:3f:5c:b3:a1:1b:1b:d9:d5:9a:2a:52:6b:18:8a:
                    34:91:9e:f2:d9:43:9f:c7:46:9d:54:0d:92:46:7a:
                    99:07:3c:b9:c7:75:f2:da:ff:cf:50:f1:4e:96:3d:
                    31:65:f2:6e:81:df:d1:ea:e6:d5:05:93:fc:e1:31:
                    66:a6:ad:4d:63:38:e2:f8:c6:12:38:d1:c9:f3:8f:
                    18:67:93:bd:57:c4:e6:34:87:bf:d9:4b:c5:40:c4:
                    49:9d:f6:72:04:92:7a:06:62:1b:db:34:ba:24:00:
                    66:fc:19:69:0e:ee:23:e1:b4:e5:7a:92:4b:6d:33:
                    fb:62:92:db:d8:1a:55:d4:29:4a:87:5f:42:10:01:
                    1e:69:8b:77:e9:00:f5:7a:b9:e6:db:44:10:f7:20:
                    25:0e:58:17:93:c7:50:5f:c8:a9:57:8a:b6:ec:45:
                    84:87:ee:e0:1f:f4:46:07:6d:9e:dc:8e:b2:13:e1:
                    0a:00:8d:9c:ac:ef:83:75:b2:a3:fa:85:60:d6:81:
                    bb:8b:ee:5e:dc:52:3a:3f:62:02:89:46:57:ab:f2:
                    79:b7:53:74:8b:7a:dc:5e:2e:7e:07:50:53:27:24:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:87:5A:82:E9:32:ED:94:2B:4A:B6:93:05:4C:A2:98:F2:63:91:F4
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d4:1e:00:03:82:ff:b7:b9:8d:d9:c0:09:67:46:8d:7f:81:
         03:9e:37:15:a7:32:39:1f:ed:bb:55:cc:06:ab:dd:27:7c:82:
         2f:30:5b:96:9f:35:65:1d:77:bc:ef:8d:93:f2:69:d6:ea:6e:
         c4:0c:28:dc:fb:17:17:a8:29:f0:df:83:e4:6c:8f:74:8b:23:
         c0:44:fe:89:4c:be:37:0e:33:4b:e6:59:33:b6:f6:63:2c:15:
         c7:96:8c:1d:5f:8e:d7:07:04:d5:06:1d:7f:62:36:1b:c9:cb:
         28:1d:5b:c3:95:bf:32:2e:a8:df:b0:03:85:03:e0:60:bb:d3:
         53:09:2c:7a:f6:58:58:54:be:10:31:28:cb:e6:1f:91:f8:89:
         8e:46:f5:97:49:b2:05:39:4e:49:7e:9e:c8:6e:30:08:f3:0f:
         1a:80:56:1a:06:16:b6:d8:f6:47:78:07:07:29:86:79:53:82:
         6c:c4:be:22:01:a5:9b:55:f3:cf:f2:ac:a4:05:e4:3b:41:c5:
         2d:76:0d:dd:6d:7f:c9:67:81:79:bd:9a:f6:06:e1:34:b2:c4:
         da:a3:7e:b0:64:a7:79:c9:4f:26:97:d8:41:f6:32:01:d7:3f:
         38:80:0a:a4:a5:a3:7c:e6:af:ae:b6:c3:56:24:79:c5:08:5a:
         3c:01:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client