Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File:                     UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier:          G6DeZeeLjTRS6ELJsalHtAauJDLKJvGI/U3usH+BqnY=
Subject key identifier:   75:9E:F6:BE:AE:DF:D4:01:C6:42:92:FA:C2:22:5E:76:EA:26:48:8B
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer:       /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial:       019D38D34B300A17338CF732D6C61A3EC57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number:          093D
Signing time:             Sun 29 Mar 2026 09:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:04 +0000
Files and hashes:         1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: d97C6rxMxHHpzQpkfSr+U/5AJKYZKR3vgo4rdnFlqlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:4b:30:0a:17:33:8c:f7:32:d6:c6:1a:3e:c5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
        Validity
            Not Before: Mar 29 09:01:04 2026 GMT
            Not After : Mar 30 09:01:04 2026 GMT
        Subject: CN=759ef6beaedfd401c64292fac2225e76ea26488b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:e0:df:e3:d1:27:4b:64:b2:6a:84:9f:49:
                    83:e1:f0:4e:76:96:a6:aa:80:95:1e:7d:f6:65:3e:
                    92:4e:d9:5d:71:ab:25:43:e9:14:58:88:3e:16:f6:
                    a2:f3:1a:cf:0b:02:e1:01:39:96:65:10:e1:fa:b4:
                    c7:7f:86:0b:ef:60:89:c4:9d:1a:2b:af:ca:4a:5c:
                    70:a1:58:02:0c:0c:48:ab:1d:4e:b7:96:76:7a:46:
                    f7:0c:cb:bb:e4:42:ef:7a:20:ea:b7:78:ad:2b:0f:
                    a1:f9:11:dd:a6:b3:6d:16:a0:60:73:ad:fd:f6:2b:
                    96:d9:94:0d:d7:c1:2b:0f:09:4a:e7:47:61:17:3a:
                    fd:0b:86:1b:35:9e:35:93:58:91:2b:de:6a:bd:40:
                    8c:6b:ef:3c:82:ab:75:ef:ef:2d:a4:5d:d0:b4:77:
                    e9:99:9e:59:5f:3b:06:a1:5f:fa:aa:4b:7d:76:e4:
                    87:c9:7c:b0:9d:28:c2:6d:69:d3:2c:5e:fc:c5:34:
                    8b:42:59:2b:41:78:25:6c:9a:74:b7:28:20:c1:43:
                    bd:7d:40:46:04:44:8b:8e:a4:39:3e:71:44:dd:12:
                    9e:20:1c:9b:e0:13:68:1c:57:50:95:93:cc:ec:7d:
                    11:7a:58:c6:ff:ce:e3:d9:06:72:32:f0:30:17:98:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:F6:BE:AE:DF:D4:01:C6:42:92:FA:C2:22:5E:76:EA:26:48:8B
            X509v3 Authority Key Identifier:
                keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:1c:7e:1c:1d:1d:ee:bd:cb:72:8f:16:f8:ae:62:ca:42:
         dc:a4:57:61:f4:f3:1a:e7:4c:a6:44:7d:78:05:5f:e9:f1:fd:
         92:06:9e:02:87:02:bb:00:ee:bf:ef:84:70:92:76:13:9e:9f:
         36:ab:0a:b8:54:12:c9:1c:2c:fa:f9:75:6a:9b:e9:89:17:7b:
         80:be:bf:f3:40:a2:03:73:1f:93:0f:ed:a2:51:f7:52:a6:f2:
         e3:e9:9e:c8:a8:96:84:4e:7d:08:48:d5:39:99:4c:01:9c:34:
         98:f0:54:4e:d4:a8:1f:e0:bf:84:b3:41:0a:f0:26:34:3b:33:
         ac:9c:5b:76:f6:79:fb:58:1e:cb:de:14:c0:ca:7c:50:75:cf:
         44:6f:d9:28:4f:29:ba:20:37:42:e3:75:55:e9:e3:be:fc:e4:
         e4:30:54:53:f8:8f:57:7c:b5:83:8f:6d:7f:eb:59:14:c3:31:
         43:80:c7:f8:a6:a1:fc:db:b8:a3:38:8e:47:8c:51:d6:eb:6a:
         93:5c:1d:35:b8:5b:37:81:34:cd:cb:f7:5e:09:83:72:e5:fd:
         a9:d4:40:a9:ed:eb:f3:44:81:96:2e:6b:94:64:d9:c0:0f:67:
         a7:db:9a:07:af:92:6c:27:36:f9:ea:52:93:c6:93:9c:cd:f4:
         16:91:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:00 2026 by rpki-client