Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File:                     e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier:          yAnNNnncU3CB3QA/QyF16smuPELvd3g5V61Uy5csURk=
Subject key identifier:   CD:24:3B:0F:89:39:20:09:08:90:3D:6C:0E:C0:35:34:3C:DE:A6:CB
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer:       /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial:       019CAB6BE88F91DA0DC65F8A82D5C4DC69C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number:          16B5
Signing time:             Sun 01 Mar 2026 22:01:41 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:41 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:41 +0000
Files and hashes:         1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: aBlZG/W+Y6tJHBtXRcsgsjY8NHp/ETUeI5NOKuCcAHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:e8:8f:91:da:0d:c6:5f:8a:82:d5:c4:dc:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
        Validity
            Not Before: Mar  1 22:01:41 2026 GMT
            Not After : Mar  2 22:01:41 2026 GMT
        Subject: CN=cd243b0f8939200908903d6c0ec035343cdea6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:64:38:95:13:25:3b:6e:6a:c1:f8:44:34:
                    82:11:99:b1:87:94:65:13:54:7a:1e:45:b2:95:d9:
                    18:4d:fc:c6:41:76:33:1a:3a:61:f4:32:7e:31:ed:
                    c3:43:89:ba:9d:87:c7:9a:a9:31:29:30:80:04:1d:
                    82:ef:a7:3d:30:1a:68:c0:42:e9:50:d6:6e:f7:10:
                    c2:36:63:a3:6e:3c:b3:9e:1c:ce:c2:d9:50:34:55:
                    f1:7d:ac:85:98:d0:ef:a8:6a:89:f8:c0:cd:09:99:
                    28:ec:4c:29:9c:02:f2:18:e9:41:bb:fc:fa:eb:8e:
                    f5:16:60:ef:87:59:be:ad:84:72:51:b6:38:9e:e0:
                    39:2b:8f:a7:73:d3:81:5c:20:82:2f:74:56:24:b6:
                    d4:06:39:ac:ad:a7:81:6e:63:9c:d9:c3:a4:b4:42:
                    62:d3:6f:88:36:c9:1a:25:9e:61:d8:61:7f:f9:af:
                    eb:a7:57:b0:ba:93:82:f0:63:31:a9:ba:4d:6e:35:
                    d9:75:d0:21:6a:48:37:d1:2f:66:1a:27:81:c8:99:
                    55:2a:b2:e0:1c:c5:e5:af:83:49:4d:15:4f:61:84:
                    af:26:be:fb:78:b8:a1:b6:c9:df:f4:ce:6a:f4:c5:
                    25:77:b1:d4:57:89:d7:78:80:1e:21:d5:18:76:66:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:3B:0F:89:39:20:09:08:90:3D:6C:0E:C0:35:34:3C:DE:A6:CB
            X509v3 Authority Key Identifier:
                keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:08:be:ad:49:b0:cc:b1:44:0c:c2:55:65:92:fd:64:f0:
         de:22:5e:f1:c6:d5:4e:c1:61:f4:f3:c0:62:e5:07:03:19:68:
         28:19:f8:44:22:00:55:4c:b6:2f:26:d8:9a:be:8f:16:e6:c6:
         01:78:63:5a:61:51:3c:ab:85:9e:0c:d4:33:16:ef:da:54:73:
         ae:94:a2:2b:88:ce:83:29:9e:e9:90:4c:d1:5c:87:ea:d0:67:
         a9:59:30:f2:38:57:80:d7:75:75:a9:97:be:b7:ec:b6:0a:b5:
         15:69:4f:37:da:eb:25:af:8c:17:69:97:e7:df:21:eb:6f:4b:
         25:c8:00:b8:83:62:82:d0:4d:13:61:67:38:91:3a:e4:7b:85:
         58:cb:61:99:4a:68:b9:2b:a0:20:89:c0:43:0f:77:57:72:4b:
         cb:b2:08:ee:58:50:2f:b0:a2:e4:76:da:36:3f:b9:f8:fa:88:
         7c:5f:32:13:57:07:1f:c2:d8:e3:56:41:7f:a1:f1:7e:35:d5:
         c2:f9:fa:01:26:17:ae:3c:cc:86:6d:4b:34:8a:75:9e:d7:06:
         c5:90:90:ac:24:7b:3f:4b:8c:50:24:f8:2d:b0:49:39:ec:c8:
         aa:15:c7:24:f7:81:3e:d8:da:9a:6a:19:ea:10:12:f4:0f:8e:
         12:15:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:54 2026 by rpki-client