Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          CeiwERZ743Zybzk8V9MuV1YcDKS74Vx6QrMukhxdGsk=
Subject key identifier:   70:26:FE:8D:86:55:A4:53:7D:54:43:9E:EE:09:23:B6:E5:34:C4:7D
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       019CAF478BA831CB3B3F51C4E40C00EDEA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          1517
Signing time:             Mon 02 Mar 2026 16:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 16:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 16:00:27 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: 8cO7ap3EDQ70LVXyTeeWIa03RQ8iAzup4X0W83ohOTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:47:8b:a8:31:cb:3b:3f:51:c4:e4:0c:00:ed:ea:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: Mar  2 16:00:27 2026 GMT
            Not After : Mar  3 16:00:27 2026 GMT
        Subject: CN=7026fe8d8655a4537d54439eee0923b6e534c47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:0e:85:26:21:aa:9b:7c:08:52:54:e6:ac:
                    b3:f8:8f:e0:1c:6f:92:de:a6:89:1a:3c:86:03:7b:
                    0c:c5:ad:36:5c:7e:5f:95:91:2f:cb:54:0d:93:36:
                    e7:8a:6c:a4:37:26:ea:f7:e1:10:6d:b8:9e:bb:9a:
                    50:c7:ae:9e:f7:35:5d:07:ed:5e:ba:32:43:8b:44:
                    28:77:61:91:d7:79:5a:95:ff:29:6a:41:32:23:7d:
                    67:ab:0d:fc:56:30:1e:ee:46:3a:70:88:20:fb:b0:
                    f9:29:f8:8d:c8:de:95:e9:c7:f2:09:c6:75:33:57:
                    3f:3f:91:b6:00:59:f1:79:47:5f:32:03:de:f4:9f:
                    13:da:15:d5:2e:5e:b7:c9:92:41:dc:ca:c9:46:e0:
                    ad:e8:5d:aa:cd:ac:f1:29:89:d8:ef:e3:4f:18:8e:
                    7f:41:ba:9e:30:54:fe:1e:39:5b:35:c6:3d:67:c9:
                    75:ca:f2:74:2d:cd:45:01:a9:cb:b3:ef:17:1d:1c:
                    a9:d3:14:2e:45:f7:92:c6:b1:c3:19:79:a5:39:77:
                    8e:d8:3c:84:84:d1:b9:0a:04:79:2f:81:b6:e3:c5:
                    ae:7f:6e:9d:9c:e0:e4:fb:79:6f:e5:64:1e:ff:bf:
                    59:82:ca:b9:52:81:1a:96:c4:28:16:33:dc:08:98:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:FE:8D:86:55:A4:53:7D:54:43:9E:EE:09:23:B6:E5:34:C4:7D
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:1e:66:df:68:39:e3:3a:a1:37:c4:ef:4e:94:c5:ac:66:
         14:38:72:b0:37:53:a6:40:0a:fa:3f:60:6e:84:65:29:ce:d3:
         60:2b:fa:e2:2f:8f:09:d9:e6:dc:9d:16:a8:82:72:5f:57:2b:
         a6:a3:32:77:86:2a:b7:a2:5b:68:1d:84:3f:c0:ae:4a:93:93:
         27:69:32:10:8a:e0:1b:7a:c2:05:4b:d9:6e:3b:98:08:92:36:
         7f:08:2a:a8:b9:15:c1:ec:2a:ff:4d:35:ac:bd:5a:63:7a:0a:
         2a:73:f0:6c:a5:d3:a1:68:38:61:2a:d1:81:07:d1:66:52:81:
         f2:59:d7:dd:b2:84:2a:44:39:4e:37:e5:3d:76:85:d8:34:1c:
         94:0c:f6:71:3d:0f:2c:33:ab:d5:7e:d2:b2:32:ed:fd:dc:0a:
         35:af:f5:d7:2c:24:85:ea:5c:5f:4f:53:5b:32:e6:a4:24:e8:
         47:8d:a8:93:99:37:ec:87:3a:83:b2:81:79:61:1b:85:93:98:
         7b:58:a0:08:04:e9:53:81:de:1e:72:75:3b:91:d1:10:b4:51:
         5b:54:0d:f8:37:92:b3:6a:7a:0e:17:64:20:34:7e:a7:bd:e6:
         c2:86:41:fe:9b:10:78:bd:33:38:46:47:7a:b7:4e:4a:ca:b1:
         f0:91:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:33 2026 by rpki-client