Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File:                     xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier:          +NxrkEm/h6Xo1cEwIxS0FvRWwKnFy72pVyzI0JWHKZ0=
Subject key identifier:   D0:0E:EA:A0:5D:28:D7:56:16:7D:24:DE:F8:5D:BB:95:15:FC:98:5E
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer:       /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial:       019CAC0FBCAD61606B4EBF7F994647A7313F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number:          0E87
Signing time:             Mon 02 Mar 2026 01:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:38 +0000
Files and hashes:         1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: SvbXh/alBdH8+2E0ukycKDJAQdnoXV90QT4MtvONBtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:bc:ad:61:60:6b:4e:bf:7f:99:46:47:a7:31:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
        Validity
            Not Before: Mar  2 01:00:38 2026 GMT
            Not After : Mar  3 01:00:38 2026 GMT
        Subject: CN=d00eeaa05d28d756167d24def85dbb9515fc985e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:53:7b:9c:3a:63:a4:3e:fd:68:92:4f:4c:
                    35:79:89:bf:64:2c:ac:5f:57:4a:ac:e7:a6:1a:d2:
                    4a:e1:38:ba:3a:7a:fa:ca:29:c0:d9:c7:df:29:40:
                    83:e9:3e:39:a6:5a:ae:6b:2f:0f:22:0b:27:f2:d0:
                    16:11:86:f1:e2:0f:7a:4c:c6:45:84:26:e1:cb:4a:
                    2d:63:83:03:20:1e:b0:9c:6b:96:22:a0:7c:77:49:
                    e7:69:0f:ac:82:b1:75:7a:d7:46:e9:39:48:64:c0:
                    57:64:e0:6f:ec:c6:b7:46:0c:d1:1e:54:1c:cc:de:
                    e0:4a:34:9b:2a:12:a5:c9:29:8b:39:3d:90:e2:07:
                    55:64:b8:3d:76:d8:e0:e7:3b:aa:44:af:bc:41:6c:
                    ff:01:b4:48:13:22:b3:de:10:02:87:56:2c:25:06:
                    2e:4d:ce:33:9e:6c:83:28:55:6b:85:5b:5a:4b:c7:
                    e8:e3:cf:6d:87:e7:88:c9:5c:07:52:e9:e6:b3:19:
                    97:fe:bf:3a:e2:d8:93:de:45:a3:1a:ca:9f:fd:43:
                    e7:54:92:f6:67:3d:f2:1a:e9:e0:7b:e6:dc:49:f2:
                    ed:05:00:b0:f9:c3:d4:22:40:6f:77:50:59:19:69:
                    2f:29:bd:d5:8e:88:68:12:95:86:23:cd:22:59:5a:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:EA:A0:5D:28:D7:56:16:7D:24:DE:F8:5D:BB:95:15:FC:98:5E
            X509v3 Authority Key Identifier:
                keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:ad:10:23:30:af:b2:98:90:ad:0e:d9:33:3b:27:67:25:
         e6:6a:ac:70:ab:2f:30:53:c2:f0:16:f7:41:2a:38:82:7d:f5:
         a5:61:f8:1f:c5:2d:14:71:6b:c4:7e:3c:d7:b0:d3:26:76:cf:
         1d:22:b3:05:61:0b:f3:3a:cd:68:12:59:a3:95:26:7a:da:1a:
         f1:1e:fe:c1:55:fb:dd:64:17:3f:79:1a:fb:eb:23:c3:89:7a:
         5c:dd:73:ef:d7:0b:97:82:f7:eb:c4:a6:a8:54:01:53:07:02:
         a6:5d:74:45:1e:f2:81:fd:ea:c2:86:b7:a7:9d:06:fa:0d:77:
         47:30:e5:62:1a:49:27:bf:fb:b7:3e:bb:a1:04:8e:6c:a8:a7:
         11:75:8c:43:1a:78:e3:e0:ff:cd:dc:07:f6:1e:76:5f:f4:06:
         8f:21:15:1e:c3:71:28:f9:d3:5c:57:a9:6d:a2:06:fb:d1:ae:
         bf:e3:ba:e8:e5:06:a3:5b:c5:21:c7:41:1a:6a:f2:09:62:f1:
         79:3c:0f:13:e4:2c:eb:2d:f7:f1:fc:28:81:ce:eb:4b:91:47:
         45:47:76:b5:c1:98:4b:53:ab:52:25:ff:97:cb:9e:bc:be:62:
         95:a3:34:2d:b4:62:01:f7:ee:55:29:ae:c4:49:ec:a6:2f:bb:
         c7:7d:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:18 2026 by rpki-client