Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          A3LMWPjIr/xyaNce4ait9yx7TiTCwUEtOMnI8YRUBDw=
Subject key identifier:   0D:22:C5:97:BE:C2:43:62:BF:F1:AF:A7:5A:B3:C1:38:D1:AA:72:0E
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       019CAC1030F47FEEA9B83D98E3F39E939BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          07A2
Signing time:             Mon 02 Mar 2026 01:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:08 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: wuioI+73UkWyXFkhpPo+XabiOC+j+uV5taQSYOU3E20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:30:f4:7f:ee:a9:b8:3d:98:e3:f3:9e:93:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Mar  2 01:01:08 2026 GMT
            Not After : Mar  3 01:01:08 2026 GMT
        Subject: CN=0d22c597bec24362bff1afa75ab3c138d1aa720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:bd:5d:91:03:31:43:a1:db:1b:55:b4:9b:
                    c2:92:68:d3:fc:e5:d2:1b:a0:00:1d:68:39:d6:72:
                    90:5d:a7:4c:d8:bd:ef:56:22:49:22:6c:b4:b3:2f:
                    1b:c8:09:2e:7a:44:b0:39:c6:80:e1:48:2d:0f:c4:
                    c1:6c:b4:9e:9c:65:42:6e:fb:62:70:a5:58:c7:7e:
                    0b:1d:3d:73:ed:da:c2:6f:de:13:a8:09:04:78:60:
                    71:b1:31:ad:03:b4:81:ae:64:5c:d4:38:bb:96:35:
                    ba:54:00:ce:c4:13:b5:fc:1c:17:fc:bd:9d:67:23:
                    4d:24:c4:09:48:28:98:d1:cf:b6:c3:9c:72:3f:38:
                    f9:5c:a1:83:44:61:84:ff:46:dc:08:41:61:04:03:
                    53:88:57:2b:38:7f:5c:39:3f:27:6e:28:1b:d2:3e:
                    f9:a8:58:88:f3:8e:e4:9e:48:f8:2d:24:73:4c:2d:
                    f2:6e:7f:9b:87:79:cd:82:ba:9e:6d:ae:0f:84:05:
                    42:32:95:71:6b:f0:50:74:09:39:e2:a4:4d:c9:b0:
                    0d:14:3a:e4:67:de:f4:cc:40:ad:42:57:6b:09:5d:
                    c5:57:50:50:85:bb:1c:2d:35:6b:e5:b6:f0:46:09:
                    b7:03:2a:06:be:85:a2:91:51:16:2b:ca:f2:5f:70:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:C5:97:BE:C2:43:62:BF:F1:AF:A7:5A:B3:C1:38:D1:AA:72:0E
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:17:a5:1e:b7:ae:02:03:55:b2:26:84:18:b6:ab:9d:51:88:
         ce:02:72:4f:b8:77:4e:28:75:91:69:96:d2:b6:9e:aa:3b:77:
         bc:8e:b2:1c:ce:ef:12:e6:ce:a9:31:4b:99:9b:ea:28:10:69:
         d9:2e:ac:83:9b:58:13:85:95:76:e9:9a:8e:52:ca:13:95:84:
         6e:7c:e0:9f:b0:74:d8:43:5c:4b:a4:c4:5a:dc:3d:b1:f1:b8:
         c1:e4:27:e6:35:58:66:84:8b:e8:55:25:59:c1:1e:e3:8a:50:
         ee:d2:1f:ff:35:9b:ac:68:83:80:2c:ef:19:0e:2b:fb:4e:83:
         a1:4c:5c:29:e1:2d:38:6d:65:7d:b5:63:e0:a3:07:8f:4b:61:
         b6:04:da:9a:d5:00:32:c6:ef:c2:bb:d5:a3:5d:16:74:ec:cb:
         a0:a4:d9:7c:fd:2d:81:25:77:76:f3:84:ef:2f:f4:e6:ff:7a:
         3a:cd:b9:63:47:4c:33:32:5e:37:95:d1:20:c9:a4:da:ba:f8:
         bd:1b:82:1b:91:4b:d6:6d:4f:47:84:c7:cd:5f:28:e8:67:bc:
         c1:06:d9:23:f5:a9:94:21:0b:12:48:72:1f:2c:83:15:fe:69:
         82:22:04:4d:99:91:14:1a:5a:03:4d:51:0f:be:37:44:1d:b3:
         84:03:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:41 2026 by rpki-client