Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File:                     l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier:          /7jnxkaetarP2tAv85wMmNI+VsueFLYleZwvk2NyXLI=
Subject key identifier:   BD:68:DA:27:BA:28:20:9F:BE:01:0C:95:ED:16:45:78:BB:D6:4F:DA
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer:       /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial:       019CAA21B5AA85921788B0A891C598E35653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number:          0734
Signing time:             Sun 01 Mar 2026 16:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:01 +0000
Files and hashes:         1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: EQWXDVhUt3eI2AhQYxYXdX742lPHAmAWNGg/qcYfkl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:b5:aa:85:92:17:88:b0:a8:91:c5:98:e3:56:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
        Validity
            Not Before: Mar  1 16:01:01 2026 GMT
            Not After : Mar  2 16:01:01 2026 GMT
        Subject: CN=bd68da27ba28209fbe010c95ed164578bbd64fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:e8:61:1a:bf:50:d8:bf:38:69:47:8c:89:
                    92:8b:ee:58:03:82:ee:58:d8:73:14:88:01:5f:78:
                    45:20:70:2b:65:af:ab:b0:83:be:0b:c4:cf:bd:99:
                    0c:16:ae:c3:b9:47:d2:c0:84:53:52:9c:a6:d2:28:
                    06:a1:c4:da:95:85:fd:d1:6c:5c:c9:4f:db:aa:59:
                    51:d4:bf:40:4e:20:48:10:12:03:8a:e4:9a:05:90:
                    60:97:ee:fd:8a:03:26:5d:76:45:46:24:4e:3e:8f:
                    74:69:ef:50:2c:88:6e:ee:d1:42:5b:98:23:87:18:
                    1e:aa:4c:67:4e:a0:88:85:b1:d3:2f:37:87:71:4f:
                    18:f3:32:93:1b:78:78:fd:60:36:d2:75:20:6c:07:
                    f4:d9:bd:79:94:79:f4:c2:5b:06:b7:c0:6c:9a:cc:
                    8c:37:64:97:8d:b6:d9:65:82:ea:ea:f2:01:0d:3c:
                    ff:11:db:33:f6:52:7c:0b:cb:ac:99:e2:57:f3:24:
                    a1:d2:03:4f:43:01:7d:ab:c3:93:49:fc:db:18:b2:
                    6a:74:ea:fc:95:41:64:03:96:63:fd:06:29:01:07:
                    a6:4c:34:53:e4:18:e9:b2:3f:df:51:96:5d:76:cc:
                    06:68:ae:46:83:a6:9f:04:b0:2f:15:8e:67:fa:94:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:DA:27:BA:28:20:9F:BE:01:0C:95:ED:16:45:78:BB:D6:4F:DA
            X509v3 Authority Key Identifier:
                keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:54:77:ab:fe:14:e3:d0:6c:9a:b4:53:b8:3f:d9:09:9b:64:
         42:ba:fa:3e:d2:74:c7:95:13:b8:a6:1e:d5:ee:e9:b2:1c:e0:
         98:05:37:b4:ae:46:56:82:18:a4:98:0a:72:7d:58:24:97:79:
         0c:13:fa:70:c1:3e:d0:7f:1a:30:c2:da:55:e8:63:29:59:41:
         9b:e0:9f:ad:05:c4:11:5f:af:3a:7a:3c:1a:79:55:15:95:e9:
         03:b7:ec:0d:0d:bb:8d:cb:17:71:55:5f:07:97:69:14:a1:3f:
         70:63:8c:dc:73:c3:50:d6:02:cd:d4:54:91:e1:3f:b2:8f:22:
         26:66:9d:4c:77:82:44:9c:3f:b6:91:87:62:6a:2e:a7:b1:b5:
         e8:25:be:af:9d:3c:56:b1:93:11:69:29:db:1f:1f:13:ee:8c:
         4e:25:4c:b3:54:c6:5e:09:64:bd:ff:15:9a:7e:f0:1c:5a:26:
         4b:b3:f8:00:24:dd:01:b8:75:82:6e:16:c1:71:39:7d:04:e8:
         1d:cc:f7:67:bc:8b:98:e1:bf:5c:37:b7:98:42:36:3e:38:fa:
         9d:1c:27:2c:0f:ce:d6:c6:ea:9c:58:3a:33:bf:cc:76:3c:3e:
         b6:a4:50:c3:a5:f6:55:5b:9d:2d:19:a8:b2:12:4e:59:c9:d4:
         9c:21:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:34 2026 by rpki-client