Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File:                     G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier:          sj8i/Z/1Z0Ak+PBBqwmsPyy75CBD6ETtgwePjzAWUiE=
Subject key identifier:   C7:B4:72:85:43:7D:FE:7C:C5:39:68:79:58:DC:E7:0B:B9:A7:EB:85
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer:       /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial:       019CAAC641B6FD8B0807407375466A52E3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number:          078D
Signing time:             Sun 01 Mar 2026 19:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:45 +0000
Files and hashes:         1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: vZxv7eGLgypVcbK8RsrALHAqHVDRhGXb4H0VNYvqA18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:41:b6:fd:8b:08:07:40:73:75:46:6a:52:e3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
        Validity
            Not Before: Mar  1 19:00:45 2026 GMT
            Not After : Mar  2 19:00:45 2026 GMT
        Subject: CN=c7b47285437dfe7cc539687958dce70bb9a7eb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:14:7c:ee:0f:b3:1a:0a:eb:97:08:ee:fc:
                    78:a5:24:88:a0:56:47:7e:c9:47:a1:fc:04:92:28:
                    8e:6d:45:e4:93:95:41:f6:21:c6:02:49:c6:25:48:
                    fd:39:56:d3:17:a6:b6:0d:d0:21:38:50:b6:5f:24:
                    4d:83:28:eb:e5:13:d7:62:07:e4:e0:bd:93:78:6e:
                    9c:dc:10:3b:a5:20:d3:93:b1:a0:5f:63:6f:94:bd:
                    24:3b:c8:b5:a3:d7:b4:21:72:95:4e:c3:1e:52:7a:
                    1e:db:17:9d:db:0a:9f:7d:09:4f:c4:1c:1e:e4:bc:
                    f0:67:c7:8d:f8:ff:4b:65:d8:73:01:4b:7e:16:88:
                    56:38:cc:5c:fa:3c:ee:29:07:18:06:34:24:9d:2c:
                    49:8b:3e:ae:39:38:b9:fc:10:98:4c:87:f2:2a:1b:
                    07:80:34:bc:49:7d:db:ea:6b:70:5a:cc:12:b3:dc:
                    32:d1:12:01:3e:e1:d2:2e:6b:92:5c:78:72:37:6f:
                    e9:bc:95:fe:cb:39:8a:3a:79:99:5e:b6:55:f2:5d:
                    a3:b0:3f:97:58:8b:72:c4:d4:50:a7:f6:90:0f:cc:
                    c2:f3:b2:b3:a5:7d:41:67:94:d4:41:52:2c:5b:85:
                    37:4d:27:e0:66:ed:2d:80:cb:57:90:32:9f:c5:e9:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:72:85:43:7D:FE:7C:C5:39:68:79:58:DC:E7:0B:B9:A7:EB:85
            X509v3 Authority Key Identifier:
                keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1e:ec:c0:59:72:f1:e4:8c:0a:a9:f5:e0:eb:9d:cf:0e:c9:
         5a:3e:b1:33:a2:02:c7:ac:89:4a:69:3a:0e:c4:45:96:12:e2:
         3a:5b:59:8b:bb:78:d3:98:1a:7e:aa:9d:7e:a0:48:b9:8c:75:
         15:f9:b2:f8:d4:fa:f4:f6:cb:d3:9b:ba:b5:0a:51:7c:bf:1c:
         39:7d:c5:c3:a9:0c:e0:20:2c:58:18:a6:59:a7:0e:77:58:04:
         fd:45:a7:22:8b:c1:f0:a8:97:62:4d:e0:c6:71:99:46:f2:e6:
         27:eb:14:db:6a:dc:2a:56:da:43:33:71:45:91:7e:60:27:d2:
         65:eb:5c:1f:1f:a9:c2:8f:f6:d6:f2:8d:50:4a:bc:03:97:51:
         7b:45:2f:8e:b7:6f:5c:0b:ef:ee:b8:b2:ba:49:ad:8a:8b:c8:
         d6:ff:ae:e0:31:df:41:91:4e:3c:5d:2f:8d:1f:d1:54:ed:3f:
         8f:06:85:40:78:e9:b3:be:cc:13:48:49:4c:62:03:da:7c:3a:
         9e:6d:ac:5a:ef:69:ab:5c:23:47:36:c0:6d:a1:16:0a:9f:1d:
         0e:4a:ff:47:d8:9e:ad:e2:d4:7f:2a:f0:68:94:57:3f:ab:c6:
         c7:a0:5a:b8:3f:a1:76:d7:22:79:ab:e2:25:20:aa:91:8a:31:
         58:96:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:45 2026 by rpki-client