Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File:                     NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier:          i9cWEMk8DdZna9cBQgabu90q7VS0T1sD8Gu5d0cU5zc=
Subject key identifier:   7C:30:E7:F2:B4:85:93:30:9B:4B:F3:AD:6B:7A:42:5C:87:81:2B:44
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer:       /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial:       019CACB53F767C5B5143D46056A2159D13DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number:          0448
Signing time:             Mon 02 Mar 2026 04:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:25 +0000
Files and hashes:         1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: 71j3/4hcElAEEGM7nnKKkzL7DjN6uWpNXjCBFlcp/mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:3f:76:7c:5b:51:43:d4:60:56:a2:15:9d:13:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
        Validity
            Not Before: Mar  2 04:01:25 2026 GMT
            Not After : Mar  3 04:01:25 2026 GMT
        Subject: CN=7c30e7f2b48593309b4bf3ad6b7a425c87812b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:b0:13:4c:96:1f:fc:1d:1d:a9:99:3e:89:
                    e2:13:57:71:a7:9b:57:a6:44:71:f4:69:b4:1a:54:
                    63:70:06:cf:e5:3e:37:83:45:92:a3:66:33:e7:76:
                    82:02:64:46:46:93:d2:c2:9a:cb:e1:a7:e9:c0:9e:
                    65:4b:28:30:e6:ad:31:cc:ca:bc:e2:84:b7:51:da:
                    60:6a:da:ba:16:57:ef:f3:7f:57:f1:79:b2:90:6c:
                    f2:ba:b0:12:11:c6:e3:a3:ab:e8:16:96:23:be:72:
                    be:99:55:4d:34:b1:8d:57:09:f1:ad:59:d8:97:bb:
                    f4:45:9d:44:db:59:0d:f5:cd:ad:70:e5:60:2e:00:
                    a9:54:a5:5c:8c:33:35:d4:44:dc:4b:00:3e:f9:d6:
                    9c:14:8f:82:dc:26:94:29:00:ec:58:67:5b:ed:92:
                    b4:e2:ad:75:51:f8:73:f2:ba:62:73:69:24:3d:87:
                    21:f7:8a:9d:c3:72:8e:3a:29:6b:32:4d:4c:a0:27:
                    09:bf:b6:a2:fa:48:7d:89:7f:fe:3c:f0:67:d3:03:
                    18:16:22:7c:26:b9:2d:5f:d3:da:18:19:32:4d:04:
                    79:7a:d4:9d:84:c6:71:42:2d:ae:34:0a:d2:b8:33:
                    96:c5:da:95:8f:b5:87:f0:b0:bd:10:cb:3f:75:d9:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:E7:F2:B4:85:93:30:9B:4B:F3:AD:6B:7A:42:5C:87:81:2B:44
            X509v3 Authority Key Identifier:
                keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c5:1b:93:c9:98:3a:f0:a0:7d:10:8f:fc:9a:2e:ee:99:5f:
         50:5c:36:27:b3:c4:23:e4:40:92:74:43:f1:3b:8d:96:c9:4a:
         e3:a1:e9:19:91:38:de:8d:99:10:f9:b8:b9:32:d2:13:ca:fd:
         db:cb:5b:b5:c6:cb:47:fa:2d:33:75:b4:50:e3:82:ea:e6:1d:
         e5:4e:4b:a9:30:94:af:02:35:f8:30:63:5e:a7:f2:d3:d3:db:
         23:45:cd:50:02:f9:75:e8:68:79:2b:7c:b2:33:7d:ad:29:3f:
         eb:7f:08:56:7b:71:26:e8:d8:a6:75:ba:3b:ea:f5:25:65:6d:
         35:83:94:47:7b:54:5d:64:bc:ca:32:a3:e6:74:1d:fa:0d:72:
         7c:b1:a3:b9:fb:aa:c9:82:be:df:32:9c:0f:28:c9:45:80:42:
         66:7d:25:09:df:56:1c:4f:e3:4a:d7:2f:47:85:7c:12:38:83:
         bd:26:5d:84:d1:a5:14:82:60:68:43:ae:d0:7f:8a:e9:61:31:
         4a:4b:3d:9f:07:f1:ff:cc:8a:6c:7e:41:37:70:26:95:9d:6b:
         6d:25:b2:93:7e:bd:79:d8:ec:4d:3d:2f:fc:1d:6a:7d:b3:bf:
         3c:d4:1a:27:1a:11:a2:63:7b:46:c5:51:eb:b8:6f:59:e9:87:
         20:93:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:05 2026 by rpki-client