Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          dmZVe4NbbIBOiUjN7l7YtovP3BKALggsGF9QIwgDt/A=
Subject key identifier:   D1:8F:EC:EB:55:AE:CC:EF:68:58:D1:AD:67:D9:4F:9D:51:52:C4:76
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       019CAB6B5F0BF7040385FE11D8160964352E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          134C
Signing time:             Sun 01 Mar 2026 22:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:06 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: 3R2xt2ZY+clKquFLtHjkjBvr7ejWHF//fMtHENpW4CQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:5f:0b:f7:04:03:85:fe:11:d8:16:09:64:35:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Mar  1 22:01:06 2026 GMT
            Not After : Mar  2 22:01:06 2026 GMT
        Subject: CN=d18feceb55aeccef6858d1ad67d94f9d5152c476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:53:52:68:b3:2d:5c:f9:d9:ff:e0:79:b3:
                    96:68:30:b3:63:1d:74:b3:27:a4:6c:94:27:82:5a:
                    2d:d7:eb:95:20:10:07:26:1c:1e:5d:7c:55:3f:59:
                    d7:3a:d3:3b:26:9d:17:37:72:f1:e6:06:85:ff:3b:
                    43:e5:96:45:23:69:66:85:7b:bf:3b:93:82:64:53:
                    d4:cc:37:4e:69:3a:6a:c9:dc:00:99:47:21:92:80:
                    16:71:f3:cf:bd:2c:76:fe:46:d1:1b:b5:e5:1c:52:
                    50:9b:22:eb:92:64:33:e7:98:0c:d8:93:2c:a6:95:
                    e8:6f:f7:df:02:d1:a5:98:ed:9d:07:76:fc:0d:78:
                    35:fe:a5:3b:9f:2a:3a:51:46:cd:ba:63:1e:17:01:
                    af:c3:25:8d:ab:8c:5a:bc:95:8e:62:69:12:3f:b5:
                    b1:18:5f:d1:30:ab:e4:d2:b7:03:87:61:5c:f7:05:
                    56:74:47:47:f7:b7:a7:7c:26:21:22:a7:77:0e:a0:
                    f4:00:7d:1a:50:de:2b:cd:07:66:50:4b:35:a6:0a:
                    e3:4a:49:3d:bd:71:cc:7e:10:fc:7e:d0:8a:42:d4:
                    d2:bb:ac:40:f2:fc:7f:c0:bc:1a:25:7f:85:e6:2f:
                    02:9b:c3:a2:e2:9d:a5:34:0f:c9:fe:4a:04:b2:e2:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8F:EC:EB:55:AE:CC:EF:68:58:D1:AD:67:D9:4F:9D:51:52:C4:76
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:34:9a:6f:dd:5c:76:19:85:fb:ec:2b:1c:8f:ad:ca:2b:9d:
         7e:dc:31:57:28:49:f3:6e:aa:6a:be:c2:5c:c9:4e:78:62:72:
         55:b4:2a:fc:9d:1a:0f:02:f3:91:5c:c4:cb:04:c1:46:6b:e1:
         a4:6d:e8:30:ce:0a:7e:b8:cb:4d:0c:3c:ac:ef:ff:fa:c2:21:
         31:75:69:88:b1:01:39:70:dc:6a:56:67:8f:5a:be:eb:5d:17:
         c9:1b:42:5b:bf:e3:29:71:6f:bf:4b:92:28:36:7c:9b:d2:a8:
         b5:8c:97:4f:37:82:af:e7:31:b7:8c:bc:cb:40:03:74:cb:97:
         ea:14:b3:44:5a:fc:47:5d:e2:1f:52:69:b7:8e:e4:a2:23:02:
         e2:e8:5a:7f:fe:72:04:b0:db:05:08:15:20:8b:3b:1b:5c:eb:
         43:72:3b:cb:02:b5:16:9a:68:cf:f6:3a:19:7e:07:c8:77:10:
         a8:b0:1e:67:82:2b:ab:e7:af:36:97:a9:11:68:99:0e:ce:0f:
         02:a9:bd:8c:45:28:56:59:ae:55:92:55:23:6b:d9:50:5c:98:
         e9:34:74:ed:a7:37:ca:b0:6d:ad:23:18:12:5e:74:1b:b2:af:
         79:6c:99:be:db:1f:8b:a2:bc:a9:88:fc:97:de:13:03:b7:c5:
         0c:0c:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:39 2026 by rpki-client