Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File:                     0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier:          /zaBxytlEXQn1NvoLsop1vtABJqw+72pUoPr50/7ItU=
Subject key identifier:   95:B1:45:1B:FB:E3:FB:AA:23:26:C3:9C:09:B2:08:8F:49:75:2D:4A
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer:       /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial:       019CAA21529798DC0F195FD761277FA39A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number:          0737
Signing time:             Sun 01 Mar 2026 16:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:36 +0000
Files and hashes:         1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: +yQ9m/sbcl34Z4zr3m2x5imlbXpCeRpFPdYDdRejRfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:52:97:98:dc:0f:19:5f:d7:61:27:7f:a3:9a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
        Validity
            Not Before: Mar  1 16:00:36 2026 GMT
            Not After : Mar  2 16:00:36 2026 GMT
        Subject: CN=95b1451bfbe3fbaa2326c39c09b2088f49752d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:92:08:7f:9a:35:3d:08:95:31:f6:e6:9a:
                    f2:00:c1:28:04:53:ec:20:a0:49:03:93:7a:28:b4:
                    2f:5a:9b:de:61:e7:15:42:58:4d:f0:22:f7:ab:a5:
                    a8:44:79:4b:f4:1c:51:32:7c:b0:8d:cf:3e:c9:f9:
                    0d:11:3b:73:ef:bd:45:c1:3f:65:d2:28:58:3f:6c:
                    0c:e5:91:ea:91:06:40:9f:d4:db:0d:4b:d5:39:19:
                    8d:6f:5a:43:e8:e2:c4:1a:10:6e:8b:89:b1:fa:11:
                    d5:b2:e2:eb:71:e8:e0:6c:3d:03:1d:e2:cc:aa:68:
                    c6:06:b9:cf:31:99:af:a9:76:fd:73:c3:f3:bd:45:
                    7c:29:ac:fe:a0:70:85:9c:1f:ea:b9:d1:79:39:e0:
                    0d:b4:7b:d8:a8:55:15:d4:62:3e:f4:5f:96:f3:9e:
                    53:ea:73:58:38:9c:7a:a2:1a:20:91:73:ae:64:35:
                    72:21:bc:d2:e5:40:b5:49:b6:7b:74:21:76:0f:92:
                    99:d1:14:1f:54:0a:be:6a:02:33:28:e0:31:bc:01:
                    bf:ed:fc:f0:c8:b4:08:e6:18:e0:30:8c:4f:d5:d4:
                    49:4f:6e:25:64:84:51:77:b8:b9:98:99:92:68:0e:
                    4c:05:cd:88:fe:96:f0:7f:1f:e0:a4:c5:4f:5d:7a:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B1:45:1B:FB:E3:FB:AA:23:26:C3:9C:09:B2:08:8F:49:75:2D:4A
            X509v3 Authority Key Identifier:
                keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:63:e3:2e:41:8e:51:8d:84:07:27:af:86:3a:82:e8:8e:
         71:d0:f8:39:33:86:9a:59:2c:b5:4b:8f:8c:79:6c:f8:21:1a:
         0a:82:83:21:79:59:26:a8:5b:8f:0e:1c:df:64:1e:02:18:e5:
         7d:3e:cb:ae:81:88:bd:39:81:a4:73:6f:95:02:e5:ab:cf:cc:
         18:91:ae:dc:2a:0d:85:d2:90:8e:67:fb:90:84:75:62:68:57:
         a1:b9:aa:9a:5a:87:3d:0b:2b:a4:74:c7:81:73:fd:f3:e0:93:
         7c:2f:76:1d:2f:1d:c6:26:dd:14:ae:11:63:38:43:f9:5c:86:
         ce:d1:02:a4:9d:c2:c5:30:39:0c:bd:c8:14:d7:2d:86:e2:e4:
         6a:54:2f:88:f7:b1:bc:2b:c3:ba:a0:76:e8:d3:95:21:a7:c9:
         5e:76:5d:e8:42:e0:36:9b:e8:96:47:dc:86:8b:a9:3a:12:0f:
         75:f8:db:1b:5b:e5:8f:bc:1b:89:a4:cd:14:c7:1d:21:12:aa:
         bf:6c:19:f7:b2:6e:95:ec:88:99:55:f2:9e:b9:40:b9:58:ee:
         fa:d0:34:b7:7d:eb:97:01:20:94:96:5e:6b:82:95:88:d9:5c:
         f6:21:a7:c0:bf:e1:d2:c4:bd:a9:01:72:b7:b6:c4:1b:69:5d:
         42:33:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:19 2026 by rpki-client