Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File:                     e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier:          D7f9LxmYIHupAV9JGVpiOqOT8yutopQA1JD74H5NVm0=
Subject key identifier:   C0:E9:BC:52:27:63:7A:FF:A8:9C:C1:D3:4B:17:F5:92:8B:65:39:9A
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer:       /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial:       019CA97CF23288F323CBE2781CC01969C029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number:          0801
Signing time:             Sun 01 Mar 2026 13:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:03 +0000
Files and hashes:         1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: KEkqM5kz1Yos8Yr7z5NZAhw6gDPeW3d237zkAZlfs0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:f2:32:88:f3:23:cb:e2:78:1c:c0:19:69:c0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
        Validity
            Not Before: Mar  1 13:01:03 2026 GMT
            Not After : Mar  2 13:01:03 2026 GMT
        Subject: CN=c0e9bc5227637affa89cc1d34b17f5928b65399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:e2:d6:a5:25:4d:f1:17:63:bc:b7:de:a6:
                    5a:e7:37:c6:f1:a9:ac:2c:de:84:58:2b:35:14:89:
                    16:9b:2c:38:8d:9c:a2:ab:bb:95:ef:ce:48:29:a3:
                    78:f6:d9:27:6d:a1:64:0e:3f:29:41:1b:80:23:21:
                    af:b9:3e:04:ea:ee:8a:6f:4e:83:be:67:b2:f3:83:
                    1c:60:70:b3:ff:e5:d2:b4:7d:8e:82:07:d6:95:b6:
                    83:d8:6e:a0:17:89:cb:80:98:42:7d:a8:ae:53:59:
                    68:d4:9d:dc:99:43:86:62:cc:d8:b2:6e:52:c5:92:
                    f3:b3:b6:56:96:74:83:f4:5f:3e:6a:4a:01:ae:6a:
                    1c:14:d7:21:b6:dd:64:57:05:29:8e:b6:3f:e8:e2:
                    92:46:cd:96:54:7e:b9:c2:29:38:44:e8:f9:59:b9:
                    c1:3e:af:0b:11:57:55:6f:bc:cc:5c:62:a9:5e:e9:
                    32:e7:40:e6:fb:d7:80:3d:17:6c:57:a8:83:8b:5c:
                    65:01:74:72:a3:b4:b5:5e:bf:8b:2b:f6:8b:8d:21:
                    45:26:64:7d:31:22:95:f8:6c:0d:33:e1:6c:66:65:
                    3d:bd:57:6d:65:12:76:3a:a5:b9:c9:15:a3:59:ec:
                    2e:a7:fe:31:8f:d8:2c:b5:19:7d:4f:66:d1:c5:4a:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:BC:52:27:63:7A:FF:A8:9C:C1:D3:4B:17:F5:92:8B:65:39:9A
            X509v3 Authority Key Identifier:
                keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:1f:23:c4:90:30:fc:e9:05:c5:be:c5:26:76:fc:39:43:
         12:71:f7:ae:21:18:1d:e6:4f:f7:07:48:fe:9a:1f:68:ab:c1:
         5a:71:5a:23:4c:95:eb:d3:cd:e0:3e:89:8c:b2:c4:64:61:54:
         85:e6:3b:6b:57:76:82:cb:6b:02:3b:a1:d0:03:c7:fe:28:ed:
         1b:1d:96:f1:89:4e:36:50:f5:67:74:03:ac:a5:e9:de:30:d3:
         e5:fa:81:84:d5:de:f1:b7:9e:ba:c6:0b:0b:d1:d1:6e:e0:a8:
         d8:32:fe:0c:bc:90:8e:e4:ce:bf:28:60:d2:35:4b:d4:72:31:
         82:f3:9e:c4:0c:3a:f0:43:55:28:66:fa:6a:d8:f5:91:94:24:
         4c:fa:43:56:d7:99:7a:59:b8:2c:ff:22:f4:16:1d:05:17:26:
         6c:cc:b0:80:e9:83:5c:25:ae:a5:24:15:6c:5d:91:13:9d:33:
         01:24:a0:f9:59:70:e6:59:bb:34:64:1d:51:52:82:39:36:f1:
         9c:51:55:af:c8:f0:4a:ed:b0:c2:13:8a:84:7f:4d:80:09:90:
         9c:99:10:6c:b1:a6:6d:7a:a9:67:88:7f:d9:8b:32:01:ca:64:
         12:05:79:fe:5d:31:08:99:f6:53:6d:0e:80:da:74:55:f2:73:
         97:3d:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:49 2026 by rpki-client