Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          wCZQZAJixZ39NLcx/JuKKzsFHhgh5xf561CzBj+Yz3w=
Subject key identifier:   B9:3F:B6:F1:7A:F7:B5:02:38:13:61:0F:32:18:32:00:05:C7:BC:ED
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       019D985021DB566284BBA84218DC0210DBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          1349
Signing time:             Thu 16 Apr 2026 22:01:21 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:21 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:21 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: IfmFvmgttTx/jp60AEXs3TXMAemOGcuxe+preg1bBE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:21:db:56:62:84:bb:a8:42:18:dc:02:10:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Apr 16 22:01:21 2026 GMT
            Not After : Apr 17 22:01:21 2026 GMT
        Subject: CN=b93fb6f17af7b5023813610f3218320005c7bced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:3d:ea:a2:4b:e4:3d:a9:6a:09:f5:4a:2a:
                    e5:46:37:d0:70:96:06:e5:1b:bc:22:75:d3:20:22:
                    28:b0:86:da:d7:13:e2:62:40:dc:b4:eb:1c:66:f6:
                    da:14:e2:5e:ef:82:62:cc:8d:61:14:f0:dc:94:7b:
                    31:f0:dd:43:1b:0c:3c:83:75:c9:91:66:48:8a:56:
                    c7:ba:e5:a6:f6:7e:b1:bd:03:f9:4e:d6:2b:fa:b4:
                    dc:8e:06:20:34:df:7e:95:7b:de:f7:50:55:cb:9d:
                    eb:3a:bf:63:b2:6c:e4:53:44:fc:3b:89:47:7a:81:
                    ae:f1:3b:89:7e:a1:ec:f8:6f:3f:5a:91:f2:23:71:
                    1e:39:60:7f:96:a7:8d:63:2e:25:42:2f:61:0a:50:
                    a3:25:98:76:32:e1:ab:d6:41:6f:95:d6:f9:ae:bd:
                    22:7b:89:c4:1a:30:4f:69:5a:1d:ea:72:92:0d:1d:
                    50:d6:05:d5:de:1e:2a:4e:7b:07:51:8f:38:3d:5f:
                    99:d6:82:1a:50:5b:af:ed:f2:b7:e7:da:58:18:2f:
                    93:5b:90:c2:0f:48:4a:9a:07:4b:c3:e4:8b:c2:b5:
                    0f:7c:99:6f:07:be:df:4d:3b:a8:09:ea:6a:8e:12:
                    67:5c:e4:6c:88:e3:d6:6c:cb:b9:31:ab:6c:b6:ee:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3F:B6:F1:7A:F7:B5:02:38:13:61:0F:32:18:32:00:05:C7:BC:ED
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:34:db:5b:b0:17:03:bb:10:b5:af:64:09:8d:1b:0f:41:6a:
         4d:f1:ca:e1:a0:00:79:33:4a:21:0e:4a:f2:a7:51:b1:41:2b:
         a0:d9:f3:d9:e3:ba:ff:5e:e7:75:fe:89:63:ec:0d:ec:7b:fc:
         0e:02:79:1c:5d:7f:79:6b:bd:e4:21:63:98:30:b7:f6:5e:91:
         0c:2d:ad:9a:5e:12:ee:57:7e:05:76:95:4e:07:de:c0:4d:9c:
         60:42:39:40:f8:a4:41:18:d1:ee:8b:97:ab:00:e4:f1:50:ad:
         52:b4:ef:ec:00:a3:4d:32:70:fe:8c:9b:42:fc:ea:1d:59:97:
         7e:11:72:6d:1c:10:75:8c:05:b4:20:e4:54:56:9b:cb:1f:39:
         1e:9c:c1:0b:c8:6c:57:ac:ad:11:97:27:4b:3c:51:d3:43:98:
         b8:6e:c3:9e:2f:4f:1d:2f:df:79:b7:00:ff:f6:9c:17:09:f8:
         4b:b8:d2:2c:43:16:7f:3c:d6:85:18:42:30:ba:30:82:87:33:
         21:9e:e6:92:fe:85:42:ab:85:dc:e2:e7:8f:12:0c:ed:85:74:
         7e:89:95:da:47:48:1d:12:b2:72:68:1d:7d:12:02:4b:b4:26:
         11:8f:a3:54:61:74:57:3b:07:21:2f:cf:9c:52:23:f8:5b:05:
         e5:bd:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:30 2026 by rpki-client