Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          F4CkwPHw+PUKJCKnH5KpQblwepaFPdV2/9+3MFs2fJY=
Subject key identifier:   4B:30:D0:46:FB:CE:12:BB:C2:0A:B4:8E:DE:78:18:4D:D5:CB:AD:40
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       019CAAC69820E869E79A29F325042201F9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          12CE
Signing time:             Sun 01 Mar 2026 19:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:07 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: RYPMbzeI/pOw0t8vAX4jhZSG4+2L5EePnzGIcKklHdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:98:20:e8:69:e7:9a:29:f3:25:04:22:01:f9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Mar  1 19:01:07 2026 GMT
            Not After : Mar  2 19:01:07 2026 GMT
        Subject: CN=4b30d046fbce12bbc20ab48ede78184dd5cbad40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:c9:1b:c9:18:3d:aa:28:90:bb:9f:54:15:
                    d9:2f:2f:a1:6c:d3:cb:89:b5:e2:15:fb:70:3a:0e:
                    72:bc:f9:56:65:83:d1:73:1f:b6:40:5e:1f:85:6b:
                    14:7e:5b:7b:5f:c1:05:bd:8a:ca:ab:f4:eb:fb:d0:
                    cf:88:b7:33:e1:31:57:d9:a5:9e:dc:30:6e:63:95:
                    2c:05:9f:e1:b8:50:2a:93:f8:cd:03:22:4e:ad:e5:
                    b7:f9:12:a5:fc:f4:64:58:19:d4:74:48:bd:b0:a8:
                    f0:e5:5b:cb:59:d4:74:9d:9c:f9:3d:1f:38:eb:2e:
                    74:8d:2a:cb:19:31:ab:16:03:47:33:bf:61:e1:8b:
                    ac:63:79:7c:7d:cb:bb:33:29:18:1f:6e:f3:be:6a:
                    52:0e:41:3c:bc:44:e3:1b:e3:c7:17:e3:43:3b:0f:
                    92:86:39:55:a9:5e:ba:17:20:be:52:d8:13:76:9b:
                    df:bd:b9:6a:01:bc:fb:be:2d:e7:e4:1f:2d:c4:7a:
                    db:9f:61:cb:5d:b2:cb:e5:b9:46:50:f9:48:19:96:
                    aa:c9:d5:77:2c:f2:90:bf:02:1e:a4:81:32:11:1d:
                    aa:4b:01:10:cc:36:a4:ec:0a:88:95:9e:30:ff:79:
                    cb:53:69:8d:f7:30:97:d0:20:3c:68:77:3b:a3:c2:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:D0:46:FB:CE:12:BB:C2:0A:B4:8E:DE:78:18:4D:D5:CB:AD:40
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:3c:54:1f:2d:bc:6a:2d:6c:e7:f2:dd:0c:38:80:c3:1b:
         93:8b:f6:86:65:e4:14:25:4a:aa:8f:06:d9:06:00:bc:5c:37:
         f8:c2:f8:64:31:78:5f:f5:79:a0:de:b1:6b:be:46:5f:d0:c9:
         d2:e6:17:23:3a:69:7b:98:95:c7:83:8d:61:46:a4:27:17:84:
         37:46:fd:c6:95:eb:70:44:da:9a:14:cb:3c:ac:30:ee:26:47:
         1d:4a:92:b0:fa:62:fa:84:43:36:51:a8:7e:5c:9f:c4:5a:32:
         c4:f7:23:b1:9d:61:87:50:81:5a:6e:31:99:55:0e:a4:89:72:
         73:e5:99:53:18:d7:e9:1d:ef:90:65:4a:5c:4c:25:f7:1f:33:
         d4:25:0d:31:87:31:f4:57:f1:b2:1a:03:3e:3b:d9:28:b0:8b:
         b6:c4:3b:65:9b:ab:04:92:57:7e:09:b4:12:c1:cf:d8:3d:60:
         ac:35:29:42:18:23:db:63:77:9e:c1:a6:fd:3b:b2:c1:56:2b:
         a6:1c:f0:02:95:09:cf:4b:d7:6d:68:2f:28:65:83:2c:36:e4:
         06:0d:90:17:97:92:97:fe:b5:5f:7c:b8:d6:b0:7d:73:44:0e:
         af:da:3e:42:2a:88:da:a9:8f:da:65:62:02:89:58:0d:e4:77:
         5c:4a:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:05 2026 by rpki-client