Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File:                     F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier:          VseKoR6B+EnkjtXOrqdkzQl51hTMZSEtJhPQ7h91mjU=
Subject key identifier:   E7:CC:8A:29:A7:30:50:97:67:77:8D:E3:19:56:CE:B3:42:49:54:0D
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer:       /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial:       019CABD92AD47CE86F949137601647F29EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number:          0CD4
Signing time:             Mon 02 Mar 2026 00:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:01 +0000
Files and hashes:         1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: NKS4zSlk31tIJDEf57U8NhwuoOey4I0nJbvsZMssht4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:2a:d4:7c:e8:6f:94:91:37:60:16:47:f2:9e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
        Validity
            Not Before: Mar  2 00:01:01 2026 GMT
            Not After : Mar  3 00:01:01 2026 GMT
        Subject: CN=e7cc8a29a730509767778de31956ceb34249540d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:c4:0a:52:bc:b7:04:59:ce:9d:cf:90:2a:
                    1b:8c:4b:42:6c:1d:e3:d7:17:b9:ce:55:6e:a1:8f:
                    22:c7:82:3e:b6:3f:74:27:8c:d7:80:f4:42:f5:fa:
                    56:36:97:7e:42:b7:94:65:a3:09:d6:1d:40:bc:2b:
                    be:89:e5:5e:bf:06:a6:4d:c3:bd:fc:63:28:25:7c:
                    7e:d8:50:a8:b5:44:4e:6c:d6:0c:75:ac:26:1d:bf:
                    82:7d:3e:3d:fa:b7:32:08:16:79:86:cb:db:ec:87:
                    7e:f5:bb:5b:63:71:f1:e1:0f:f0:64:86:23:5c:48:
                    2b:5b:c8:da:e0:6b:68:04:8d:6d:fd:c9:13:4f:fa:
                    55:da:ce:2a:45:1d:28:d6:f2:63:35:d4:3f:bd:40:
                    f3:e8:3b:64:ac:9b:25:f3:b9:ba:88:5f:8f:f0:fd:
                    78:e4:39:80:f2:4f:9a:a6:11:e6:b9:f7:33:6d:f6:
                    32:69:1d:21:78:f0:46:20:a7:a3:d1:67:4e:89:f8:
                    2b:a6:49:9f:6e:af:88:47:4f:39:af:bd:24:e1:36:
                    26:ee:e7:86:31:3c:90:39:a7:98:71:8e:86:35:32:
                    7b:0d:14:c2:ee:4c:c8:d0:e7:64:ff:f7:fa:22:08:
                    2d:c4:91:51:12:06:e9:3d:cd:f5:4b:ab:d1:91:c4:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:8A:29:A7:30:50:97:67:77:8D:E3:19:56:CE:B3:42:49:54:0D
            X509v3 Authority Key Identifier:
                keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:d4:d1:00:b2:95:ea:e4:e0:33:a1:e1:ad:6b:d0:56:43:
         52:f4:bd:a5:d4:85:e7:ff:80:78:6b:56:ea:83:0c:d6:51:4a:
         82:11:02:16:96:76:28:0f:97:0e:1e:77:cd:fe:be:5f:ad:f2:
         c5:8a:0e:21:62:2e:5e:62:a9:03:6b:96:e3:7b:38:bd:17:ff:
         67:88:e5:6b:d4:82:a9:4e:1b:ba:1f:f5:ab:ff:a0:50:7b:5d:
         d0:5b:6e:bc:3a:44:76:9c:5e:60:51:4e:e4:65:0e:e3:e7:73:
         69:67:77:9f:49:1c:f6:06:3e:9d:66:f5:c9:12:b2:5d:48:18:
         d8:cc:ae:04:68:fe:84:a3:3f:ef:05:4a:f5:5f:a8:02:92:45:
         6d:e4:22:d0:1f:07:a4:ed:a9:98:d2:92:2d:30:14:72:db:f6:
         56:ce:b6:47:76:de:c2:bd:80:8f:c3:0a:58:b1:3b:1d:5a:86:
         95:c0:4b:a2:e1:be:c2:9c:b5:6b:03:16:8a:1b:53:c2:10:64:
         2c:9d:dd:8a:7f:1f:53:67:14:06:b6:c4:a9:34:d0:c7:23:13:
         32:59:5d:c4:42:e7:e6:09:c3:10:7b:07:78:ea:de:fb:c7:de:
         52:93:79:3d:fc:3a:ad:e3:69:6e:6e:c0:17:c1:a5:63:c3:c9:
         2c:50:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:36 2026 by rpki-client