Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File:                     k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier:          7MrKLM9TyXxUOFNlpZQAEeZFkx2VJCsSIm+PDpV2jjU=
Subject key identifier:   72:65:1B:AF:99:CA:42:AC:FC:2A:2C:C8:C2:35:32:E5:E2:90:FB:AA
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer:       /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial:       019CAB6B7796664352F7742F9A64246AB168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number:          0575
Signing time:             Sun 01 Mar 2026 22:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:12 +0000
Files and hashes:         1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: h3zXWF1oidahgXWT60hzg+94eUMDvbcpt9Sem1KKzPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:77:96:66:43:52:f7:74:2f:9a:64:24:6a:b1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
        Validity
            Not Before: Mar  1 22:01:12 2026 GMT
            Not After : Mar  2 22:01:12 2026 GMT
        Subject: CN=72651baf99ca42acfc2a2cc8c23532e5e290fbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:f3:8b:f9:90:a2:53:0e:30:af:46:e7:75:
                    23:5f:57:9f:4a:54:2d:28:51:19:5c:0b:f2:4a:e0:
                    46:db:fc:f8:61:40:a3:03:59:14:57:d3:18:81:e6:
                    07:97:a0:b0:bb:ab:21:0b:50:0e:dc:f2:91:20:45:
                    cb:bf:f0:ef:ad:e4:f6:f0:0b:1e:4b:60:68:f6:f2:
                    f3:87:be:dd:02:fe:16:82:46:fb:e8:ec:1c:a6:64:
                    35:a8:4a:9f:73:35:9a:2e:a0:f3:b3:a4:08:4f:b7:
                    33:70:63:25:0a:c7:ff:ac:15:89:f2:49:1a:06:0d:
                    c4:07:5a:ac:46:a8:89:bc:fb:d4:8b:f0:84:c6:8c:
                    30:56:7e:17:66:cf:46:1a:5f:f8:6a:d5:56:82:d0:
                    2e:58:63:48:cc:83:a5:e6:ef:fe:b4:58:22:9d:2f:
                    3b:88:ff:47:0a:83:a3:d3:4c:12:d3:0d:82:e4:ae:
                    c1:29:ce:34:74:33:4a:8e:09:08:57:e9:b4:1c:d4:
                    07:b3:95:be:4b:ac:9d:48:3b:2b:b2:3a:12:9a:ac:
                    2f:70:08:cc:3c:6c:67:9a:32:40:b7:37:ff:46:43:
                    71:fa:37:4d:f4:3d:6d:ce:a2:05:f0:dd:3a:6c:b2:
                    86:a4:fb:18:b4:19:b6:7f:fc:22:73:ab:14:8d:41:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:1B:AF:99:CA:42:AC:FC:2A:2C:C8:C2:35:32:E5:E2:90:FB:AA
            X509v3 Authority Key Identifier:
                keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:95:79:b8:cd:46:56:5c:f3:25:67:74:a8:45:0a:c9:42:f1:
         32:a9:b6:59:d1:7e:a8:e2:34:46:f4:eb:1d:1e:3e:4a:47:f1:
         05:a1:b0:53:65:58:d1:76:41:a9:35:2d:03:df:64:20:16:a4:
         6a:81:6a:03:3e:df:a4:3c:0a:54:fa:11:b7:93:b0:81:af:a3:
         b1:a4:ad:71:8b:9a:af:c9:5f:fc:37:e1:cd:3f:8a:4c:26:23:
         ab:b9:cb:15:2b:f4:d4:b3:6f:cd:6a:5c:44:86:fc:f0:46:4b:
         6d:13:b8:ef:86:a8:3d:cd:ac:2e:14:47:c6:d6:94:95:f2:b6:
         fb:6f:65:5c:c9:e8:8f:2f:f4:56:02:a7:e4:c2:96:88:c2:f8:
         f1:0e:66:ab:ac:d2:aa:52:5b:12:d2:32:f6:77:6e:74:cb:ac:
         88:7b:fb:bf:01:8c:97:a9:e2:36:91:72:73:c2:ca:59:8f:09:
         6a:fb:72:c5:2a:d2:dc:58:b8:37:ff:5d:42:56:6b:f9:ac:56:
         5d:63:c6:18:20:2c:48:3a:26:72:62:f7:da:f7:01:e5:1b:5d:
         ae:3b:29:ac:75:83:18:b0:ce:7e:1c:ab:e5:8d:bd:ef:e9:f1:
         b6:7f:ee:aa:6e:74:b1:6c:2e:6a:59:b4:c1:8c:07:f2:4f:51:
         4e:9a:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:05 2026 by rpki-client