Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File:                     eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier:          k9hHk+tK4z1fYeNKogEGyBeEbERsQLszj9qxKmKhBns=
Subject key identifier:   F7:9D:32:8E:6F:66:20:1D:C8:20:0D:F9:D3:C6:76:30:C0:95:FA:1A
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer:       /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial:       019CAC477F4E6E4E1C05FE18BC51AFF5F656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number:          09C9
Signing time:             Mon 02 Mar 2026 02:01:32 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:32 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:32 +0000
Files and hashes:         1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: VRXB9plJ5nux+bc9XqD5TUJsF2QbYlcTO9+fR0321/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:7f:4e:6e:4e:1c:05:fe:18:bc:51:af:f5:f6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
        Validity
            Not Before: Mar  2 02:01:32 2026 GMT
            Not After : Mar  3 02:01:32 2026 GMT
        Subject: CN=f79d328e6f66201dc8200df9d3c67630c095fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:66:f2:e1:ce:e8:a3:16:2c:d8:43:c8:9e:
                    01:30:f4:6d:87:96:88:b9:82:6d:e8:ea:06:80:4c:
                    ec:ea:17:06:b8:81:c9:44:86:9c:4a:14:a3:97:b4:
                    16:8f:8c:98:a9:27:b8:26:7c:d3:42:d9:82:a4:a0:
                    13:8e:a5:ef:9d:52:0b:99:ad:d8:5f:34:fc:0d:4a:
                    0d:ab:9c:ce:e3:01:74:fa:16:c8:54:9f:45:23:05:
                    00:f0:7f:91:00:71:9b:b9:bf:11:0b:9f:91:23:5c:
                    67:14:e0:dd:e0:ae:8c:de:3d:1a:a7:5b:4f:1b:06:
                    36:8a:4c:83:ba:25:46:34:4e:72:c9:bf:f7:da:53:
                    bd:f3:14:d8:5a:a1:78:89:0d:d6:ac:36:6e:b2:4a:
                    68:88:db:6c:53:d1:36:5b:ab:e7:73:60:9f:e3:69:
                    7e:a1:b4:d1:4a:60:90:66:0b:cf:41:c6:92:26:8e:
                    0d:a0:a3:f0:1d:48:f7:75:7c:16:71:69:a2:f6:e2:
                    f2:fa:8e:af:fa:6a:fd:ca:cd:7a:72:10:a5:46:27:
                    b9:ed:21:7e:0b:e2:b7:88:e2:62:e2:71:29:66:d8:
                    44:0d:82:08:c5:ca:13:62:45:08:6c:90:b0:7f:1a:
                    da:bd:9e:10:9a:74:28:f6:11:41:a7:f6:cb:97:4c:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9D:32:8E:6F:66:20:1D:C8:20:0D:F9:D3:C6:76:30:C0:95:FA:1A
            X509v3 Authority Key Identifier:
                keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:2b:fc:b6:be:f9:8b:e0:42:03:95:4d:f8:59:40:09:f5:
         09:1c:b1:44:07:81:4f:57:63:02:d4:90:47:6f:cc:c5:e3:f8:
         c9:60:c9:fc:59:e2:1f:de:1b:8d:83:14:ab:31:79:73:17:e3:
         74:57:18:12:ff:43:c0:84:00:52:10:b8:2f:9a:77:54:b4:dc:
         9d:dd:c5:7d:71:15:52:5a:87:58:f1:0d:d0:54:08:7d:3f:6e:
         26:44:84:7e:83:b5:a7:25:9a:ee:3b:cb:6c:35:16:01:a6:58:
         9b:ec:97:9d:b2:ce:28:a1:18:86:6e:39:0d:6a:ff:47:bb:8d:
         f3:0e:e5:00:68:ab:68:6d:1a:4d:71:be:5a:23:aa:b8:f5:b6:
         cd:24:3b:ea:c0:7e:90:ec:bb:9a:ad:64:ff:a0:9f:ff:54:aa:
         63:8a:bb:ac:35:ca:8b:4e:07:79:db:58:33:34:76:1a:55:96:
         8b:ef:a4:da:67:1c:b3:93:a3:21:ec:3e:70:71:d9:ba:cc:01:
         54:5b:50:e2:a3:3c:72:58:94:b7:af:be:01:3d:13:a6:fa:b4:
         06:2d:18:a7:c6:54:29:36:ba:c3:2b:6f:f8:b8:ad:04:0c:6a:
         99:ad:af:71:33:7a:8a:98:41:2e:21:b2:a8:a6:49:6e:ab:89:
         49:af:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:40 2026 by rpki-client