Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          xxWLtsaoJ+b6/MWheq/2byWT9e53/VwKpN+o3p8rpbM=
Subject key identifier:   63:A8:79:14:56:52:F1:3E:E0:32:DE:E5:33:43:BF:48:D3:8D:33:63
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       019CAB6B65563EDD22B935AE4F303822F960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          07C5
Signing time:             Sun 01 Mar 2026 22:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:07 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: jyhJANtIjYH1MXmF5xDCgo7lIZfnDY7TyZJXMKZeg/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:65:56:3e:dd:22:b9:35:ae:4f:30:38:22:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: Mar  1 22:01:07 2026 GMT
            Not After : Mar  2 22:01:07 2026 GMT
        Subject: CN=63a879145652f13ee032dee53343bf48d38d3363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:1e:18:57:b7:b2:c3:9a:d4:c6:53:da:a0:
                    d1:58:9b:e0:18:96:49:bd:3b:5c:80:b0:c9:1e:bf:
                    1b:a9:d8:9d:da:1e:b4:c3:44:40:dc:09:4f:f9:c4:
                    05:e1:cc:26:6b:75:b7:64:d9:9a:76:51:52:6c:16:
                    22:3b:3f:f1:83:19:75:1e:01:ef:00:cd:61:87:83:
                    29:eb:86:f0:55:6f:2e:fd:e5:27:39:ec:5f:49:77:
                    f4:c8:d4:9f:ce:49:ef:0b:6a:a3:be:84:fd:31:ca:
                    36:b0:b3:f3:04:73:86:d5:9d:09:1b:17:e6:b9:c4:
                    62:12:66:ca:d0:12:7b:97:fa:af:f8:bf:08:d3:c0:
                    21:74:cc:0a:9f:63:6e:7e:99:59:84:7c:3d:4c:48:
                    86:5f:c7:cb:e6:dd:3b:3c:1e:21:58:09:58:e3:2b:
                    02:bb:e2:fb:65:26:ac:96:a8:a6:41:74:76:a4:64:
                    a2:ae:fd:aa:ae:d1:04:ed:6c:7f:8d:2e:19:2d:c6:
                    73:33:32:ed:04:e4:79:79:45:4d:c2:b2:c3:77:99:
                    45:11:dc:e0:a4:85:bf:3b:e0:b0:ed:b7:f8:40:1c:
                    3b:96:87:f4:98:d6:9f:94:65:00:39:ac:86:cd:8b:
                    a5:91:88:a3:cf:bb:b0:d3:2d:8b:b8:bc:96:4d:37:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:79:14:56:52:F1:3E:E0:32:DE:E5:33:43:BF:48:D3:8D:33:63
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:72:d8:3e:e9:dd:dc:46:2e:82:c7:b8:fc:d2:ad:9b:30:01:
         a3:9a:7b:03:91:8f:90:2d:7a:b4:7d:de:d4:fb:a1:16:26:b5:
         09:da:25:2f:2f:75:e2:53:31:7d:12:18:38:6c:92:dc:98:db:
         e3:cc:76:c3:c0:0d:40:cc:86:b1:77:b5:5e:af:4f:c4:2c:99:
         0d:ed:a9:ac:03:8d:4e:fb:86:a5:76:f9:31:71:7d:06:f1:ed:
         0d:3e:dd:19:a3:6b:cc:87:cb:38:02:8d:0a:34:a1:a7:c1:dd:
         63:4e:a7:68:65:f4:8a:2e:31:a8:8f:cd:2b:11:1c:15:ee:07:
         fc:38:2e:2f:2d:c3:5c:8c:79:15:17:6a:19:0e:6c:f9:c5:86:
         cb:29:fe:76:ea:b4:e1:16:aa:ff:f9:99:f6:cc:9d:d2:bd:dc:
         eb:f6:16:2d:22:17:09:2a:cf:a9:01:1d:65:f8:3e:44:7a:06:
         55:63:3b:3b:ab:a5:50:e9:dd:da:b3:b9:07:e4:a5:d9:7b:26:
         a7:59:74:85:87:a0:8e:b2:25:02:c3:93:8f:cb:3e:fc:d1:45:
         5c:06:4e:63:e4:78:89:de:f9:e9:15:7d:b5:1c:95:92:e1:8f:
         d7:59:8e:3e:4b:3a:2e:44:0b:9f:c9:bb:3f:fd:aa:af:c7:a2:
         d8:94:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:10 2026 by rpki-client