Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File:                     tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier:          vaQUsUOXc0dqr+spcG0VOOs4z5dBWBEtdf+v3lHXyZE=
Subject key identifier:   73:F1:28:B9:AB:47:81:F4:7B:15:B1:A5:DD:B9:4D:DF:9D:16:46:AC
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer:       /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial:       019CAB6AD1EC248E9C40DA69E998AF578F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number:          1049
Signing time:             Sun 01 Mar 2026 22:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:30 +0000
Files and hashes:         1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: nI66zhvRKG4O9QPG3g1jfTo+LqlrF9vKWwIS6W1YSDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:d1:ec:24:8e:9c:40:da:69:e9:98:af:57:8f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
        Validity
            Not Before: Mar  1 22:00:30 2026 GMT
            Not After : Mar  2 22:00:30 2026 GMT
        Subject: CN=73f128b9ab4781f47b15b1a5ddb94ddf9d1646ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:9e:13:9c:3f:ee:1e:43:f5:e0:82:cf:fe:
                    fc:49:d6:8d:35:40:b9:27:78:d5:3d:41:c8:d7:1c:
                    1c:81:a2:d6:56:f0:e8:41:11:b2:80:99:72:0b:5c:
                    a7:d0:ef:9b:90:22:0f:5d:54:fe:e3:df:2f:d0:87:
                    12:8c:0f:d1:90:e0:0b:0e:93:ee:d5:a0:3d:e0:13:
                    b5:0c:e7:bb:9e:cc:b4:44:6c:24:39:2b:8d:34:f6:
                    cd:84:9a:9a:02:b6:00:26:08:f4:1a:76:49:70:9f:
                    e7:67:29:17:b8:97:01:a4:ea:97:96:6e:84:1f:cc:
                    64:05:de:3b:b3:f7:48:c7:c0:15:24:6b:f9:72:34:
                    35:17:45:82:40:b3:f1:7b:d5:70:2c:66:fa:72:24:
                    76:78:61:48:ee:f6:55:bb:94:0e:7a:d2:48:9c:f4:
                    72:cb:6f:a9:09:d5:53:32:15:9b:58:2f:e0:bd:1b:
                    9c:00:0e:c5:02:ec:a4:ac:78:7d:95:dc:c7:c2:7e:
                    fc:96:15:d0:ea:71:9b:d4:99:23:cb:6e:b4:f9:61:
                    1c:31:75:c5:98:06:74:95:be:0c:af:28:8d:6b:8e:
                    dc:45:f4:8e:50:7b:bf:d7:5b:08:75:57:24:37:80:
                    d0:77:06:49:68:61:05:ff:9f:e0:b7:d9:6c:ce:da:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:28:B9:AB:47:81:F4:7B:15:B1:A5:DD:B9:4D:DF:9D:16:46:AC
            X509v3 Authority Key Identifier:
                keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:a0:3b:68:66:46:94:3b:40:f9:3f:32:ae:11:45:68:c6:
         f0:75:9f:88:d6:9d:41:ce:ca:62:db:52:49:8d:c1:9b:cc:09:
         27:e0:d1:a6:40:6a:a4:f9:7a:96:8c:46:a5:73:af:8f:e7:c5:
         c5:74:e2:2c:14:1f:60:03:5e:14:c5:25:5a:71:3e:d7:28:be:
         34:eb:07:5e:4c:31:69:5d:d7:cc:b5:62:a9:7a:6a:dc:67:b8:
         15:e7:00:14:d5:1e:f5:5c:17:e5:41:7a:c0:63:b5:6c:99:86:
         3c:a3:13:1e:3b:83:49:f2:19:ce:fa:61:6d:93:15:c9:f4:d9:
         46:69:24:7e:5d:e6:94:79:1c:b6:d3:ba:8f:dc:72:69:52:41:
         4a:b3:a3:d1:70:85:06:42:0f:fa:63:cc:14:0f:b0:22:68:12:
         74:42:03:3b:27:51:9a:ab:c7:23:ce:19:c8:e9:d8:9c:7a:57:
         ae:da:fc:8a:cb:6c:4b:d8:89:03:70:1f:c4:db:44:d7:21:10:
         23:8b:a9:23:2d:0c:64:64:5c:a3:70:da:08:d8:1b:4b:d9:6c:
         9c:51:34:15:52:66:5e:bb:7c:24:a7:38:a5:78:bb:0a:b1:b9:
         bf:bd:e3:77:18:dd:06:f3:51:a0:9d:c9:29:29:bb:9c:0a:38:
         0c:9b:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:15 2026 by rpki-client