Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File:                     g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier:          yGlsoJm4lpOfjW8FOl9cAu1Yk1jF3Vca73pbgG1oSPk=
Subject key identifier:   8E:69:DB:F0:09:A4:0E:52:0C:F7:CA:FA:77:B8:5B:8C:56:FF:B3:3C
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer:       /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial:       019CA97D0C0B1D78DC2973C68720D006E48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number:          0BC9
Signing time:             Sun 01 Mar 2026 13:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:10 +0000
Files and hashes:         1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: Q+qnhTvD2VrguDPJyVaE2voJ/K63dzYAXxCWP7Sq/7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:0c:0b:1d:78:dc:29:73:c6:87:20:d0:06:e4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
        Validity
            Not Before: Mar  1 13:01:10 2026 GMT
            Not After : Mar  2 13:01:10 2026 GMT
        Subject: CN=8e69dbf009a40e520cf7cafa77b85b8c56ffb33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:36:42:db:1b:35:6f:5b:13:3f:d9:e4:c5:
                    14:d2:50:41:64:b4:60:a3:d9:b7:e5:3d:55:99:00:
                    d0:d3:d5:1c:b1:fa:c3:90:fd:3d:36:e2:15:93:36:
                    84:4e:13:82:f2:9e:37:5d:2f:ac:3f:eb:6d:72:60:
                    6b:64:4e:ff:dc:e8:16:3b:c3:06:db:46:62:6e:58:
                    07:94:a4:30:80:fd:54:0a:16:36:a0:b8:16:16:a5:
                    59:9a:e5:d4:e5:88:5c:50:db:ee:9a:04:bb:7a:50:
                    59:37:05:0f:4d:6a:f4:fc:49:89:69:98:3a:a8:2d:
                    e9:86:09:1e:bc:0d:23:f4:44:85:40:6d:d5:4f:4c:
                    81:52:2c:2c:9d:f3:08:3a:8f:2f:e6:45:9f:8f:55:
                    f4:f0:ea:89:f0:0c:4d:31:11:1e:20:f9:17:ae:34:
                    74:c5:84:cf:93:5b:71:37:b2:d7:9e:7f:9a:40:b9:
                    62:05:91:71:c5:d6:8e:93:67:85:0f:62:01:4d:15:
                    88:16:13:ce:d0:ca:81:cc:8c:aa:65:c8:08:ae:3b:
                    38:87:64:40:71:50:7d:b5:ce:4d:9d:15:7b:c5:35:
                    a5:2e:c1:6a:b4:3a:64:a9:fe:62:6d:d8:dc:9a:a9:
                    14:f8:78:41:09:ee:48:e7:59:28:66:aa:3e:28:be:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:DB:F0:09:A4:0E:52:0C:F7:CA:FA:77:B8:5B:8C:56:FF:B3:3C
            X509v3 Authority Key Identifier:
                keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:80:c2:1d:56:f7:76:20:e3:d3:95:66:47:8b:28:86:75:26:
         33:37:81:25:61:01:9c:2d:c9:21:ce:85:29:67:18:3f:20:34:
         f7:95:4b:32:68:7d:ba:30:8b:b9:01:3c:02:10:70:19:73:f0:
         e8:37:49:dd:ff:b0:66:14:8b:73:fa:66:47:66:a4:39:d8:a2:
         ed:0e:dc:4c:ae:2d:57:72:84:af:e6:7f:00:90:e3:a9:4a:b0:
         52:27:b1:7b:fc:43:59:7b:bc:ef:6d:5b:ed:40:9f:96:82:9e:
         9c:e6:c2:a7:07:bb:fb:ae:77:4a:a4:7a:a7:69:80:5e:cd:46:
         06:8e:8b:dd:c0:c7:5b:4f:c1:57:b3:d8:9b:3d:44:2f:00:d1:
         19:30:17:3b:c7:31:63:0a:02:43:e6:4d:ec:f1:36:cb:9c:11:
         dc:fe:8d:4e:f6:45:6e:14:6b:7a:36:04:8f:fa:15:32:9e:0c:
         8d:5d:7f:b5:2a:3c:a7:dd:e1:ed:2e:91:e6:8b:54:09:d9:a5:
         36:e6:39:4b:07:e1:9a:d6:82:73:9a:ea:50:7f:3e:ea:ea:2c:
         f0:e1:26:bb:ba:ca:ce:78:be:d3:a1:4e:bf:fd:90:5e:0d:bf:
         94:de:54:9d:3f:43:26:cd:75:45:c2:af:f4:ba:02:ce:69:78:
         3f:98:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:42 2026 by rpki-client