Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File:                     zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier:          xaF4nhe9pxt0onBfrkpgQ71Z77I+qLdoSE156GxV0Ho=
Subject key identifier:   C8:26:ED:40:F4:44:C0:1C:01:FF:30:B6:F2:B5:8B:75:16:5A:8E:DF
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer:       /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial:       019D98F412BF01BF55F74118C3074EABB556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number:          0EBC
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: cJlfgzmshMB5tsR+Sm73MtSthJyCMTe58PsmAKBE9x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:12:bf:01:bf:55:f7:41:18:c3:07:4e:ab:b5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=c826ed40f444c01c01ff30b6f2b58b75165a8edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:53:6e:40:7e:ee:14:d3:7e:fe:8c:20:0c:
                    75:de:16:14:2b:39:80:22:d1:1a:d5:fd:c8:e0:4c:
                    80:1d:96:87:57:e4:44:ed:77:73:6f:d4:84:ec:7e:
                    33:58:1e:a1:ff:15:ba:8d:c4:28:53:f6:92:6c:e9:
                    fd:96:f5:bd:75:11:7f:49:2f:7b:c9:7a:f2:7d:fe:
                    7f:54:76:81:e0:7b:84:e8:4a:46:66:6c:ee:a6:5a:
                    96:8c:8d:bd:88:c0:5b:c5:91:df:de:58:49:df:28:
                    14:5f:3a:78:44:17:ae:53:d4:07:71:f6:13:8c:26:
                    b3:42:87:d3:e2:3c:0e:f0:50:74:d6:80:42:f1:3d:
                    16:d5:4f:4c:e2:01:2b:dd:7f:73:4b:3c:de:a8:55:
                    e8:b0:86:3c:38:66:06:f3:2b:82:03:60:e8:a4:35:
                    72:57:af:0b:48:6b:f6:ee:26:8a:0c:2e:4a:6e:b1:
                    6e:51:9f:27:14:87:c3:e3:9d:b0:e4:dc:58:ba:a5:
                    0d:27:d7:d1:f1:60:eb:f0:ed:49:9d:49:a9:b6:1b:
                    b0:d7:0b:a4:6f:47:90:93:78:95:f7:c3:10:8d:bf:
                    ac:b1:a8:31:e6:79:46:07:8f:a5:ed:f4:b4:a8:29:
                    12:c6:66:8e:44:13:13:c4:74:81:8f:40:43:43:20:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:ED:40:F4:44:C0:1C:01:FF:30:B6:F2:B5:8B:75:16:5A:8E:DF
            X509v3 Authority Key Identifier:
                keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:46:85:ad:0b:b8:9f:9b:06:e6:19:06:22:91:86:91:59:
         1e:39:be:09:e0:00:e6:1f:aa:7a:8d:0e:e6:ef:2e:74:05:2b:
         39:2c:8d:3b:18:c6:98:0b:b3:c1:17:5d:68:3a:79:f7:b2:37:
         bd:89:30:73:99:4c:33:99:6c:63:57:44:86:bd:c1:7b:61:04:
         75:34:51:c2:9d:54:e5:05:61:6a:07:be:45:a3:35:a1:ac:84:
         66:d7:18:98:8a:e2:b5:0f:b5:56:67:ca:df:a0:1f:47:f7:b8:
         ba:ff:35:54:ec:b3:62:e0:a6:04:c8:e6:a7:b9:aa:ad:16:88:
         20:33:2f:b3:2a:9d:40:bb:bd:50:f5:a4:5e:a2:9e:b3:58:ed:
         67:04:e8:d5:1b:c4:da:25:6c:1b:dd:cd:b2:22:38:3b:f2:37:
         3a:9f:59:67:ac:3b:30:46:4b:7d:8c:df:c7:a3:61:79:fd:60:
         12:4e:66:a4:99:15:79:f0:48:bb:bf:ca:61:d5:4f:21:da:1d:
         4b:a7:39:8e:20:97:d0:6b:41:87:f1:bb:89:e5:e6:60:ef:d1:
         3a:00:06:63:ee:1b:f2:fa:f0:1f:a1:dc:ea:b1:20:2c:38:0e:
         6a:5f:03:bb:e7:ee:a3:ad:35:58:e3:02:31:cc:c4:69:58:e5:
         84:4e:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----