Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          8Kbaj7GqIfa0XprlIL+En3I4BacrhsKdu6Rqp5uw77A=
Subject key identifier:   29:3A:06:57:B4:79:63:68:72:28:28:05:96:3B:8B:C1:00:7E:9A:22
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       019D98F5236280511C0F7CFD590306C90EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          0878
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: WqzeQyWr19bw0onPKRxisdobGuDvjyNahGG+TIKewxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:23:62:80:51:1c:0f:7c:fd:59:03:06:c9:0e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=293a0657b479636872282805963b8bc1007e9a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:b3:8a:bd:90:8a:5c:18:6b:7c:97:0a:59:
                    49:33:c9:81:e6:a4:eb:06:0b:75:d0:be:78:ca:49:
                    e6:13:e2:7c:2a:9f:30:3b:34:6d:9f:c8:3f:3e:67:
                    fe:c4:fd:88:a7:14:b1:ee:fc:17:db:dd:ac:a6:28:
                    89:27:bd:a7:0c:2f:3f:8e:5c:ff:ae:fb:61:57:fe:
                    70:2d:e5:19:f3:6d:e6:3e:65:e2:2c:32:ad:0e:0e:
                    11:3d:3d:16:e8:ba:1b:47:54:ec:7d:09:0e:07:93:
                    2e:f1:34:7f:e1:f3:df:16:67:00:90:ac:2c:b0:32:
                    cd:3f:0d:a9:d6:8f:45:17:53:ed:9d:84:23:eb:ff:
                    19:0c:4b:a0:9f:36:51:b5:65:e4:70:4b:42:18:da:
                    5e:12:81:ac:88:8f:18:59:84:2a:6f:ff:2c:47:d7:
                    da:a6:a6:4a:0f:a0:a8:03:23:fe:e1:28:8e:ad:96:
                    62:51:33:a3:28:f2:16:28:92:da:bb:4d:13:cd:18:
                    45:69:2e:61:9d:7b:0b:fe:6b:4f:da:bb:01:b4:0c:
                    f6:37:8f:66:34:fc:5e:78:e7:ae:43:c9:0c:2e:11:
                    9e:e9:29:47:9b:7a:26:31:b4:f0:3f:ca:ca:f9:cc:
                    13:27:d0:9f:6d:7c:94:11:01:32:84:29:4a:95:18:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3A:06:57:B4:79:63:68:72:28:28:05:96:3B:8B:C1:00:7E:9A:22
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:e4:1f:75:3b:a3:26:31:25:92:4c:c9:e8:4f:d2:f4:d6:
         fc:fa:cf:7c:27:36:fd:30:bf:f8:60:e9:73:a8:e5:3e:1e:eb:
         9c:ca:ae:82:c5:a4:4a:b3:68:5c:be:ab:f6:03:a1:5e:c5:11:
         09:03:9b:90:4a:11:62:f5:c4:4e:05:b6:b7:f2:c2:e6:48:89:
         ad:8e:3d:b3:ae:78:78:53:b7:29:8d:ae:df:30:78:49:4a:44:
         82:2e:b3:b3:7b:43:b5:51:61:f6:93:fd:27:47:08:c3:76:c0:
         89:6e:07:0d:3c:6e:96:bb:ac:8a:52:81:e2:29:df:12:9b:a4:
         95:b9:e7:6b:29:f9:18:ec:42:82:e2:56:90:7c:dc:07:6e:cc:
         ab:ef:48:50:30:30:c4:90:06:de:e9:17:cb:73:ca:67:b1:f0:
         10:85:dd:55:79:72:2c:99:50:1d:f0:41:ff:12:56:54:94:35:
         31:9e:5c:5d:cc:a7:57:39:47:52:4e:9c:57:3e:5a:f2:21:33:
         4b:a1:d3:83:bf:e1:2b:78:dd:13:0e:40:34:9e:14:ee:08:e0:
         63:f2:36:dd:a4:18:47:a5:95:12:98:b5:9b:75:fb:0d:c7:4f:
         4f:e9:88:8f:f2:d8:38:ed:8a:4d:f5:88:2b:38:4f:7f:94:c1:
         dc:d3:87:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SNigFEcD3z9WQMGyQ74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTQ1YmI4NWJhNzU4NWUyODhhY2I3MWE0NTJiMGNjOGVl
MGRiNTYwHhcNMjYwNDE3MDEwMTM1WhcNMjYwNDE4MDEwMTM1WjAzMTEwLwYDVQQD
EygyOTNhMDY1N2I0Nzk2MzY4NzIyODI4MDU5NjNiOGJjMTAwN2U5YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cuzir2QilwYa3yXCllJM8mB5qTr
Bgt10L54yknmE+J8Kp8wOzRtn8g/Pmf+xP2IpxSx7vwX292spiiJJ72nDC8/jlz/
rvthV/5wLeUZ823mPmXiLDKtDg4RPT0W6LobR1TsfQkOB5Mu8TR/4fPfFmcAkKws
sDLNPw2p1o9FF1PtnYQj6/8ZDEugnzZRtWXkcEtCGNpeEoGsiI8YWYQqb/8sR9fa
pqZKD6CoAyP+4SiOrZZiUTOjKPIWKJLau00TzRhFaS5hnXsL/mtP2rsBtAz2N49m
NPxeeOeuQ8kMLhGe6SlHm3omMbTwP8rK+cwTJ9CfbXyUEQEyhClKlRgZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk6Ble0eWNocigoBZY7i8EAfpoiMB8GA1UdIwQY
MBaAFHvkW7hbp1heKIrLcaRSsMyO4NtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Yzc2YzgtMmE4OS00MmEyLWIwZjct
NDEwYTFiZGUxMjFmLzEvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84Yzc2YzgtMmE4OS00MmEyLWIwZjctNDEwYTFiZGUxMjFm
LzEvZS1SYnVGdW5XRjRvaXN0eHBGS3d6STdnMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwPkH3U7
oyYxJZJMyehP0vTW/PrPfCc2/TC/+GDpc6jlPh7rnMqugsWkSrNoXL6r9gOhXsUR
CQObkEoRYvXETgW2t/LC5kiJrY49s654eFO3KY2u3zB4SUpEgi6zs3tDtVFh9pP9
J0cIw3bAiW4HDTxulrusilKB4infEpuklbnnayn5GOxCguJWkHzcB27Mq+9IUDAw
xJAG3ukXy3PKZ7HwEIXdVXlyLJlQHfBB/xJWVJQ1MZ5cXcynVzlHUk6cVz5a8iEz
S6HTg7/hK3jdEw5ANJ4U7gjgY/I23aQYR6WVEpi1m3X7DcdPT+mIj/LYOO2KTfWI
KzhPf5TB3NOHWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:38:39 2026 by rpki-client