Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
File:                     siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json)
Hash identifier:          WpvWpQKr8m7wbIPwyW9iTkhOuHPy5937IS1LvySXUf4=
Subject key identifier:   F0:55:F0:87:31:26:1E:44:2E:6D:87:82:47:31:68:FF:FA:4C:8F:7F
Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
Certificate issuer:       /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Certificate serial:       019D2703C287A5214B379430815CCCD911D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:50 +0000
Files and hashes:         1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: CRjV+Mxf9KZlbV+amjkaOnuLcG2ByD3TgQkm+AEvqgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c2:87:a5:21:4b:37:94:30:81:5c:cc:d9:11:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
        Validity
            Not Before: Mar 25 22:00:50 2026 GMT
            Not After : Mar 26 22:00:50 2026 GMT
        Subject: CN=f055f08731261e442e6d8782473168fffa4c8f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:9c:19:b0:14:17:a3:f9:50:49:eb:90:54:
                    2d:d8:f8:2c:95:b3:5d:7e:89:e8:1b:ba:e7:58:d6:
                    5f:21:c7:f3:92:49:ad:24:35:52:53:b5:8f:f9:8f:
                    2e:87:92:3d:5d:27:9f:f7:71:f7:bd:3c:da:22:b8:
                    e6:9f:77:ca:64:57:cd:2e:04:51:e0:8b:df:71:63:
                    92:72:14:51:f7:38:a3:c9:1d:78:49:57:7a:d3:5e:
                    fa:be:da:9c:d4:6c:24:54:35:3a:44:3e:d8:3b:28:
                    35:95:31:46:40:29:02:b1:84:d5:7e:44:98:96:9e:
                    32:eb:a0:8b:55:5c:16:c4:d0:1d:cd:72:0d:2f:52:
                    d3:f3:be:c6:40:c3:a8:fb:98:d5:e8:65:a2:2e:c7:
                    3d:ba:f4:07:1f:d6:7c:91:5c:ce:e8:c4:b4:ce:c7:
                    03:45:2a:2e:ce:20:bb:1f:18:0f:af:98:7c:4e:3e:
                    28:4a:b5:c7:8c:8c:ed:b7:9e:f9:93:10:8d:10:2b:
                    9d:0c:1a:b7:0b:31:dd:a1:01:e1:4d:54:a4:58:ee:
                    fe:16:08:36:58:26:0b:1b:ef:2f:41:cc:a8:ed:37:
                    77:08:0e:da:dc:5a:0f:ed:ba:f7:c7:24:52:27:52:
                    61:55:ba:35:e6:91:ca:60:ec:26:68:87:2d:0e:98:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:F0:87:31:26:1E:44:2E:6D:87:82:47:31:68:FF:FA:4C:8F:7F
            X509v3 Authority Key Identifier:
                keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:18:0d:65:66:d2:43:45:54:3b:dd:e8:a7:3b:db:81:02:20:
         af:d7:49:3c:fb:c1:1d:8c:0b:8e:df:e3:4a:ed:a4:3e:9b:27:
         4d:18:60:27:52:42:2f:09:56:c9:12:c1:c4:ab:16:41:97:c2:
         76:fe:4a:4d:4d:43:d6:d0:bb:4d:6f:62:78:53:8e:cc:3f:b3:
         35:74:23:3a:a6:2b:78:16:dc:2e:ed:6a:68:d1:72:c1:9c:30:
         5b:dd:a6:6c:ec:2e:1f:6a:65:ab:6c:8a:27:1b:08:99:2e:cc:
         a6:cd:74:2b:c9:42:bf:26:f2:14:2b:ae:e6:2e:bb:27:3f:35:
         fe:27:a0:fe:49:43:77:29:4d:cb:77:47:f4:f8:13:eb:e4:82:
         c2:26:75:3c:90:f7:0b:e1:97:4f:b0:35:26:ad:5e:96:91:77:
         af:ff:a4:d5:3e:9f:19:91:ee:46:73:43:f9:eb:c9:78:9e:96:
         75:67:e9:f6:8e:8c:89:b6:06:6a:ec:d8:26:54:2d:55:fa:a5:
         e8:db:a2:a9:ed:60:0f:54:08:97:c0:43:19:73:c8:e0:d4:ed:
         2d:e0:f1:9e:92:f2:b8:4c:19:d1:dd:21:a8:aa:cb:ae:4b:12:
         ce:be:f2:61:e6:69:25:99:7b:20:12:71:92:b9:4a:47:a6:63:
         c7:96:30:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA8KHpSFLN5QwgVzM2RHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjJjYmM0Yjk1ZjEzN2I4ZGRhYTBlM2YyNGYwNWI5MzNj
YzdhOWEwHhcNMjYwMzI1MjIwMDUwWhcNMjYwMzI2MjIwMDUwWjAzMTEwLwYDVQQD
EyhmMDU1ZjA4NzMxMjYxZTQ0MmU2ZDg3ODI0NzMxNjhmZmZhNGM4ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRucGbAUF6P5UEnrkFQt2PgslbNd
fonoG7rnWNZfIcfzkkmtJDVSU7WP+Y8uh5I9XSef93H3vTzaIrjmn3fKZFfNLgRR
4IvfcWOSchRR9zijyR14SVd60176vtqc1GwkVDU6RD7YOyg1lTFGQCkCsYTVfkSY
lp4y66CLVVwWxNAdzXINL1LT877GQMOo+5jV6GWiLsc9uvQHH9Z8kVzO6MS0zscD
RSouziC7HxgPr5h8Tj4oSrXHjIztt575kxCNECudDBq3CzHdoQHhTVSkWO7+Fgg2
WCYLG+8vQcyo7Td3CA7a3FoP7br3xyRSJ1JhVbo15pHKYOwmaIctDpjVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBV8IcxJh5ELm2HgkcxaP/6TI9/MB8GA1UdIwQY
MBaAFLIiy8S5XxN7jdqg4/JPBbkzzHqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUt
Y2YwZTc4NmExZmZkLzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUtY2YwZTc4NmExZmZk
LzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBgNZWbS
Q0VUO93opzvbgQIgr9dJPPvBHYwLjt/jSu2kPpsnTRhgJ1JCLwlWyRLBxKsWQZfC
dv5KTU1D1tC7TW9ieFOOzD+zNXQjOqYreBbcLu1qaNFywZwwW92mbOwuH2plq2yK
JxsImS7Mps10K8lCvybyFCuu5i67Jz81/ieg/klDdylNy3dH9PgT6+SCwiZ1PJD3
C+GXT7A1Jq1elpF3r/+k1T6fGZHuRnND+evJeJ6WdWfp9o6MibYGauzYJlQtVfql
6Nuiqe1gD1QIl8BDGXPI4NTtLeDxnpLyuEwZ0d0hqKrLrksSzr7yYeZpJZl7IBJx
krlKR6Zjx5Ywgw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client