Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          OqsM8FgpXgn6Bsx94rpLLPSt9aXKCEaZZ7kVNN+mvyY=
Subject key identifier:   92:93:20:01:B4:99:02:2A:99:38:C8:B9:25:47:BD:1C:E2:B8:87:BC
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       019D27A940B317BDC38C59EE273591169565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          1881
Signing time:             Thu 26 Mar 2026 01:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:36 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: gWEQfywdZ/BIoENIGcX+xcV1DzLJLEK2N8uZVaMBsXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:40:b3:17:bd:c3:8c:59:ee:27:35:91:16:95:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Mar 26 01:01:36 2026 GMT
            Not After : Mar 27 01:01:36 2026 GMT
        Subject: CN=92932001b499022a9938c8b92547bd1ce2b887bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:e8:47:45:df:90:16:b8:9c:35:2c:c4:09:
                    a0:ee:07:06:da:8b:b1:f4:fe:c7:98:97:26:95:21:
                    85:a9:b2:62:1d:4f:69:28:1f:e9:95:bf:57:38:83:
                    14:bb:ed:0c:61:2a:15:ef:62:9b:42:92:de:9b:3c:
                    8e:4d:bb:aa:12:06:f9:63:c1:c7:4b:87:9e:6a:1b:
                    43:d2:40:ea:ab:b2:a5:1e:e4:65:89:a5:4a:e6:87:
                    be:3b:dd:08:ed:76:67:e4:ff:1e:3b:1c:c0:cf:b5:
                    3d:93:0c:6e:78:7d:9a:bd:01:49:14:b3:19:18:60:
                    a5:58:35:d2:1c:92:ba:ed:38:aa:8e:c8:f8:c5:ed:
                    44:b8:a0:14:b9:8f:57:77:95:18:0e:29:43:24:32:
                    51:d0:b7:83:6f:c7:66:25:cd:31:10:77:49:17:61:
                    fb:99:33:94:3c:2f:46:4b:8a:22:21:bd:90:e8:77:
                    5e:99:94:ad:e4:87:6b:98:61:34:c3:2e:8d:a7:ce:
                    0c:53:52:4b:6f:7d:48:c1:21:01:eb:06:54:63:01:
                    e3:cd:7c:f6:d1:55:4a:11:63:71:dc:85:fe:d0:ec:
                    54:c7:9b:de:4b:d2:aa:7d:cf:13:9b:6c:52:70:45:
                    af:68:3f:f7:fc:87:1c:12:02:95:e4:65:d5:6d:22:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:20:01:B4:99:02:2A:99:38:C8:B9:25:47:BD:1C:E2:B8:87:BC
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:52:66:de:b9:60:af:27:2e:a8:9a:72:83:87:fb:e1:92:
         fe:04:5d:c9:5e:e9:1f:59:fa:2b:b3:5b:fb:8d:3a:93:e7:2c:
         d9:cb:3f:59:dc:ac:b4:cb:3a:d8:aa:7a:d3:fb:c8:12:d2:7f:
         e6:4b:69:5f:15:15:06:56:f4:92:15:53:a6:a5:18:57:e1:1c:
         f0:b4:4b:21:18:79:80:bc:71:71:bd:37:fb:fe:fe:87:c1:62:
         fa:e9:3d:ac:7c:16:e1:21:8b:3c:7d:06:5f:c2:11:74:a7:9f:
         74:63:b3:40:bc:e3:1e:1c:bd:b3:a6:37:1a:0b:ff:a0:fb:de:
         0a:0c:a0:7d:7b:82:24:1f:50:5c:a8:72:de:dc:1c:ff:b3:ad:
         bb:02:d3:86:df:fc:26:21:d4:2b:14:4c:b3:0d:02:cb:f9:ef:
         dc:d0:91:a5:2b:32:94:e8:6c:49:93:26:ce:0e:da:d1:8a:5d:
         57:11:6f:b0:8e:27:1f:70:75:f8:a7:65:ff:e9:22:9a:29:1f:
         bd:d2:36:31:c2:53:2b:71:68:6e:62:0c:32:ec:e4:f3:aa:47:
         6e:c9:e7:2c:35:a2:7c:a5:ca:24:c5:ae:d5:51:e3:9a:ad:27:
         69:6b:6a:4f:33:61:66:30:c0:5f:e7:3f:49:f4:2a:ea:4c:55:
         55:49:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:11 2026 by rpki-client