Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          6Tk25dHX2fV/Wl52cF7JQCeskORYVpaMcNjw07L+4PI=
Subject key identifier:   97:8D:B5:89:F0:6B:B5:C9:BA:64:05:9C:19:18:84:97:3D:1D:62:D2
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       019D2AA9432D8909F3BDC518438C6BBC7A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 15:00:29 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:29 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:29 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: n7znogEgNqr4I/irFgqsLtN4gF9h5cgZ5DJyQKq07pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:43:2d:89:09:f3:bd:c5:18:43:8c:6b:bc:7a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Mar 26 15:00:29 2026 GMT
            Not After : Mar 27 15:00:29 2026 GMT
        Subject: CN=978db589f06bb5c9ba64059c191884973d1d62d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:b5:a4:48:d1:f5:be:96:6a:d9:f3:8d:3b:
                    ec:8f:98:08:a4:a7:01:3d:88:37:f2:21:34:a6:10:
                    26:43:3d:6c:38:f0:29:12:c0:62:94:b4:d8:d2:6e:
                    2c:09:f5:2c:9c:d9:83:3f:33:42:bb:09:d1:4f:7f:
                    44:04:b0:16:fa:ff:3b:e8:e9:d6:7a:ef:8f:f8:45:
                    f2:2f:9e:40:1e:4b:f5:8d:f2:b1:f7:b8:c0:87:72:
                    eb:b2:2d:10:f2:a0:8e:d5:59:e2:16:84:53:48:ea:
                    ca:af:94:4d:1c:2c:89:8c:79:f6:6f:da:62:18:65:
                    a8:f7:bd:6c:f1:55:28:90:9f:e1:77:b8:6d:54:3b:
                    2d:96:22:40:50:81:bb:8e:a6:72:92:bb:f6:45:df:
                    05:c8:30:0c:1a:0c:a8:f0:c0:4e:0d:44:d5:be:7a:
                    d6:8e:44:f8:29:e3:92:fc:97:ba:fa:be:3e:ac:a7:
                    3c:12:6e:f4:37:48:c2:fa:a7:9f:39:c6:48:0e:05:
                    3e:f8:2f:42:68:90:9b:27:a3:72:a4:eb:ad:89:2a:
                    ff:5b:ee:cc:cd:f2:18:a7:29:74:4d:71:3a:07:32:
                    58:45:9a:df:15:f2:40:cc:95:ab:ff:d6:f1:74:6f:
                    8c:d0:02:48:ca:51:ce:e7:4d:72:a7:3c:b8:95:5b:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:B5:89:F0:6B:B5:C9:BA:64:05:9C:19:18:84:97:3D:1D:62:D2
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b2:38:70:d7:53:a7:8f:af:5d:ea:5a:c6:51:78:cb:e4:f5:
         48:6e:4b:20:05:4e:f9:60:a2:7b:28:a8:19:37:4b:6b:4a:3b:
         cc:74:54:1e:11:d7:c5:98:80:ea:c8:06:bf:2e:65:82:23:bf:
         06:ae:7c:7b:2d:19:a5:e4:f2:59:12:82:c2:ca:31:79:4a:2c:
         6c:9d:a8:89:9b:47:5f:3c:55:ef:c4:8d:a3:29:1d:3b:f1:58:
         00:bd:8f:40:2a:4f:1d:5b:f5:42:57:84:fb:82:0f:82:be:9f:
         a3:cc:e8:72:fe:2d:13:7f:cc:41:f8:12:0d:e1:66:5e:72:df:
         24:26:6a:89:0b:91:f3:4d:49:9f:71:7b:08:48:f8:67:77:82:
         bc:5c:ae:4a:b1:00:48:a4:34:3e:5b:ec:bd:47:9c:5b:d8:19:
         93:df:d2:bd:ab:92:0f:4b:9e:71:2c:00:c2:a0:e3:20:1a:28:
         c9:ee:70:90:4a:be:63:fa:6b:16:94:4f:b4:60:b5:b5:ac:e1:
         c6:81:a1:1e:3f:a5:f8:99:80:d7:2d:2d:c6:4a:00:17:75:96:
         8f:11:82:82:56:5f:1e:13:a6:d7:2e:ed:06:5c:67:7e:01:4a:
         cf:a8:46:f8:33:71:eb:6f:ee:6e:33:84:7d:1d:17:4a:d5:38:
         5c:6e:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:48 2026 by rpki-client