Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File:                     N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier:          E2oWkP1igkFSsf9Or2hx2hIgmeKKUmpyShONqdG8ckI=
Subject key identifier:   70:F4:A8:04:FA:22:4B:A4:91:50:1C:E6:90:75:78:EA:E3:2C:F2:4B
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer:       /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial:       019D265F3F8206A611EEBA176BF814A6BB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:09 +0000
Files and hashes:         1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: ZTIrmB2h5v9ZskvTnv7c7iEWvvRCcmwt7/962xl3Chw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:3f:82:06:a6:11:ee:ba:17:6b:f8:14:a6:bb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
        Validity
            Not Before: Mar 25 19:01:09 2026 GMT
            Not After : Mar 26 19:01:09 2026 GMT
        Subject: CN=70f4a804fa224ba491501ce6907578eae32cf24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:99:6e:2b:94:13:9e:28:5b:88:39:88:d8:
                    37:40:88:3e:ab:c3:2d:a3:f7:99:d6:45:ee:a9:cc:
                    33:31:fb:f6:88:3a:c8:36:30:71:9b:37:ed:ed:e9:
                    11:7a:65:3f:9f:7e:0e:86:cd:da:6e:57:4a:09:b3:
                    63:6a:26:55:86:cc:4c:0c:84:3d:2d:73:ff:30:cc:
                    ff:a8:42:06:da:28:98:49:92:4e:b5:67:e8:3e:ac:
                    d7:f0:2a:0c:12:80:76:bf:3f:31:bb:53:26:2b:4b:
                    b7:5c:5d:ad:ab:77:1d:8c:4d:30:aa:cb:43:d8:8e:
                    9b:fa:29:7a:4f:63:ca:71:24:42:e6:b1:6e:72:c3:
                    1f:8a:ff:63:30:70:b8:05:27:7b:22:25:98:b3:cc:
                    c6:41:88:59:eb:f1:dc:4e:de:eb:de:6e:12:09:8a:
                    3c:f8:18:23:c8:6a:b5:f1:6e:8d:49:1b:2b:d7:e2:
                    fb:97:a3:d3:82:68:1b:71:42:ab:e3:a5:b2:38:2c:
                    3c:c4:9e:be:3b:a0:e1:8e:d3:d7:5d:48:38:6f:7d:
                    91:74:67:cd:c5:70:fc:24:37:af:3d:15:98:5f:ed:
                    83:b6:f8:86:f4:9d:62:3c:95:c4:23:89:79:e2:ab:
                    14:2c:89:e8:b1:50:1a:5f:cd:cc:3a:55:67:ff:66:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:A8:04:FA:22:4B:A4:91:50:1C:E6:90:75:78:EA:E3:2C:F2:4B
            X509v3 Authority Key Identifier:
                keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:6c:18:fe:22:2c:4b:d1:01:34:49:e1:77:12:b1:37:d7:
         d6:91:88:2c:de:c0:14:66:ae:13:4c:b3:a7:6f:20:54:e7:6b:
         dc:ba:06:14:13:2d:ed:d0:47:e9:22:22:aa:26:bd:0a:fd:89:
         df:d0:45:24:a7:05:ae:1b:23:2e:94:96:eb:dd:1a:15:cc:66:
         b9:ab:4a:86:fc:63:29:a0:51:60:4b:f4:4d:e9:f1:a0:9f:78:
         dd:5f:65:32:0e:a9:c3:d3:a0:e4:c3:aa:50:87:50:06:91:4a:
         ca:b7:f3:34:fd:f9:51:43:7e:a0:05:f4:91:51:a9:b6:d1:b7:
         d9:b8:5d:d6:1b:e5:bd:98:4a:19:99:52:7a:30:18:ba:ad:76:
         89:f1:b4:8f:4c:ed:cc:14:f1:be:91:a6:36:73:73:36:ff:b2:
         28:a4:83:61:94:ad:fe:70:f8:5c:5e:74:dc:39:ac:c6:64:5c:
         17:98:0b:c3:16:b3:b6:e4:a7:98:34:50:4a:e9:84:3b:d6:7c:
         f7:3c:7a:ed:54:e3:5e:6a:76:13:c9:5d:25:1b:dc:b7:9b:1e:
         c6:82:ad:90:a0:a4:95:68:0a:b5:29:a0:3e:0b:22:4b:72:3a:
         aa:6f:9c:50:42:36:f0:04:f7:57:c1:77:14:83:6e:50:22:0b:
         cc:b3:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:59 2026 by rpki-client