Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          lrJ+O0FDtbXbZDje51/s852l76OKfJ9NMzuUEEX13Ws=
Subject key identifier:   77:0F:86:88:E4:BB:D4:A9:34:BE:2E:FA:FB:37:A2:0A:68:24:8B:35
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       019D273A8A10F451624E8D3A964B75DFFA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          05D5
Signing time:             Wed 25 Mar 2026 23:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:40 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: KspOueNX+GJdGxfkYerfmhkqteHGxZAbBVkjtABCSpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8a:10:f4:51:62:4e:8d:3a:96:4b:75:df:fa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Mar 25 23:00:40 2026 GMT
            Not After : Mar 26 23:00:40 2026 GMT
        Subject: CN=770f8688e4bbd4a934be2efafb37a20a68248b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:15:0f:4c:8d:2b:43:c2:20:d5:35:fb:78:
                    75:3a:d7:42:1c:ea:b9:9d:5e:ed:b0:b3:19:9a:f9:
                    ad:c8:c3:29:a9:1e:d3:f0:a2:a7:c2:e6:ac:26:fc:
                    5f:e9:e2:2c:5a:59:dd:14:83:15:00:87:9b:43:fb:
                    95:13:f2:8d:13:8f:eb:f9:2d:f6:f8:a3:b2:c5:e3:
                    e5:c8:f9:e3:61:a5:06:e8:e5:fb:65:d1:5c:65:ef:
                    fe:ba:78:97:b8:da:01:61:0a:06:1e:52:44:db:25:
                    fc:60:0b:7f:df:29:6b:d6:70:ee:ae:c0:69:a0:f6:
                    36:2a:39:17:d4:4c:f6:ce:e4:4b:b6:de:f8:1b:5d:
                    ea:7b:12:42:5d:e9:30:21:e8:d0:49:24:f2:0f:44:
                    ac:06:d2:4f:c5:ef:68:17:78:20:5a:57:5a:ae:49:
                    7d:b3:15:02:aa:70:da:37:67:b0:83:41:83:e0:27:
                    ea:27:fe:33:f9:d6:75:60:2c:b1:b9:33:06:1b:48:
                    eb:d3:a8:10:e3:0f:5d:19:a7:a7:d7:f6:c8:b5:7b:
                    00:f3:df:85:a5:4f:70:c4:12:91:3a:31:df:1d:87:
                    39:29:fd:1b:ae:bc:ff:4d:cb:3a:36:d4:fe:b2:ce:
                    62:7b:50:23:dc:5c:3a:bb:7c:05:96:ef:ed:dd:14:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:86:88:E4:BB:D4:A9:34:BE:2E:FA:FB:37:A2:0A:68:24:8B:35
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:f8:2a:b3:be:37:7d:a7:ab:4b:af:2e:e5:07:94:74:fc:
         3f:7a:5a:74:ae:a7:8b:00:6d:e1:9c:72:48:be:0c:d1:75:70:
         20:1e:c8:b3:dc:20:2f:10:ee:c9:36:39:ea:da:3b:0b:ef:ea:
         f0:bc:b0:a7:ad:6b:0d:d0:01:d2:1d:d4:06:76:26:28:d6:84:
         ed:e6:46:3d:ed:cf:15:16:52:57:00:b5:4c:ab:ae:d9:9e:f8:
         56:92:67:67:1d:4a:4d:26:3e:6b:f0:ef:ae:0c:f1:73:83:c9:
         42:70:6d:9b:ed:5f:5b:58:b2:1e:95:2f:9b:21:2e:72:ec:37:
         ad:e2:92:30:c4:7b:7d:ef:15:6b:de:62:34:36:ba:3e:34:7b:
         0d:bd:32:b3:19:fc:b0:b1:8e:05:9a:5e:e8:95:53:26:00:11:
         cb:4c:f3:1d:e8:79:e0:a2:a1:07:61:6c:81:e7:ac:7b:97:54:
         cc:d2:8f:1e:cd:4a:5f:36:30:aa:01:a1:3d:dd:4e:69:f2:0b:
         84:3b:3b:5e:9e:25:44:02:f9:df:23:6f:f7:47:91:d2:3f:9f:
         9c:74:23:11:ef:7f:34:a2:6d:86:82:91:bd:a7:09:73:de:9d:
         89:01:07:c5:49:78:ca:5a:b9:dd:31:ca:04:2d:0b:85:b6:63:
         62:13:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client