Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
File:                     tLV4tlwYGG0eanU5kSs06QALCMw.mft (raw, json)
Hash identifier:          h6PZqafMpDBfJWhHaDvhfB1yYxPdXxOe1dQ7hsOBodA=
Subject key identifier:   C3:2A:6A:A9:FC:29:84:DE:05:4A:4D:3D:49:65:1A:DC:2C:2A:9E:E6
Authority key identifier: B4:B5:78:B6:5C:18:18:6D:1E:6A:75:39:91:2B:34:E9:00:0B:08:CC
Certificate issuer:       /CN=b4b578b65c18186d1e6a7539912b34e9000b08cc
Certificate serial:       019D269641FFBD5C13792048177E51AA9E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
Manifest number:          B5
Signing time:             Wed 25 Mar 2026 20:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:14 +0000
Files and hashes:         1: tLV4tlwYGG0eanU5kSs06QALCMw.crl (hash: UfmFrD/r9IMDj3mY6JXGs1NKcbs94G1NLfoOMx1II6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:41:ff:bd:5c:13:79:20:48:17:7e:51:aa:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b578b65c18186d1e6a7539912b34e9000b08cc
        Validity
            Not Before: Mar 25 20:01:14 2026 GMT
            Not After : Mar 26 20:01:14 2026 GMT
        Subject: CN=c32a6aa9fc2984de054a4d3d49651adc2c2a9ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:7e:7d:0f:cd:42:d2:f5:da:23:52:56:48:
                    02:0b:77:51:08:96:fa:61:08:8d:9e:04:b1:76:7b:
                    91:85:16:ff:2c:c1:80:cb:3a:ae:54:e5:30:ab:31:
                    da:d8:c3:a3:8a:9d:06:b2:4e:ee:9b:1f:fc:2e:cd:
                    6d:3e:33:75:34:72:1a:50:18:0b:c2:7c:e7:78:a2:
                    14:7d:d2:0a:f0:ae:8e:59:1f:77:58:e1:f8:a4:73:
                    c4:5e:1a:19:27:69:a5:ee:bf:e9:03:79:b5:28:39:
                    dd:c6:20:a6:4d:68:87:e9:ae:0a:8f:9f:2e:bd:8e:
                    79:e8:e6:10:c2:45:ea:3e:d2:c3:a4:8f:44:e7:ac:
                    31:36:a4:7e:4e:36:ce:05:cf:3e:90:01:dd:24:d4:
                    62:31:6e:23:c2:0e:e0:96:29:b9:2e:53:9c:01:b4:
                    18:d0:23:8b:6c:71:ed:6f:06:2f:f4:01:27:ad:1f:
                    e0:0d:10:89:03:0e:22:cd:0e:26:6f:31:75:2d:65:
                    91:53:43:b7:be:68:00:08:24:17:3e:f1:b2:31:c1:
                    50:48:34:68:0c:54:f8:af:a6:6f:5c:20:37:d1:8d:
                    d2:4d:2d:cb:f5:03:7b:ce:4f:3c:df:b4:de:87:d9:
                    e0:c2:53:26:39:8c:84:b7:ea:b3:26:70:5f:9f:d2:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:6A:A9:FC:29:84:DE:05:4A:4D:3D:49:65:1A:DC:2C:2A:9E:E6
            X509v3 Authority Key Identifier:
                keyid:B4:B5:78:B6:5C:18:18:6D:1E:6A:75:39:91:2B:34:E9:00:0B:08:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:36:3c:c5:7b:eb:2b:b8:75:30:7d:72:0d:14:f0:b1:16:
         33:9c:21:4f:e3:28:07:f1:4e:ad:96:a3:ea:8c:07:6e:46:50:
         17:a6:9d:60:fc:e3:56:a3:d8:8b:00:e1:33:8d:cd:5e:8d:11:
         28:2c:c8:dc:da:7a:ee:45:df:18:31:e7:cd:bc:78:61:3a:fb:
         47:52:1d:c8:6b:34:2c:8c:82:1e:55:2e:e2:7a:8b:76:0e:8d:
         a3:0b:cd:f8:ac:7c:29:ad:70:1a:71:dd:b4:0d:67:d0:0a:c1:
         d3:d2:1d:02:72:4a:8e:e2:0c:dd:54:e6:13:8d:ba:83:f6:23:
         8b:44:64:85:8f:24:4e:90:15:33:84:41:f8:3b:c3:5b:3d:ce:
         fc:dc:4a:98:a2:79:86:24:23:23:fa:1c:ee:76:a3:7a:67:3b:
         ae:52:bd:5e:d2:08:53:f4:5d:5c:96:cd:42:03:38:b1:75:ec:
         8c:a7:79:f9:50:21:01:87:57:f1:0d:19:e8:ea:61:d9:ce:48:
         b0:68:3c:fe:68:2a:64:90:8f:1d:47:e5:96:24:c9:92:8d:28:
         fe:c5:c8:bc:09:94:e0:aa:53:85:c2:2c:29:98:cb:a0:c8:5a:
         ae:84:5c:a2:a3:91:4f:bd:0f:00:2d:7c:62:9f:c2:c7:71:ec:
         1d:a3:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:26 2026 by rpki-client