Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File:                     vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier:          LTioiVLxX/KY+6FJdzsGCsbJdE4/fjUe64/uNMy9djQ=
Subject key identifier:   B6:2F:16:AC:50:27:11:E4:73:16:B1:38:8E:ED:E8:03:8B:60:1C:57
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer:       /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial:       019D28F27BF1B611462C54AC15D01FE52393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 07:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:13 +0000
Files and hashes:         1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: fTEMeKiWgOCQNTnxuszXkWmQieGXX11bZ6BCiAcVWx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:7b:f1:b6:11:46:2c:54:ac:15:d0:1f:e5:23:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
        Validity
            Not Before: Mar 26 07:01:13 2026 GMT
            Not After : Mar 27 07:01:13 2026 GMT
        Subject: CN=b62f16ac502711e47316b1388eede8038b601c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:71:fb:dd:4f:7c:83:5d:ed:65:8c:27:f1:
                    e9:90:19:09:10:67:cf:0f:bd:45:5c:89:54:59:d9:
                    d7:35:e3:fb:da:26:80:75:9a:d0:4c:1b:8e:a5:ce:
                    4c:b4:f8:60:9f:13:ae:af:12:17:42:ed:70:c4:81:
                    37:9b:df:ae:65:cf:f1:11:94:cd:62:af:3e:52:04:
                    9a:b4:33:d1:d6:55:be:66:f5:b0:ef:ed:c8:cd:6b:
                    3e:d1:d6:cc:7c:1c:5c:eb:c5:d6:db:2e:1b:12:f1:
                    8d:c9:cc:a8:68:e8:96:b6:4b:c2:ca:8d:22:c6:dd:
                    71:5e:56:45:1a:1e:b0:a0:0d:50:ff:1a:09:4e:fc:
                    fc:82:e5:85:23:e3:e0:41:23:cb:75:6d:81:d8:18:
                    64:0d:45:8b:c6:a5:1a:f4:8c:ac:36:65:88:28:d6:
                    fc:75:cb:8d:4a:26:69:b3:20:37:13:3d:ef:86:14:
                    dc:eb:28:9f:fd:20:70:f3:0c:c6:3f:1e:fd:2e:44:
                    7c:cc:bd:9e:07:c7:cd:8d:09:d9:5c:a1:20:92:1f:
                    fa:56:c2:c5:65:f6:50:7d:f5:73:73:1b:93:07:fc:
                    23:f0:c0:65:84:1a:57:ab:84:04:da:e3:3f:ac:92:
                    7f:8b:ac:fa:ac:c9:6f:e0:03:46:88:56:0b:35:44:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:16:AC:50:27:11:E4:73:16:B1:38:8E:ED:E8:03:8B:60:1C:57
            X509v3 Authority Key Identifier:
                keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:83:9d:12:51:8f:cd:e0:d5:b4:a6:79:c9:6e:35:4d:fe:f0:
         62:37:6a:bb:1f:9a:73:e0:b4:ba:0f:0f:fa:b9:43:7c:10:64:
         f3:0f:ea:ef:39:75:17:54:33:50:05:6b:b6:08:8c:6d:9a:3f:
         26:ea:26:3a:f6:cb:c0:08:5b:a0:3f:75:e4:a4:b2:89:82:9c:
         0e:08:c7:bf:d8:8a:bf:f0:ce:61:7c:67:33:1c:6f:8a:00:b5:
         f7:ec:ef:cb:8c:cc:88:9f:21:e6:68:de:e0:d8:36:bc:c6:62:
         49:53:77:46:17:f9:24:69:71:10:ec:47:4f:e1:ae:f6:af:1e:
         2a:14:c7:a3:c1:78:0e:a3:bc:69:1d:1e:14:47:03:79:03:fe:
         f0:7a:18:c9:34:18:81:ca:78:0e:65:97:36:c4:4a:11:c0:5d:
         44:f7:ec:45:10:5e:d1:5f:27:2b:04:06:9f:e0:e4:41:c5:e8:
         30:58:b8:ab:87:cc:69:40:13:ac:90:c5:41:7e:8a:ab:36:71:
         83:8e:c3:8e:37:56:24:dc:8b:f4:3c:aa:f1:21:b7:66:c0:32:
         e6:04:eb:d2:12:7c:03:ef:f7:65:50:ba:ac:87:f4:b9:91:bb:
         89:49:d5:5a:f1:f5:07:84:36:6e:9a:e7:fc:a5:4f:12:dd:c4:
         2d:8e:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:41 2026 by rpki-client