Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File:                     rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier:          EdLpso/yFWtmwgojYsNMDoo92IaxKLIJCNJuXlUC4nI=
Subject key identifier:   15:4A:1D:3E:51:DC:40:C6:4E:51:50:FA:11:37:63:51:2F:C4:BA:6D
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer:       /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial:       019D270451161CC7BC8A7D47D0C2FC339F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:27 +0000
Files and hashes:         1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: GgfWLn6YIDE4ox/6ha0jpF9WUemX9aBD0KeQ/Zd59Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:51:16:1c:c7:bc:8a:7d:47:d0:c2:fc:33:9f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
        Validity
            Not Before: Mar 25 22:01:27 2026 GMT
            Not After : Mar 26 22:01:27 2026 GMT
        Subject: CN=154a1d3e51dc40c64e5150fa113763512fc4ba6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cb:2b:15:03:f9:3e:e6:5c:de:f7:2d:37:52:
                    2a:82:38:e0:73:24:88:a4:e0:92:7c:5b:a5:98:41:
                    49:5d:d4:da:04:c6:c1:3b:9d:12:77:9b:df:30:6e:
                    6c:c0:4f:87:1e:fb:7c:79:5d:27:60:b2:c7:4f:25:
                    f6:cb:77:5b:ca:a8:12:05:30:84:a2:7c:c3:04:8b:
                    e4:77:71:e6:36:3b:8c:a6:71:1a:c7:03:93:e8:97:
                    7b:eb:ac:9b:5a:d0:23:6a:a0:74:86:d6:74:b1:7e:
                    4f:e3:e2:ed:06:2d:87:60:c0:88:63:03:2a:70:b1:
                    b0:35:b6:bf:c8:50:01:51:64:d3:6c:50:ba:7a:cd:
                    19:11:7a:89:92:0f:62:b3:97:f1:7b:da:7a:2d:62:
                    4d:f5:f4:b1:5a:54:7b:82:bd:fd:b0:80:26:f3:ed:
                    f9:c3:d4:71:e1:71:af:4b:54:af:50:f5:96:5b:d3:
                    e5:d6:81:11:83:9b:64:12:22:86:26:df:35:09:65:
                    43:fc:ec:5d:7f:94:50:31:2d:1b:51:76:4b:cb:50:
                    b8:7c:af:c4:e6:48:5e:6f:05:c6:9b:6a:aa:6d:5c:
                    83:79:6c:32:5a:24:e7:c9:0f:bd:f1:2c:6a:5a:22:
                    06:15:a5:81:5a:2f:ae:1c:04:f9:a4:78:86:3d:00:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:1D:3E:51:DC:40:C6:4E:51:50:FA:11:37:63:51:2F:C4:BA:6D
            X509v3 Authority Key Identifier:
                keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:4d:7c:67:cf:99:b8:41:3d:b4:dd:0f:72:86:99:b4:60:
         35:11:21:c9:39:64:f8:2c:52:0d:de:a3:bc:e7:31:93:f9:b6:
         16:b7:f3:ee:03:9c:55:79:75:66:8a:12:93:65:e5:7c:f8:49:
         ee:02:87:b2:11:fd:3e:ac:c1:1c:c3:8a:6b:f5:73:c3:1c:d7:
         ff:e5:ae:a6:94:3e:ab:9a:6b:e9:12:46:2b:32:a0:49:e0:ca:
         7b:09:02:b6:fa:01:44:d9:19:5d:73:6b:9a:78:75:58:95:30:
         c6:d3:b0:e6:f7:8d:b7:fd:30:9c:b3:91:5f:0b:e2:3d:0e:a9:
         5f:52:43:44:71:af:12:e6:eb:1d:06:83:99:d9:39:7e:48:3b:
         20:e9:b9:98:30:6d:f2:ca:77:67:b7:ae:1e:60:0c:91:4c:32:
         f3:37:18:47:71:25:d7:da:59:cb:49:5c:00:60:59:06:0a:4b:
         fa:eb:c6:00:b1:04:4d:89:fa:b1:f2:1d:1f:6c:16:dd:bd:4e:
         ba:87:29:94:6a:28:5f:52:c4:03:c3:9d:0b:c2:56:8c:8b:53:
         48:09:bb:35:c3:2e:5b:ce:86:30:f7:1c:18:13:0a:62:48:e2:
         92:8c:09:41:f3:5c:55:de:56:58:87:bb:99:89:f3:a8:6e:cf:
         45:12:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:13 2026 by rpki-client