Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
File:                     lvwwAHd_a3tF8DtuyBwcAQv5l94.mft (raw, json)
Hash identifier:          tccBpp/b5JPy8bECzM2bVwLdpgVjFNUcsDe3PsjAsmQ=
Subject key identifier:   F7:4E:57:33:7B:34:06:05:3A:B1:D7:62:9E:EF:BB:32:A9:E7:C8:EA
Authority key identifier: 96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE
Certificate issuer:       /CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
Certificate serial:       019D2A728B100D29EDB20CEEA28DB0DE222C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
Manifest number:          0284
Signing time:             Thu 26 Mar 2026 14:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:42 +0000
Files and hashes:         1: lvwwAHd_a3tF8DtuyBwcAQv5l94.crl (hash: W5gXSidcqmaH0bPy8Xz3+D73wUIStGbZ+uAhqi5YAlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:8b:10:0d:29:ed:b2:0c:ee:a2:8d:b0:de:22:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
        Validity
            Not Before: Mar 26 14:00:42 2026 GMT
            Not After : Mar 27 14:00:42 2026 GMT
        Subject: CN=f74e57337b3406053ab1d7629eefbb32a9e7c8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:41:06:b7:70:c3:4e:92:85:ed:eb:51:dc:
                    df:9e:76:02:a5:0d:2e:53:18:59:9c:75:ae:c5:b9:
                    9b:5a:b1:93:6a:06:15:ba:c5:d8:b4:a1:61:95:6a:
                    d7:e3:19:47:9d:e4:b5:73:b4:c5:65:06:be:f1:83:
                    de:ab:42:e7:25:72:05:f6:59:b8:10:90:9c:fb:c3:
                    1a:86:a9:1b:b4:63:99:27:87:e4:60:41:75:f0:4c:
                    59:7a:8d:ca:fa:51:db:91:fa:b8:ae:1d:5b:35:c8:
                    49:9e:db:0a:c8:3b:ac:35:89:a9:4e:9f:a0:23:f2:
                    9a:90:d0:64:25:03:63:61:54:b8:9f:95:e7:4c:33:
                    29:3b:bf:1a:43:39:a8:28:b2:61:7d:81:3b:14:06:
                    6e:a4:59:f0:89:b4:d2:b9:67:3f:12:55:b6:3d:01:
                    53:64:61:34:88:16:60:c7:ec:b6:50:34:38:f5:49:
                    ed:a5:87:53:ac:8e:eb:34:03:ae:71:00:47:21:3f:
                    05:ec:51:58:b7:e6:c2:09:1d:0c:36:26:24:de:aa:
                    7d:0b:1a:2d:3e:d1:f1:a2:7c:0a:b2:28:11:a2:cd:
                    40:54:64:ac:b8:46:d5:8c:1e:54:30:24:49:5e:dc:
                    62:8d:6e:01:7b:b3:5d:8e:8e:8a:91:28:44:e7:34:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:57:33:7B:34:06:05:3A:B1:D7:62:9E:EF:BB:32:A9:E7:C8:EA
            X509v3 Authority Key Identifier:
                keyid:96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:ab:cc:a7:ee:63:98:2f:48:1f:a7:8e:9c:ab:e8:63:d6:
         cc:dc:60:ed:15:fa:dd:e0:9b:20:bf:5f:99:6f:b0:2a:88:3c:
         60:9a:9f:a5:f1:c2:03:69:60:ed:fa:88:3c:2d:c6:0b:34:e0:
         07:df:cb:4e:f0:17:35:80:2a:5b:a3:b1:c8:9e:17:48:60:49:
         50:85:38:e2:85:1a:f0:68:71:39:65:28:3e:22:07:76:89:05:
         58:9c:5e:eb:e3:41:f8:42:74:03:d9:6c:c7:1d:f3:a6:47:f5:
         e9:40:7c:01:d1:93:ef:e9:ea:5f:69:06:fb:ff:ed:75:b4:68:
         2c:11:0b:36:e4:1c:03:6b:44:01:4f:9d:77:b7:81:e5:00:8b:
         7a:c3:8f:36:a5:a9:cc:a4:d7:b2:92:59:77:3e:ff:be:51:8e:
         99:5c:c6:97:9e:08:40:99:32:37:f3:35:09:66:56:fb:86:ce:
         c2:a5:f5:54:10:da:5c:89:a1:e7:4d:e9:c2:91:5e:3a:31:3a:
         7c:ad:68:69:18:eb:54:e7:9a:f5:3c:40:bf:f8:0c:17:f5:71:
         ec:0f:48:dd:cb:7b:57:e1:77:1a:c7:04:cd:cb:9a:2c:3c:fa:
         61:b5:06:f6:c4:c6:e0:a1:f9:5c:38:e4:8c:03:24:cf:94:e3:
         3a:c3:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:25 2026 by rpki-client