Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File:                     AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier:          JFUjvFpxlQ9Z99yQIoDqAUx6IGTJU8tbduWT2w8Q/K4=
Subject key identifier:   51:AE:5C:36:B8:09:4D:73:18:D6:D5:76:EC:87:2C:81:D8:EE:93:28
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer:       /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial:       019D28F263DC49D020D27ED79B486EFF10B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number:          1881
Signing time:             Thu 26 Mar 2026 07:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:07 +0000
Files and hashes:         1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: rNFbjmQni9TGHXR+A8Mf+peQoRQgj7nOZwLOroq8NUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:63:dc:49:d0:20:d2:7e:d7:9b:48:6e:ff:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
        Validity
            Not Before: Mar 26 07:01:07 2026 GMT
            Not After : Mar 27 07:01:07 2026 GMT
        Subject: CN=51ae5c36b8094d7318d6d576ec872c81d8ee9328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:7a:d7:5f:7f:25:c4:53:07:77:a8:9a:a3:
                    d5:0d:a6:80:ac:25:82:eb:ab:1d:5e:af:cc:17:93:
                    ea:4a:6f:33:a3:02:15:1d:07:2c:9b:6b:95:22:16:
                    22:b7:39:c3:25:0c:83:78:b3:41:f9:8c:90:95:8d:
                    06:8e:61:c3:4a:fe:3f:f7:5b:ed:d2:20:67:ca:63:
                    87:96:f6:80:bc:c7:61:94:28:d3:ee:37:f5:02:62:
                    91:32:02:91:a0:3f:0d:f9:a0:c0:1f:74:d7:ae:51:
                    d6:bb:48:f4:d3:23:1c:4d:6f:1d:fb:c5:d6:1d:96:
                    a7:c8:e9:4c:fc:e0:ab:ac:58:9f:46:50:d5:10:21:
                    e7:c7:ad:97:90:e4:fb:5f:df:be:6e:63:c9:1b:f0:
                    c0:91:1a:b7:e5:66:5b:bf:0e:ec:05:c9:2e:ed:a8:
                    4a:3f:5d:5f:71:b6:e2:ce:bf:8b:6d:5d:da:e3:82:
                    40:5b:65:b5:74:a1:f5:41:e2:d4:dc:be:98:d8:27:
                    91:03:8a:b7:7a:80:a4:ef:74:15:aa:44:3a:d3:5e:
                    a5:9f:b3:f6:33:ca:c6:46:c3:ae:14:f8:43:32:72:
                    0e:4a:86:16:6f:41:c2:6e:27:32:1d:a8:31:5a:d2:
                    79:29:b8:ea:86:d0:45:53:22:dc:a4:fc:65:89:81:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:5C:36:B8:09:4D:73:18:D6:D5:76:EC:87:2C:81:D8:EE:93:28
            X509v3 Authority Key Identifier:
                keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:e9:0d:43:9d:24:6d:c9:a3:12:16:97:5d:98:e8:17:c6:
         7d:11:3c:36:c0:9d:13:60:1a:8a:68:a8:81:6e:08:12:4d:53:
         5b:ad:4b:62:08:ed:95:fa:0a:59:7f:a0:29:64:ed:4d:cc:a0:
         58:08:28:d2:72:2d:20:ca:e5:38:ff:e8:36:b7:80:6d:65:e1:
         d2:62:97:2a:cb:07:cf:33:bb:d4:82:d1:58:fa:58:bc:51:e1:
         3f:66:8a:28:be:4f:60:98:1c:8f:65:2b:22:72:10:b0:f1:40:
         8f:e9:7f:cd:68:57:d7:83:1a:06:62:62:f5:30:28:46:66:15:
         7a:d5:86:25:9a:87:59:12:8d:c9:c6:05:f4:df:b6:10:51:76:
         be:71:4e:5c:c6:0d:e6:04:79:6e:1c:af:a2:28:0d:85:a4:62:
         60:5a:b9:62:1f:d0:89:f5:7c:7c:b8:25:00:73:b0:24:75:b6:
         4d:6d:10:b0:80:ce:d2:16:1a:dc:c1:86:06:a7:b5:dc:59:80:
         d4:c1:7e:d3:43:cc:79:42:3a:9c:fa:26:58:43:7c:c3:b3:df:
         77:f0:66:fb:c7:f8:94:7f:90:d6:15:27:16:59:73:ea:86:2e:
         4f:71:2e:c3:e4:20:8b:f0:33:1e:ef:b7:43:be:80:8b:38:bb:
         a0:b1:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:34:49 2026 by rpki-client