Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File:                     _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier:          7SBmdhVq2v65NBGUFeOuVgsashKlBUfNPRtBCUVT0d0=
Subject key identifier:   BE:F3:30:6D:DA:ED:0B:8B:B9:C1:AA:70:5B:09:2F:8A:BC:D1:97:AC
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer:       /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial:       019D2704E4CAC077BC52841D6190D724B74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 22:02:05 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:05 +0000
Files and hashes:         1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: mpC6/H9EwCpJX/IT8J281subAe9yu0qsl1fl6NN7D/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:e4:ca:c0:77:bc:52:84:1d:61:90:d7:24:b7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
        Validity
            Not Before: Mar 25 22:02:05 2026 GMT
            Not After : Mar 26 22:02:05 2026 GMT
        Subject: CN=bef3306ddaed0b8bb9c1aa705b092f8abcd197ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:3b:ea:22:bb:dd:16:d4:bb:25:a4:a9:cd:
                    a5:48:09:4f:ce:1e:6c:41:a3:ee:ee:e0:3c:74:aa:
                    13:cd:b4:e4:e9:b8:97:3d:d3:69:53:6b:52:fb:c5:
                    2b:18:2c:23:f5:c5:7d:9c:ff:63:0d:67:f9:53:f2:
                    54:aa:51:7e:67:e6:1a:c0:6d:08:f7:b6:6e:c0:a2:
                    07:8c:80:1a:fe:3f:27:5f:3f:5b:66:54:b4:02:7f:
                    56:8d:15:5f:4d:dc:4b:53:59:7e:1a:d9:7a:f8:42:
                    4e:e2:34:41:36:05:05:4a:d6:5e:e4:45:be:4e:60:
                    b1:ac:a7:84:ef:40:83:d8:a1:73:05:ee:c1:15:66:
                    91:a7:42:ab:5d:02:2f:72:c0:05:73:13:49:ed:74:
                    b3:4c:e7:c2:40:16:37:a9:35:d3:66:e3:56:2b:68:
                    1b:fc:18:a8:44:a5:ab:b1:ba:89:dc:58:87:2d:45:
                    e2:48:b3:76:78:24:60:f6:9b:00:77:77:07:2a:66:
                    2c:7c:da:09:c4:d7:da:1e:a1:6f:de:a7:bd:f0:35:
                    6b:e5:a5:81:86:3d:c7:8a:af:f8:12:76:39:fb:4c:
                    12:f5:ef:3d:06:c5:df:38:6a:8f:53:f8:d9:f6:36:
                    73:bf:18:50:b8:49:e3:88:21:7c:1d:e3:0b:0a:f8:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:30:6D:DA:ED:0B:8B:B9:C1:AA:70:5B:09:2F:8A:BC:D1:97:AC
            X509v3 Authority Key Identifier:
                keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:55:59:de:8c:10:1a:e3:48:08:ff:53:e4:9f:d4:e5:60:
         19:8b:27:c3:10:03:e0:b0:1c:3d:71:2a:9a:62:3e:68:9a:18:
         46:48:d7:1d:9e:18:1d:54:5c:24:41:0d:4a:8b:a4:55:40:40:
         76:9a:98:20:57:1e:de:b6:b0:99:ae:10:ab:1a:00:91:52:ea:
         e3:63:7d:6a:c5:a0:ea:93:f3:53:ed:64:c4:4c:85:bd:e0:8d:
         64:9e:2c:ce:24:50:ce:a4:3f:92:70:b7:71:c0:1c:1e:3c:6f:
         09:01:92:a0:ce:8f:cf:65:04:e4:5a:5e:68:f3:3c:95:47:82:
         c0:07:71:15:8c:01:5b:23:d1:05:07:b4:38:0f:5b:4c:c0:09:
         bd:86:1b:b4:b8:4d:53:e0:ec:2a:ee:04:e6:34:fe:ea:8f:74:
         bb:72:1d:61:79:d8:12:fa:40:5d:f8:2e:22:61:a4:57:ae:29:
         b4:d2:b7:3c:22:98:c6:36:b1:a7:62:36:fc:1c:23:02:28:19:
         51:f3:55:d7:3e:3e:53:96:03:04:9c:37:79:66:7e:d1:27:ba:
         08:59:a2:86:78:32:2f:46:0e:ac:3a:85:77:57:fd:94:b1:6a:
         b6:24:67:17:54:0e:70:20:b5:61:48:c1:00:37:34:33:49:ff:
         c1:79:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:32 2026 by rpki-client