Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File:                     gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier:          nMQTkuV+ojO2Mj0wo5sbNUaoFn9vI8NCvskr15jNHo8=
Subject key identifier:   01:F9:72:1F:A0:0A:26:E2:AF:F2:41:1F:07:CA:DD:21:DE:9B:D4:4A
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer:       /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial:       019D25F1597A59651DD3D589265BDBD48ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 17:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:07 +0000
Files and hashes:         1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: uCT7uQO/fK34eVa7QUgfDz+X6vCCFdpPQX+H95WUods=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:59:7a:59:65:1d:d3:d5:89:26:5b:db:d4:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
        Validity
            Not Before: Mar 25 17:01:07 2026 GMT
            Not After : Mar 26 17:01:07 2026 GMT
        Subject: CN=01f9721fa00a26e2aff2411f07cadd21de9bd44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:de:74:98:9e:e5:27:96:18:f3:65:25:cc:
                    0e:1f:85:01:55:e5:36:f1:40:f3:40:28:ab:b0:bf:
                    46:67:c9:79:66:cd:9e:7c:29:67:8f:0a:5c:70:6f:
                    74:cc:ca:eb:00:57:00:1d:7a:03:26:18:b2:b5:c0:
                    37:bc:9c:d0:5b:5b:bf:15:96:a3:e1:d5:ba:b0:a3:
                    ee:59:dd:60:80:da:75:68:d1:1e:7b:05:7a:6e:22:
                    da:db:65:5b:3c:75:a1:05:13:a8:e5:1b:4b:a4:60:
                    38:a6:b3:ae:11:e9:15:94:2f:84:03:d1:a8:3b:40:
                    30:73:c3:51:c2:b6:cc:6f:e7:2d:d2:a7:75:b8:01:
                    03:c4:5c:e1:99:ba:15:85:ef:2d:f2:81:84:bc:ea:
                    29:a1:75:e3:27:26:93:60:26:33:99:82:40:d3:ee:
                    74:52:24:17:21:4d:d3:4e:4e:f9:8c:16:f1:b1:04:
                    56:36:dd:60:ad:72:27:26:37:a4:81:ce:fb:50:0c:
                    08:77:f4:74:d6:69:c9:0e:78:77:8c:43:49:bc:81:
                    89:2f:d7:74:97:6a:07:92:49:2d:ec:52:69:a4:3b:
                    91:a6:21:40:d3:07:d1:42:02:a9:77:90:82:d8:6e:
                    58:72:02:7d:5a:3e:8d:89:22:97:0e:83:29:1e:5d:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:72:1F:A0:0A:26:E2:AF:F2:41:1F:07:CA:DD:21:DE:9B:D4:4A
            X509v3 Authority Key Identifier:
                keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:49:94:1e:5d:84:db:54:86:fb:33:a4:d6:ea:23:08:8e:c7:
         c2:45:28:6d:7c:09:bb:82:cd:99:c0:ae:6f:b8:fa:a0:01:45:
         f1:ef:fd:4f:d9:91:82:06:36:0c:09:e2:19:03:cb:19:25:0e:
         51:e1:c4:e8:c7:a5:bd:14:44:18:30:3c:38:11:a1:40:41:db:
         5f:8d:dc:b9:3b:82:c7:0b:30:33:30:41:54:8d:f9:bf:02:78:
         db:82:29:7e:0b:37:f8:bc:df:33:a2:dc:6d:07:56:54:ca:82:
         d2:5e:8f:fa:eb:59:d3:7c:e0:36:3e:e2:86:55:59:71:0f:a1:
         ee:6c:df:dc:d2:33:1c:a6:f6:a3:a3:e4:bd:c0:97:89:97:09:
         c7:e3:d7:91:73:23:4d:e1:62:32:7c:61:fc:49:92:c8:03:47:
         0f:80:ce:b3:b1:8b:93:50:ce:75:63:ce:71:01:1e:52:23:00:
         7c:e3:c6:01:af:2a:c3:8c:06:bb:7e:85:85:b3:e2:f6:db:de:
         6c:b7:f8:c3:25:40:91:66:3c:28:4c:c7:f8:19:70:5d:cd:22:
         aa:89:1f:b8:ea:7a:3c:ff:ce:12:16:23:98:34:08:15:92:aa:
         58:d7:45:73:96:f2:3f:08:73:cf:f0:2e:2e:57:8b:ca:08:29:
         57:4a:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:35 2026 by rpki-client