Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File:                     daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier:          RwNR76BaZ2I/NW0Qp81pLZDgfadswi+o7y/si2yM7Z8=
Subject key identifier:   2F:21:A8:0E:F8:49:18:A9:9A:93:7F:26:E7:04:53:D3:C2:9A:38:9C
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer:       /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial:       019D2CCF38ABDA42A06A16C90054CD32B6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number:          1884
Signing time:             Fri 27 Mar 2026 01:01:10 +0000
Manifest this update:     Fri 27 Mar 2026 01:01:10 +0000
Manifest next update:     Sat 28 Mar 2026 01:01:10 +0000
Files and hashes:         1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: 2vlxDN85jFzcu/QhTqByukKxMMG5AxctfUhOphNindM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:cf:38:ab:da:42:a0:6a:16:c9:00:54:cd:32:b6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
        Validity
            Not Before: Mar 27 01:01:10 2026 GMT
            Not After : Mar 28 01:01:10 2026 GMT
        Subject: CN=2f21a80ef84918a99a937f26e70453d3c29a389c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:5b:38:52:40:d6:ce:84:b6:0d:08:31:d7:
                    23:83:98:39:3b:c1:ea:5f:d5:68:93:90:d1:cf:9a:
                    73:d6:5b:06:67:5a:ae:4f:3a:b7:50:dd:73:f3:58:
                    ad:64:fe:7f:e6:7b:72:34:c0:77:41:06:0f:f2:7c:
                    46:12:d1:fb:fd:81:b7:28:80:16:bf:3b:2f:35:d4:
                    fa:74:b2:f9:f4:b8:a8:cd:71:29:19:9d:87:37:e9:
                    39:7f:19:63:0c:a4:93:3c:26:bf:df:59:95:cb:ee:
                    11:3a:0d:89:c9:17:7b:a3:00:05:1d:aa:86:75:5f:
                    cc:bd:3e:3d:92:b4:8c:26:35:62:0b:80:53:ac:db:
                    ea:c9:a1:90:f8:91:e2:ce:a4:11:e5:b2:81:74:8c:
                    3b:1b:ed:22:2e:fa:70:4a:a3:1c:be:49:5f:fe:30:
                    af:21:82:d1:3a:86:4d:6d:4d:dd:3b:35:f4:00:92:
                    0a:db:dc:24:5d:24:f8:30:e6:29:75:aa:00:14:be:
                    f1:02:48:75:86:b7:a3:c9:81:b5:85:8b:53:26:96:
                    e9:20:53:70:6f:ff:34:39:70:a2:57:89:98:18:c5:
                    f3:1f:89:2f:db:2c:3c:00:2d:66:c1:9a:d3:dd:5d:
                    6a:92:dc:f3:31:f4:d6:4c:95:1f:f9:1f:56:f5:20:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:21:A8:0E:F8:49:18:A9:9A:93:7F:26:E7:04:53:D3:C2:9A:38:9C
            X509v3 Authority Key Identifier:
                keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:de:94:de:82:ff:d1:1f:a2:cf:f7:cc:db:e2:e3:1b:f2:
         e7:c1:8e:2f:ba:12:49:cb:bd:72:a7:e9:17:bd:f9:31:e3:b2:
         15:f9:5f:74:4e:12:85:7c:67:2c:5d:82:4b:1a:f1:dd:cc:2c:
         c2:b8:6f:f3:9c:35:83:ee:e8:0d:af:12:ff:b2:39:d9:e0:0a:
         95:3a:28:4b:88:2c:c6:77:6a:bc:6e:71:01:8d:bc:50:51:58:
         b1:10:ef:57:da:2e:18:d5:a0:66:5a:c5:17:70:cc:d8:eb:ed:
         b2:27:32:91:38:37:55:9f:e3:15:25:f2:9e:02:42:7d:35:8d:
         53:99:00:41:f2:66:fc:b7:0d:70:3f:82:a3:d4:b5:78:12:47:
         23:ae:fc:65:50:b8:7f:2b:7d:2a:1b:5a:11:0b:22:63:69:42:
         ef:07:e0:fc:fc:54:43:fd:73:9e:73:dd:52:47:38:ca:f4:6d:
         32:41:a9:40:4c:f7:b7:b9:11:14:e2:ab:e5:c2:94:ff:7f:2b:
         07:d6:df:35:e1:49:e4:74:2c:7a:cf:dc:71:2f:5d:6e:c9:9f:
         c8:0a:86:b8:f8:f6:98:94:4f:ae:56:8a:ca:0b:e7:90:88:98:
         cb:e1:d4:af:dc:d9:ff:d7:34:39:9e:40:c2:68:dc:57:14:e8:
         d5:62:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:41 2026 by rpki-client