Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File:                     ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier:          hi0zgKfBXSV72UgaxsDrgdahQY82Dupcvgm1NFh8bkk=
Subject key identifier:   58:B8:8B:CA:7C:63:25:1F:ED:E5:31:CC:DE:76:8A:51:E9:5C:86:75
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer:       /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial:       019D270448D7C81C8C925A7F608196AB7C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number:          1271
Signing time:             Wed 25 Mar 2026 22:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:25 +0000
Files and hashes:         1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: XGQ/B+I3z1VSCFWPq3yucQk6QrabbvNUcas8IIHILHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:48:d7:c8:1c:8c:92:5a:7f:60:81:96:ab:7c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
        Validity
            Not Before: Mar 25 22:01:25 2026 GMT
            Not After : Mar 26 22:01:25 2026 GMT
        Subject: CN=58b88bca7c63251fede531ccde768a51e95c8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:b7:3f:a4:ba:ee:64:6d:eb:44:97:be:eb:
                    23:ba:90:c5:2e:f9:82:61:cc:cc:7c:08:28:95:47:
                    32:89:fd:86:24:b3:f5:89:ec:70:f7:a0:d8:04:7f:
                    1f:dd:b2:4d:ea:5d:7c:8a:48:45:34:3a:61:b2:0f:
                    e3:79:5f:56:7f:68:68:da:f6:ea:36:36:8b:15:f8:
                    78:a1:88:32:d1:67:4c:93:8e:10:b7:57:bd:72:4b:
                    a8:37:de:e0:9b:6e:e4:a1:61:2b:e4:dc:b0:21:5f:
                    67:5a:75:58:e1:5f:49:66:08:99:e9:19:90:99:83:
                    8f:44:3e:9f:88:76:98:78:ec:c4:94:e4:b5:4a:a0:
                    95:b6:ee:47:12:42:80:21:83:78:73:92:4f:90:4d:
                    81:ea:7c:08:a3:65:34:b0:e6:f0:cc:29:6c:b4:23:
                    d7:54:a2:2d:fc:36:46:60:1e:ba:60:c6:48:84:09:
                    d9:e6:3a:2f:72:35:f7:fd:d9:0f:11:ce:42:67:e4:
                    cf:8c:1f:91:61:a7:9a:50:b6:7e:86:8e:9c:a7:cb:
                    de:13:bf:f2:c1:b0:9b:45:15:35:86:50:33:06:23:
                    ca:19:ac:98:ab:ce:27:4e:1c:37:25:52:44:f6:95:
                    5d:17:a5:03:de:3d:68:d4:1e:79:ab:60:32:b9:6f:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:8B:CA:7C:63:25:1F:ED:E5:31:CC:DE:76:8A:51:E9:5C:86:75
            X509v3 Authority Key Identifier:
                keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:c9:b2:a8:ad:6b:18:ea:17:89:1c:91:33:92:3b:bd:da:
         96:b3:00:93:80:48:f4:71:37:40:7d:bf:42:2f:5f:a1:0d:4e:
         88:43:66:f4:50:da:b6:38:17:17:4e:d8:ad:39:eb:15:95:bf:
         08:d5:ba:7c:4f:53:f4:5d:a2:e6:83:82:f4:bf:d8:e0:6d:d2:
         72:6a:44:87:12:38:50:a9:d8:0c:de:8c:94:78:6e:c4:16:03:
         31:c6:43:d3:17:20:ea:0e:13:d4:d3:a6:80:e9:5a:b4:0e:11:
         d7:95:30:a1:9d:e0:e3:fa:92:15:ec:01:98:ef:af:d3:50:22:
         43:8d:99:ae:f5:64:2c:a0:d8:b8:dd:63:fd:c9:16:d0:03:b4:
         44:7e:c9:ac:35:f5:a6:7e:94:9f:eb:03:48:93:2d:d7:44:f7:
         eb:53:60:9a:1e:0d:f7:65:bb:52:88:99:bb:a6:31:1a:cd:27:
         b0:bc:76:33:f2:84:51:b2:c1:74:53:bd:4d:e8:4d:89:7e:ab:
         5d:23:f9:6f:d0:09:20:93:42:b8:eb:32:d6:b8:dd:47:0f:d1:
         ba:f7:44:2b:23:5b:e2:68:3c:58:ac:ae:e8:3e:0d:3c:9f:75:
         3d:9f:99:db:c6:1c:71:de:6f:d8:ea:ad:6f:10:06:90:83:a2:
         40:ae:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----