Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File:                     pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier:          T8Rtti9hVlHVwE8g8BBMkkpyBhGdzYbod4JT/QOcZvY=
Subject key identifier:   87:ED:78:B6:AF:2D:01:07:9F:F6:AF:BF:C4:F4:00:2D:C3:99:99:3A
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer:       /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial:       019D2AE031E05EF98E95682D8163A327CE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 16:00:28 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:28 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:28 +0000
Files and hashes:         1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: VukvsXn/sp0Z6DRudIBsoeqLeLqQ+7g2nPC44P6D53M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:31:e0:5e:f9:8e:95:68:2d:81:63:a3:27:ce:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
        Validity
            Not Before: Mar 26 16:00:28 2026 GMT
            Not After : Mar 27 16:00:28 2026 GMT
        Subject: CN=87ed78b6af2d01079ff6afbfc4f4002dc399993a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:ab:8c:01:12:f2:0b:1a:1d:fc:3c:1a:3c:
                    61:af:ac:28:2e:a2:de:6f:a0:ee:3d:bf:84:da:7c:
                    0b:3e:ee:e6:4e:f0:0b:44:c4:a7:23:6f:bc:59:48:
                    61:75:84:75:e3:51:a5:72:12:8b:64:f4:b1:7b:1f:
                    f3:e3:9f:a5:b6:55:0a:9e:75:fb:b8:3b:e4:3c:55:
                    c9:01:19:24:1d:c1:b4:54:8f:f2:24:eb:2d:b0:94:
                    f7:f8:f9:22:4c:77:d5:83:77:d7:8e:f6:02:a8:91:
                    c6:9d:af:0d:21:c8:8c:72:03:17:9f:4d:2c:80:ed:
                    72:f3:17:57:dc:fd:6a:ca:08:ea:29:9e:0f:69:76:
                    2a:18:95:bc:e3:ac:bd:0e:70:ff:28:45:fb:58:82:
                    ba:2b:97:7c:2f:6a:7b:6f:a1:2b:da:7f:b4:15:71:
                    f1:39:6b:76:47:eb:95:74:b6:46:29:5c:fa:1d:31:
                    84:37:59:36:b0:89:ab:60:1e:94:7d:cc:85:7e:e2:
                    5a:a2:f1:3b:87:9f:66:8c:2e:69:a9:8f:66:37:fc:
                    26:6e:c6:5b:31:15:18:66:6c:3d:9d:9c:fd:67:a2:
                    cd:50:6a:21:68:00:88:56:22:96:b7:b8:c5:99:ba:
                    af:fe:44:a8:dc:dd:ce:a9:46:22:62:9f:f7:fe:ba:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:78:B6:AF:2D:01:07:9F:F6:AF:BF:C4:F4:00:2D:C3:99:99:3A
            X509v3 Authority Key Identifier:
                keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:1f:3f:5e:67:65:12:21:bd:14:3f:ef:77:f2:57:8a:6e:
         32:ba:cd:d3:ec:ff:fd:94:29:a9:0a:ee:f3:0e:c9:fb:52:2e:
         b3:53:d9:b5:6d:09:d0:15:30:02:6e:63:37:5f:b7:38:49:1b:
         d3:3e:59:66:f9:f4:6e:4e:26:e1:74:bf:f4:84:18:f4:ad:c0:
         9c:26:21:d2:aa:44:a9:2d:b7:19:7f:5a:e9:77:97:60:96:cc:
         ab:23:0c:a4:b9:70:71:09:73:67:c5:a4:2b:72:c5:02:27:0f:
         a5:bd:eb:01:41:4d:85:e6:67:f0:e5:31:f8:c9:3c:df:ba:cc:
         e4:57:a8:bd:eb:9d:b3:2b:b3:79:6e:ba:c0:4c:e3:03:02:af:
         60:b4:8a:88:3d:63:ed:4e:61:68:c6:ce:d4:c2:00:2c:1c:a4:
         10:cc:b8:1a:b6:60:46:d1:ac:9e:57:6a:f8:e3:65:42:28:4d:
         47:6a:09:96:da:13:17:be:a0:7c:3f:bf:e1:19:60:74:29:be:
         59:86:e7:81:6e:b8:33:7b:7b:f5:15:09:a0:e8:f2:94:01:9f:
         58:74:7c:52:01:12:40:63:11:00:04:58:d0:dd:80:ef:84:c9:
         b8:d8:bf:c1:00:da:a6:c4:89:86:de:61:49:43:8b:07:50:83:
         31:bd:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:17 2026 by rpki-client