Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          yfDuYdOSa7ekTkaqrXkt24jwCzEyEFWag5sQYj75UkA=
Subject key identifier:   BC:E9:0F:24:56:4B:D9:48:83:B9:E7:4B:77:F4:7A:A2:3C:CC:A4:95
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       019D284E112E2D6550A96F6853E69F3BBF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          1755
Signing time:             Thu 26 Mar 2026 04:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:37 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: Hz5OWG8cs0jcPhBy+PL5e+vPfmLOgSsSk0uOn0OyEIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:11:2e:2d:65:50:a9:6f:68:53:e6:9f:3b:bf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Mar 26 04:01:37 2026 GMT
            Not After : Mar 27 04:01:37 2026 GMT
        Subject: CN=bce90f24564bd94883b9e74b77f47aa23ccca495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:26:e1:21:02:8e:a7:e9:36:19:e7:61:42:
                    b1:61:b0:94:66:17:79:a3:6c:7c:be:c6:26:ff:ab:
                    37:81:10:ea:aa:f2:1a:48:b4:cc:b0:a3:d5:2e:e7:
                    eb:a0:97:81:ee:c5:cf:12:7c:f6:92:8c:24:33:37:
                    e2:4d:c1:fa:20:5e:2a:23:99:e8:11:eb:0e:9e:70:
                    bd:d1:ae:eb:99:9c:59:70:22:20:c9:73:7b:d1:46:
                    1b:fa:55:42:fa:27:cc:9f:38:a2:b7:88:cf:43:05:
                    17:9e:a5:41:f1:79:b5:05:33:1e:bf:ba:01:e2:d1:
                    19:43:28:34:31:3a:7a:22:be:d1:2b:25:b0:9e:47:
                    80:7f:d0:34:a2:ed:79:ef:30:eb:9c:16:9a:64:cc:
                    e7:1c:bb:d1:9f:07:01:08:81:2f:a0:cc:9f:80:ab:
                    c0:3e:2e:29:cd:f0:4e:34:02:96:6d:06:81:87:ab:
                    c6:34:76:5c:9a:92:8f:9d:1c:3b:a2:48:9d:d9:2f:
                    d5:7c:b4:12:48:d2:1d:58:09:85:b5:2f:c0:86:5b:
                    3d:2f:54:e8:2d:92:07:bc:af:2e:4c:d7:fe:cb:1f:
                    3c:80:27:01:bd:4a:b2:45:2a:15:6f:18:9c:03:c6:
                    2f:5c:19:af:99:0a:5c:be:ae:19:e0:f3:89:3e:c5:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:0F:24:56:4B:D9:48:83:B9:E7:4B:77:F4:7A:A2:3C:CC:A4:95
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:55:5b:44:7a:00:dd:9e:a0:b8:ed:f8:88:7d:bc:8f:12:8f:
         a1:07:6d:a0:fb:ad:5b:19:44:94:57:77:08:cd:e0:68:e8:2a:
         cd:4d:06:01:ae:1e:35:c4:8f:d4:3c:8e:ad:d3:b1:c5:74:72:
         53:86:91:56:8f:96:01:40:b7:95:85:4d:dc:0f:96:e6:cb:2e:
         a6:df:c6:08:df:fa:12:f3:c1:04:6b:bd:74:d2:3f:48:36:1f:
         a8:76:1d:a1:a2:17:26:d1:7d:2b:44:6e:94:7f:4e:c9:3c:c0:
         19:f3:bc:27:8d:da:3c:ca:67:e8:f9:df:b8:e6:1c:1c:91:a5:
         ba:17:b0:c0:00:9e:b2:28:3d:d3:2c:06:6f:dd:c7:3d:26:f9:
         16:5f:2d:43:72:0b:61:e6:cc:4f:78:c1:f3:72:44:fa:8a:da:
         27:c7:ab:a2:85:78:91:b3:a5:cd:1c:7d:e6:28:3b:d6:b1:38:
         c1:0d:3f:47:db:ec:26:78:8e:fe:2d:4a:5d:8c:be:21:76:8f:
         ae:c9:62:39:3c:f0:5f:9c:47:f6:4a:8c:cd:62:fe:34:dd:24:
         6b:30:30:2f:7a:28:8a:02:49:1c:2a:4c:ca:4e:34:d7:81:04:
         15:3e:58:63:6e:94:e1:41:3d:60:fd:69:63:3d:00:e5:a2:8a:
         8a:8e:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:13 2026 by rpki-client