Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File:                     sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier:          /JCAt5LYuIdPY645Kpo2aJiY0/MM9OOGujqu4XDakUU=
Subject key identifier:   69:97:1B:E8:33:D3:15:F2:EF:C8:89:19:3F:9C:6E:DD:E4:F8:03:C6
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer:       /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial:       019D2627FBF1B83F155015AA89EA658CBA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number:          04DF
Signing time:             Wed 25 Mar 2026 18:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:47 +0000
Files and hashes:         1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: i95yNMYcUKGzQ0EHZGRaixzgsbD+DMI2AQQL9Kfoy9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:fb:f1:b8:3f:15:50:15:aa:89:ea:65:8c:ba:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
        Validity
            Not Before: Mar 25 18:00:47 2026 GMT
            Not After : Mar 26 18:00:47 2026 GMT
        Subject: CN=69971be833d315f2efc889193f9c6edde4f803c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:69:b6:82:7c:ba:fa:a0:57:e0:25:c8:cf:
                    ef:95:a4:8d:2d:ed:2c:a9:56:a8:cc:96:7a:45:fb:
                    b3:36:3f:04:de:92:ee:78:c1:7b:a9:d9:0d:b2:b5:
                    24:44:5e:e2:33:6c:db:34:8c:42:17:d1:cc:f1:a6:
                    d6:9f:97:92:ab:7f:37:58:0d:4e:81:9f:4c:e3:e5:
                    bc:b2:83:ba:d9:86:c4:98:9c:10:6e:c5:19:62:d9:
                    f8:13:a1:5a:6a:a6:5d:a1:42:98:aa:7e:48:b5:c9:
                    3e:f3:1e:50:87:01:ef:0d:42:89:fd:3f:09:f1:20:
                    bd:31:8c:e3:4d:52:0a:5a:c6:98:f6:41:a2:8c:45:
                    ae:ce:4d:20:72:61:44:7a:90:2b:ec:a8:a1:49:87:
                    2b:78:d4:b7:5f:47:8d:71:56:25:8a:f9:0c:e9:fc:
                    63:12:4a:66:e5:4e:f5:0f:fe:bb:76:84:1f:ce:38:
                    68:d2:cc:1d:6e:f1:e5:7e:96:a8:52:7b:09:38:0a:
                    97:fe:14:6d:0c:05:13:4c:d7:a5:a0:5c:10:fc:df:
                    7f:80:55:04:ce:c6:1a:7f:06:2c:21:ee:b7:f8:67:
                    12:20:6c:c9:44:9a:b1:9a:b1:19:5c:8b:ef:f8:db:
                    01:20:3d:7d:6b:01:81:e3:ac:22:5e:a9:9d:09:98:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:1B:E8:33:D3:15:F2:EF:C8:89:19:3F:9C:6E:DD:E4:F8:03:C6
            X509v3 Authority Key Identifier:
                keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:89:13:7f:a1:2d:35:d7:40:07:d9:30:3d:76:87:99:47:c4:
         7a:97:fb:f8:ed:63:7e:83:75:96:d1:64:cf:47:aa:ae:35:53:
         6b:21:11:13:63:94:f9:ab:81:f8:3e:96:6b:bc:a0:4e:48:da:
         e9:93:17:14:f6:7f:f3:f7:2b:18:7f:35:71:05:d0:82:1e:bc:
         04:ea:4d:fb:aa:6e:79:73:65:35:03:0d:29:05:72:41:cc:35:
         27:1c:80:10:a5:d3:7a:36:b2:bc:f6:0e:7f:0a:59:47:89:86:
         65:87:20:96:02:77:6f:99:26:21:2f:7f:39:bd:6c:5d:1f:be:
         ba:60:a1:70:3d:15:48:17:fe:81:e7:db:04:bc:82:1d:b5:23:
         b5:56:d1:a7:57:45:0e:be:a6:e4:ff:0e:c6:23:77:cd:78:ef:
         45:25:38:c9:f6:81:bf:43:03:3f:d9:2c:3b:18:74:0b:1c:8f:
         6e:7b:3e:0a:87:8a:56:41:27:ae:6d:dc:89:b2:d6:ba:68:03:
         87:26:6c:49:df:cd:63:28:95:dc:48:91:73:25:0f:d7:2f:24:
         1a:65:82:54:45:db:02:93:25:8b:6f:52:fd:a2:51:1f:f1:e5:
         8e:62:43:77:67:67:d1:ab:4f:62:a4:11:ab:3e:02:47:69:92:
         e7:59:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:15 2026 by rpki-client