Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
File:                     adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json)
Hash identifier:          aaNaHohfLiUYwFrfFSpneJkkSKNOoDm6s8JWWmth/WQ=
Subject key identifier:   BA:E4:AA:53:57:01:B0:4A:B9:8B:AA:6F:6D:A3:66:91:06:39:D7:E5
Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29
Certificate issuer:       /CN=69d47017b515ee214b28420edbedb3015c16ee29
Certificate serial:       019D329ABD161B98CBC520CEF3265069872B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
Manifest number:          1888
Signing time:             Sat 28 Mar 2026 04:01:34 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:34 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:34 +0000
Files and hashes:         1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: GnAw02fidFLPuQsC/d6L4+zty62SubcvEqPreUu9EjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:bd:16:1b:98:cb:c5:20:ce:f3:26:50:69:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29
        Validity
            Not Before: Mar 28 04:01:34 2026 GMT
            Not After : Mar 29 04:01:34 2026 GMT
        Subject: CN=bae4aa535701b04ab98baa6f6da366910639d7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:d1:82:7f:f2:a7:75:d6:0d:ab:4b:73:78:
                    ef:03:bb:ff:a1:4c:34:8c:7d:5a:c2:25:04:a3:98:
                    14:b8:52:14:12:ec:d3:17:8b:c1:ee:82:28:6c:b2:
                    dc:25:36:1a:ee:3c:8e:ba:57:e5:f6:02:85:09:27:
                    33:19:f0:3e:f7:70:1e:d7:bf:d3:2f:d1:44:83:ec:
                    5b:57:74:4f:24:da:eb:60:4e:7e:65:c0:48:60:48:
                    68:88:07:fb:33:ce:9c:69:ad:2f:92:dc:bd:58:a5:
                    a8:d9:65:56:e1:51:c6:36:e7:6d:63:6c:2c:39:51:
                    e6:af:fd:0f:0d:35:f7:f0:ab:b6:cb:5c:37:10:24:
                    03:85:97:20:10:04:c5:02:90:d9:1b:2f:31:aa:d7:
                    e6:d8:fc:f2:26:8c:6b:f7:3d:a4:2a:08:73:cb:c7:
                    d0:6d:fd:6d:73:71:6b:2c:18:c4:37:4a:8b:5f:0d:
                    f4:52:2a:bf:f2:96:61:c3:6e:bb:ae:cd:0e:85:c5:
                    5a:34:99:ae:c1:d5:9a:75:81:2e:f1:2d:26:ac:ce:
                    fc:ac:fa:21:f2:ac:d8:f6:f6:0b:ed:1e:52:07:8c:
                    14:cd:ec:eb:69:b5:e6:32:86:7c:2f:6e:6c:1a:d0:
                    d0:0c:90:8e:7c:1a:a7:dd:73:b5:ef:5b:fc:fa:8d:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:AA:53:57:01:B0:4A:B9:8B:AA:6F:6D:A3:66:91:06:39:D7:E5
            X509v3 Authority Key Identifier:
                keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:37:a7:df:a1:fa:f2:2f:cf:8c:f9:ba:f2:e3:bc:8b:c6:c2:
         35:98:bd:64:30:45:b0:a3:b1:ad:df:cb:2a:3b:3c:0b:07:f2:
         36:f4:8c:8e:5a:92:27:1b:1a:b3:5a:dc:10:10:df:49:0b:12:
         f2:84:e1:4a:10:17:16:84:6f:de:e0:2e:0d:b3:aa:ae:cb:15:
         85:33:7c:43:cb:a9:0a:b5:61:29:76:b6:f1:9f:28:0a:0f:ff:
         80:d9:34:22:7e:e2:51:f0:5a:4d:05:a8:61:22:fb:59:52:fb:
         33:f6:d9:ad:10:1c:51:88:c1:46:cc:59:ea:ef:41:3a:18:ac:
         5b:f1:a8:ff:8b:c9:3d:8c:3b:33:9a:de:9d:69:32:95:d7:8e:
         64:a2:cd:56:bf:26:c4:d4:aa:aa:91:45:71:76:cb:5d:2d:c9:
         11:a5:da:73:f9:24:cd:39:06:cc:20:23:f6:77:f6:ea:44:27:
         37:94:0a:04:3e:dc:41:58:0a:fb:ac:7a:df:7a:10:80:01:a2:
         7e:49:75:ee:c1:9a:52:00:01:46:94:ae:e7:7d:be:73:6b:91:
         c2:df:07:19:57:9c:09:a7:64:45:4d:20:27:01:4e:b0:d6:62:
         48:1a:69:a5:d2:30:35:68:e9:b0:99:78:65:bd:df:4a:49:1d:
         ba:f6:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:21:06 2026 by rpki-client