Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          zCOsU+FO8JOuUntch3sJ2rYIKYH5HdDz3Zcv4mfYjT0=
Subject key identifier:   49:04:4F:DF:F2:88:E7:01:4E:1A:41:2F:8F:C3:08:34:90:00:E9:8F
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       019D2704AE9C80A874DCF761599B23409F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:51 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: olfTQl1gBhxNddV3qeXOZEucHbWhTiKfAzeAbITcla0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:ae:9c:80:a8:74:dc:f7:61:59:9b:23:40:9f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Mar 25 22:01:51 2026 GMT
            Not After : Mar 26 22:01:51 2026 GMT
        Subject: CN=49044fdff288e7014e1a412f8fc308349000e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:05:a0:85:1f:fe:63:63:e9:60:9a:86:53:
                    dc:3a:ad:fb:34:ee:95:cf:d0:3e:6d:52:5f:4f:f9:
                    e2:41:ba:69:27:76:8b:67:b7:ff:b6:c5:be:f3:17:
                    86:f7:1e:39:a0:f5:fa:a2:a5:88:8a:ac:73:31:96:
                    1b:a0:7a:c2:75:e6:78:3b:a1:ed:63:70:be:f5:45:
                    f3:e6:08:43:99:39:29:5e:ca:f1:4f:92:ce:54:7b:
                    3a:93:1e:6a:c7:69:6e:9e:89:2f:9f:c8:e7:1d:5d:
                    bc:cd:aa:d4:f5:b8:9a:46:56:dc:98:5d:43:45:dd:
                    15:a9:d1:0e:09:49:27:a7:60:a0:e7:e2:6e:30:24:
                    d3:45:3c:21:97:a6:86:bf:24:3d:08:98:b9:53:50:
                    28:3a:0b:e1:9e:28:96:15:47:77:39:5d:39:fd:44:
                    33:61:a8:33:f2:6a:13:e2:94:5d:b7:c4:d6:be:2f:
                    65:20:4c:4a:f5:8f:f7:70:1c:56:d8:9b:d2:09:88:
                    9d:9b:79:b8:7e:02:0c:45:83:33:f6:a7:d8:55:2a:
                    45:8c:aa:e5:a0:9b:9d:32:bb:1a:a0:2b:b1:3e:c5:
                    7a:96:78:27:b2:36:c5:c8:c7:5f:c8:1a:ad:84:0a:
                    77:c9:14:32:be:d3:05:d8:3f:04:93:c5:de:bd:2a:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:04:4F:DF:F2:88:E7:01:4E:1A:41:2F:8F:C3:08:34:90:00:E9:8F
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:b6:46:0d:50:5b:cd:bc:10:41:22:a1:62:69:0e:1b:96:
         3b:56:5c:76:70:2a:81:3e:85:9a:26:3e:f3:57:2c:28:cc:d2:
         4c:b7:6e:5d:d4:b7:95:c7:55:b1:b9:e5:d5:c6:73:94:a7:42:
         8a:17:df:78:87:bc:fc:81:f0:8f:76:a3:45:f3:4d:9d:e6:75:
         78:f7:ec:06:7d:f6:6b:df:0b:25:d7:f9:a6:23:75:3e:fd:f0:
         8d:04:84:d5:8b:ec:cd:ed:9b:57:f3:ad:16:f0:6f:d0:d4:c6:
         af:4d:68:d3:08:07:67:0e:33:77:f5:00:68:fa:57:44:32:47:
         8e:37:df:76:2d:22:73:68:de:ba:97:06:ac:47:10:ce:8d:8c:
         b5:1a:e8:95:18:cd:da:b5:49:91:17:e3:27:4c:77:e6:d8:dd:
         88:ce:a8:ab:a3:fe:38:64:94:57:22:77:be:f9:74:74:cc:4d:
         d7:6f:d1:6a:fb:62:0c:fb:02:93:8b:d6:99:be:b3:e4:97:c0:
         18:12:12:2b:66:d5:07:60:82:9b:dc:60:74:38:1a:f9:61:24:
         ec:2e:01:61:e4:3e:49:62:95:f6:94:34:ca:68:12:12:b3:54:
         3f:6b:b5:05:30:05:cd:a6:1d:da:c6:20:06:37:3a:50:78:6a:
         cf:a9:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:40 2026 by rpki-client