Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
File:                     v_1vzVFt27AQL1sDI6JsDtf2jCI.mft (raw, json)
Hash identifier:          lx4wfcIN6PJx9Al5mXTj5XXjvK5JB1B1gEMGH/ObqFk=
Subject key identifier:   05:A9:EC:E7:14:B3:98:88:AA:7A:F0:D8:82:60:A3:E2:3A:3A:8B:B2
Authority key identifier: BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22
Certificate issuer:       /CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
Certificate serial:       019D27041DFC3785A8B495994B6F28BA535C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:14 +0000
Files and hashes:         1: v_1vzVFt27AQL1sDI6JsDtf2jCI.crl (hash: VTrZUjLA0Rr6xNY31y0H1GGKTeXrA3jVEf76/KDj4Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:1d:fc:37:85:a8:b4:95:99:4b:6f:28:ba:53:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
        Validity
            Not Before: Mar 25 22:01:14 2026 GMT
            Not After : Mar 26 22:01:14 2026 GMT
        Subject: CN=05a9ece714b39888aa7af0d88260a3e23a3a8bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:3d:b2:47:55:92:03:f6:0e:48:cd:6e:99:
                    27:f2:e6:9e:f3:ee:cc:d6:88:4c:6d:e0:46:47:67:
                    a0:bd:34:99:55:0b:4c:78:16:67:11:a9:35:41:4e:
                    36:cf:a0:93:85:c4:83:a9:67:c6:23:fc:13:84:ef:
                    a9:04:44:70:95:77:ca:ff:8c:f3:88:8e:d7:19:79:
                    8f:d5:b3:a7:08:2d:3c:27:50:27:70:c7:0f:d8:a3:
                    8d:e4:30:8c:65:94:45:39:06:5c:ca:68:83:35:63:
                    95:6d:4b:71:79:f1:eb:85:63:b5:53:58:c0:05:2b:
                    94:4a:71:86:94:c4:85:e6:50:b1:4b:8b:69:9d:59:
                    25:f8:b5:75:47:33:ec:56:91:67:21:26:e8:fa:98:
                    0e:37:52:6d:78:a3:c3:32:d8:70:db:60:f3:7d:69:
                    e0:df:7c:1f:40:87:30:54:48:5e:0f:49:a8:c5:7e:
                    f6:aa:90:e6:b5:66:ed:3a:42:f5:3c:f2:cd:91:5a:
                    68:c6:29:54:0c:d1:fa:94:81:d0:18:b1:d0:d5:06:
                    a1:dc:94:4e:2c:ff:b1:85:e7:98:63:df:06:1e:02:
                    19:25:13:d6:c1:a9:99:1a:c2:34:65:e0:c4:0e:1f:
                    fe:f7:bb:95:c3:c5:15:1e:20:b4:1b:61:db:f0:ed:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A9:EC:E7:14:B3:98:88:AA:7A:F0:D8:82:60:A3:E2:3A:3A:8B:B2
            X509v3 Authority Key Identifier:
                keyid:BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:e0:db:72:9e:09:83:3f:2c:b2:04:54:0b:4e:87:da:96:
         92:65:19:fc:3a:04:08:27:8e:1e:45:bd:36:14:4d:0d:1c:b6:
         7c:1e:3c:5b:5f:c0:59:3f:6d:c1:0b:79:99:04:32:94:8d:0e:
         ad:92:8e:5a:b7:61:10:fb:ee:72:32:bb:7e:b6:04:af:55:55:
         17:d3:58:f1:d2:fc:a8:89:bd:ba:22:e9:af:e8:b1:f7:a7:5f:
         8e:35:12:1e:a0:67:41:7c:e6:2f:3f:39:90:3f:2c:45:12:27:
         29:f6:66:df:ab:34:cb:3f:e1:2a:84:57:53:5f:9b:94:4f:e9:
         95:2c:34:7a:f2:38:be:5a:4e:a4:f2:b6:66:96:b4:3c:9d:bc:
         22:f9:d5:af:af:da:1a:82:aa:c5:01:a3:38:a6:9d:22:36:0c:
         d4:7b:84:a8:97:b6:8e:77:08:be:3f:fe:5c:85:2d:1d:40:5d:
         12:12:d0:5f:5b:bb:69:72:a3:f6:7d:19:16:a5:64:83:d7:06:
         ff:7c:18:53:89:b3:14:97:fe:44:92:2f:7d:98:c9:f8:19:87:
         4c:46:c4:12:5a:9b:bc:43:69:e9:b6:1b:cd:59:d2:28:42:10:
         c5:54:b2:a1:e6:e4:9a:a2:d8:df:43:31:39:c1:26:45:ba:4d:
         16:1d:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:34 2026 by rpki-client