Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          xOyR9zVWI5wRgEeEWbmuCb3VM9Hr4H4VrQHnjQC+OLU=
Subject key identifier:   46:25:AB:A6:98:5B:38:9C:07:A9:CC:22:38:2B:83:90:DC:2A:86:6B
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       019D29CDE680EEDB15212939862A21BC7C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          0543
Signing time:             Thu 26 Mar 2026 11:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:52 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: RtMeNsl7nAhaijPG4XBMLGTvCso6BwZnTENIQysuZuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:e6:80:ee:db:15:21:29:39:86:2a:21:bc:7c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Mar 26 11:00:52 2026 GMT
            Not After : Mar 27 11:00:52 2026 GMT
        Subject: CN=4625aba6985b389c07a9cc22382b8390dc2a866b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:fe:8a:45:68:9a:f0:c2:0c:01:04:67:03:
                    7f:55:d4:a9:7b:a3:fc:21:a2:22:d1:05:50:29:40:
                    78:db:ab:2e:e6:5c:47:0a:f9:10:1b:12:2f:f7:c3:
                    fe:4a:84:92:b8:5d:64:ec:84:df:73:28:7c:82:d0:
                    18:6b:69:14:7c:43:aa:f1:3d:e8:8a:e6:b6:15:fe:
                    b6:b9:2c:7f:12:eb:5e:c1:6e:2a:5d:05:33:37:60:
                    35:70:a1:11:62:cf:8c:57:5b:d9:41:d9:32:a5:95:
                    d8:f4:b5:09:59:e1:ae:86:79:83:21:57:90:48:ad:
                    c3:a9:18:67:c2:91:b4:4c:76:bf:f2:12:b1:d4:82:
                    ac:e1:f0:97:84:e0:c6:25:29:45:4e:eb:f3:8d:33:
                    42:72:5e:ba:5e:8e:71:20:b7:f4:33:21:ee:10:45:
                    f9:85:7f:7e:a0:fb:ce:13:a6:20:0d:57:2b:60:e4:
                    b0:62:c4:51:c6:22:3c:4f:41:d4:34:49:ad:fa:de:
                    c8:d8:88:77:09:fa:3c:24:b1:41:90:ec:a0:d2:7f:
                    71:6f:c3:d6:26:3d:4f:16:d6:6d:16:19:4b:b5:52:
                    2b:eb:74:3a:7d:22:04:05:23:37:49:f5:3b:4b:c5:
                    7e:64:05:2e:9f:75:fd:46:40:ba:f1:6f:b8:07:ad:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:AB:A6:98:5B:38:9C:07:A9:CC:22:38:2B:83:90:DC:2A:86:6B
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:aa:68:29:91:78:01:37:08:31:0c:6d:81:07:99:e8:94:
         a8:60:0f:dc:16:30:62:b2:f3:2a:eb:79:a2:de:b2:66:7c:6f:
         4d:57:95:c7:d6:bd:d3:44:6d:31:6a:68:a3:bd:08:39:ae:7a:
         82:0f:e4:f6:e2:43:ea:b4:c2:60:0a:4c:5c:72:1b:a4:be:27:
         1e:a1:a4:de:67:21:a7:e9:3c:38:a1:b8:d5:bb:a2:25:b5:27:
         e3:17:08:01:fb:ec:d7:b3:f1:bd:d5:9d:70:d6:7b:1d:72:c4:
         8f:f5:59:cb:b7:cd:80:a1:cb:6e:0e:bc:ae:f9:78:f5:38:5c:
         0b:bf:dd:6e:50:9a:ec:c0:da:5e:68:ed:d3:1f:b9:a6:9f:e8:
         2d:45:83:11:98:b9:af:b7:dd:9f:67:77:85:bb:21:95:41:62:
         16:83:4b:e9:12:af:4e:f4:ca:65:7c:6f:bb:5e:a4:1c:e3:e5:
         fa:d1:e0:cd:05:23:d0:d8:25:8f:f9:54:f8:af:14:c4:db:ad:
         ed:8a:7d:86:27:c0:99:77:53:bd:de:48:7b:f1:bc:59:09:2d:
         79:a2:25:59:44:b1:91:94:4d:59:87:52:15:c6:bc:dd:69:3f:
         6b:d7:80:64:91:df:07:36:d8:96:a5:72:86:af:52:4c:4b:ce:
         c2:51:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:01 2026 by rpki-client