Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File:                     rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier:          U1o6uQYSWXh1q33JCd3miUByqL6mXsy3banxJy/8Vws=
Subject key identifier:   14:0E:83:7E:D5:5F:F0:CF:FB:80:72:3B:CF:80:2E:92:BD:BB:09:BF
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer:       /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial:       019D2704B92F7E69F86F2EEF9546A818FC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number:          11AC
Signing time:             Wed 25 Mar 2026 22:01:54 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:54 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:54 +0000
Files and hashes:         1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: jx+4ETWvVDwmlru7jKIjGrSA5sE0p6BvFjgSRJXikJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:b9:2f:7e:69:f8:6f:2e:ef:95:46:a8:18:fc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
        Validity
            Not Before: Mar 25 22:01:54 2026 GMT
            Not After : Mar 26 22:01:54 2026 GMT
        Subject: CN=140e837ed55ff0cffb80723bcf802e92bdbb09bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:46:6d:98:08:52:ec:e6:0e:63:fb:58:ce:
                    46:ec:c2:c4:f9:a8:22:7d:37:87:b1:85:28:d5:02:
                    2c:eb:47:ef:b8:37:e8:eb:09:52:15:60:27:fc:d7:
                    1e:44:ba:75:6b:46:85:41:fc:8d:19:1e:02:37:9e:
                    be:49:2c:3e:54:a5:c0:96:5e:c8:ce:b9:67:f3:c9:
                    7c:ad:f7:de:be:0a:63:29:bc:41:3e:06:11:a0:d8:
                    f3:71:fb:b4:1e:83:c5:ce:2d:14:f6:1b:11:ce:c3:
                    86:bd:73:00:7f:bf:11:15:b5:93:bc:e0:1d:10:50:
                    63:45:52:76:76:85:08:bd:2f:11:41:9e:82:18:d1:
                    22:85:62:93:8a:0b:49:c0:7d:dd:7e:35:f5:ac:7d:
                    fc:84:47:cb:bf:ec:7a:0c:62:4c:16:c3:ef:40:08:
                    10:37:7a:49:09:6d:d4:e7:83:7e:91:52:1a:9b:5d:
                    af:81:a8:f0:dc:b5:56:4d:d8:0a:27:ed:36:fe:a1:
                    c0:97:4b:32:99:10:0c:b3:5d:32:93:3e:b0:ad:81:
                    31:8d:04:b5:b7:07:46:67:cd:fc:98:f1:a1:f0:89:
                    c9:84:7e:e8:5d:b1:25:8f:8e:26:f5:16:2d:e5:9f:
                    ca:ed:cf:45:d7:3f:a6:d5:3b:3c:04:20:46:24:04:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:83:7E:D5:5F:F0:CF:FB:80:72:3B:CF:80:2E:92:BD:BB:09:BF
            X509v3 Authority Key Identifier:
                keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:da:87:2b:e9:e6:c8:9e:aa:79:1f:77:40:f6:ba:a7:78:e7:
         49:cf:99:0b:0a:91:26:41:67:36:6f:f0:72:69:b6:9a:7c:df:
         d2:a7:f5:4a:c9:98:fa:37:c0:6e:55:cf:61:79:77:3f:0d:7f:
         de:fb:11:11:9c:57:05:cf:ee:44:66:75:c9:5a:59:98:04:cc:
         58:c6:94:08:70:01:a0:7c:ab:ca:4c:ca:8d:9b:bb:f7:ee:e8:
         87:97:c5:81:ac:57:93:d2:f9:74:75:55:57:98:80:aa:3b:fb:
         c9:61:8b:2a:da:ab:b6:2a:38:3a:02:11:48:5b:42:31:06:a1:
         71:00:64:70:73:ac:93:d5:ec:ad:a9:67:c7:fb:5c:2c:67:fe:
         4d:68:f4:56:60:56:70:32:98:2a:c2:65:5d:93:e9:91:eb:bc:
         25:c9:e1:89:d3:75:dd:5f:aa:37:49:e8:e4:29:96:8d:63:35:
         d5:c7:51:98:1c:98:04:a5:dd:ac:5a:9b:be:64:34:e0:07:d6:
         58:dd:a2:ce:d5:4a:b4:42:af:8b:5b:97:d5:76:36:5f:f6:2f:
         4d:3d:7c:0c:f5:23:b4:cf:48:86:1c:db:3f:6b:20:02:08:e9:
         37:18:c3:ce:41:93:7d:9e:e0:b2:da:4a:1f:5d:3d:98:66:40:
         29:e4:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:51 2026 by rpki-client