Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          qHOHdlqOLdWt5oelnfW6kSVdzIKdEOa/UEdpzT+ulXQ=
Subject key identifier:   66:A1:29:E9:56:1C:4F:19:85:B2:CC:80:90:A4:03:C8:68:55:A0:D9
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       019D2704C4B23706C8B52695632AFAF45AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:57 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: 9Cf8WdqSK2EkyUR0dM5jvs3syWfkvWvSuA4p1EXVwM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c4:b2:37:06:c8:b5:26:95:63:2a:fa:f4:5a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Mar 25 22:01:57 2026 GMT
            Not After : Mar 26 22:01:57 2026 GMT
        Subject: CN=66a129e9561c4f1985b2cc8090a403c86855a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:ad:e6:9e:1b:7f:3b:b5:93:80:cf:a9:a6:
                    5a:41:d6:8d:5c:e1:a5:c6:46:f1:3e:c1:0c:88:21:
                    30:8d:27:a9:14:d7:85:45:63:41:96:73:70:34:89:
                    19:3c:cc:33:52:87:5a:81:4e:00:00:f8:b9:ff:4f:
                    1a:5f:ba:89:dc:5f:0a:3f:c6:8f:99:f3:05:9d:cc:
                    ca:0e:32:94:31:73:ff:4d:36:5b:1c:06:61:0f:a1:
                    17:98:a0:15:0e:f2:71:a3:01:25:f0:1f:a4:57:c1:
                    56:7e:b1:dc:1b:7f:1f:19:da:e0:d2:96:3d:27:34:
                    24:7f:65:25:a6:00:e5:cc:2f:0d:2e:28:9b:8f:8a:
                    f3:c6:b4:cc:c6:96:f3:73:a4:7d:1b:dc:3e:d2:44:
                    fa:e0:47:74:a1:e5:1d:5d:db:70:e0:d6:07:0d:4f:
                    ac:90:1e:b8:ba:26:23:4d:9f:a4:73:d3:d2:58:37:
                    9c:b3:f9:21:42:a6:4d:4c:bd:29:33:de:df:5a:ae:
                    12:b1:16:0a:4e:8a:e2:d0:c7:e8:eb:00:1e:9b:a1:
                    55:09:75:65:61:31:d2:16:db:c0:16:61:7d:0e:c4:
                    67:f7:bb:51:d3:f7:78:f4:4b:24:52:6f:c8:5c:6a:
                    55:bc:12:10:63:d0:a7:c1:f2:c5:6a:df:aa:43:96:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A1:29:E9:56:1C:4F:19:85:B2:CC:80:90:A4:03:C8:68:55:A0:D9
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:c6:ef:0a:31:21:ef:28:58:95:cb:15:be:b0:05:35:25:
         5e:09:b8:79:4b:2a:60:76:c4:c8:bc:e2:69:e6:51:54:f4:1f:
         04:ed:3e:f6:2d:4c:e7:b8:5f:9e:3d:12:50:31:52:ed:07:f5:
         c2:10:b9:f1:d2:34:fb:44:c3:3c:f8:6c:e7:e5:a8:16:e3:f6:
         97:e4:80:ab:9f:43:28:a2:39:12:f8:b9:4c:23:b5:5d:97:e9:
         c6:4f:3c:ed:7e:f1:2f:6a:63:1c:61:61:73:bf:8f:b9:10:99:
         64:42:5f:d9:80:70:b0:50:1a:7f:ee:47:e0:a4:80:ed:af:4a:
         63:c0:1f:a4:65:a6:7d:2b:f1:01:fa:dd:99:d3:b6:49:71:1b:
         c8:68:75:b3:a2:bc:41:53:ed:9d:d6:02:8f:0e:12:06:15:2c:
         48:92:fc:17:ce:89:88:d3:a0:54:aa:6f:e1:20:5d:71:a1:43:
         95:70:a3:40:aa:ca:9f:37:d4:3b:d4:0c:ee:3c:28:77:70:a1:
         02:54:d5:1b:19:43:87:bf:7d:29:ad:a7:99:62:0b:bd:d0:e7:
         71:82:e4:95:b7:6c:27:2b:06:1e:f7:59:e4:81:4a:88:ed:0c:
         4b:06:e9:9e:f4:89:98:a0:56:a1:64:10:00:2d:5e:e5:a7:9d:
         8b:2a:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:18 2026 by rpki-client