Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File:                     avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier:          Rh8RL+RqVXvf1CtWk0+TNkmwCtLzYxYhpeIp1DBDl7M=
Subject key identifier:   5C:5E:ED:5E:3E:F4:FD:5A:C3:03:F2:28:D5:B7:F6:2B:E5:9D:9A:1D
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer:       /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial:       019D27A8FC1491471DFAECE0B0FC7ED7FEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number:          0F66
Signing time:             Thu 26 Mar 2026 01:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:19 +0000
Files and hashes:         1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: 52thHrqfa6QGipI+4zYlVvpV5SqmcXiaxwaGALsUI+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:fc:14:91:47:1d:fa:ec:e0:b0:fc:7e:d7:fe:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
        Validity
            Not Before: Mar 26 01:01:19 2026 GMT
            Not After : Mar 27 01:01:19 2026 GMT
        Subject: CN=5c5eed5e3ef4fd5ac303f228d5b7f62be59d9a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:34:b9:3b:c7:72:39:a0:73:a5:00:41:57:
                    a9:16:ee:83:4e:9f:be:b6:11:31:36:40:d5:a6:16:
                    48:6d:ce:32:42:5a:d2:a9:6b:90:18:6e:19:02:df:
                    f1:3b:83:01:84:82:cf:4f:a2:a7:ad:1a:81:0f:63:
                    ff:68:e1:25:71:c1:0e:dd:fe:cc:4f:93:11:46:d3:
                    88:39:48:68:ee:1a:0c:d5:5a:4e:6e:71:ab:04:e7:
                    d8:c3:15:06:24:6a:35:67:ad:3d:15:fd:55:49:d8:
                    d7:b7:fd:0f:ce:a1:c8:c2:7c:36:26:0b:26:5c:cf:
                    9b:7c:1b:cc:da:7f:cf:f9:c9:9e:bd:15:11:8c:13:
                    1b:f9:6e:15:e8:5a:93:e9:b9:6f:8a:ad:e1:e7:24:
                    28:90:7b:cc:78:d8:1d:d8:eb:e2:9f:89:a4:9a:4c:
                    27:9f:1d:d1:21:6f:10:3f:7f:37:80:7a:da:65:1c:
                    d9:50:fa:7c:c3:2a:25:08:d8:fa:a8:c3:22:cd:b9:
                    2b:19:bb:11:c7:09:b5:3b:6c:7d:59:9f:7c:fc:83:
                    14:e3:92:0e:f7:b4:19:72:b5:7d:9f:47:5f:34:6b:
                    e1:89:d6:40:cf:83:5a:a8:f3:7d:75:4b:ae:74:7f:
                    d5:3b:e3:06:c9:c3:2f:b2:5e:24:15:1c:63:9a:73:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5E:ED:5E:3E:F4:FD:5A:C3:03:F2:28:D5:B7:F6:2B:E5:9D:9A:1D
            X509v3 Authority Key Identifier:
                keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:0e:db:70:0e:cb:41:ee:1e:8c:ef:98:6a:aa:a7:29:36:
         66:df:15:e5:9c:7f:be:0b:59:60:92:0e:ac:c4:b2:61:45:4a:
         07:c1:76:3b:71:90:dc:23:35:0c:07:b8:d2:97:2d:43:f1:46:
         b5:99:4d:ee:aa:a9:3e:2d:d9:61:f9:37:32:91:65:9e:6c:2b:
         7c:40:6a:a5:bf:79:f4:0e:8a:03:f5:97:79:f8:b9:62:55:12:
         98:a3:d9:29:c7:61:d1:0d:77:8a:1f:61:83:61:f2:93:18:20:
         ff:2c:1b:2f:19:5d:e5:4b:00:8d:4f:21:03:70:9c:fd:84:d8:
         07:14:64:7e:ab:60:9d:79:4f:d8:49:eb:52:36:f8:7f:d6:ab:
         78:87:c3:fa:22:f9:ef:a9:f8:2b:81:50:c0:b6:7c:d2:ab:e9:
         e5:c4:aa:17:3c:6a:bc:99:d4:f1:29:2e:f5:4e:12:c6:3b:6d:
         3b:27:7d:0d:e0:9c:2e:ce:0e:a4:c1:31:85:4e:43:a6:32:98:
         f8:d0:39:2c:0e:3d:02:d4:b9:d6:40:dd:6b:71:0d:34:b2:33:
         60:b0:f0:b4:6a:a8:7f:b4:de:70:3b:75:d5:94:c0:cd:71:cf:
         88:99:3e:74:e3:93:05:38:73:5b:1a:77:ff:b6:0b:69:ca:e6:
         3a:10:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:26 2026 by rpki-client