Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          K9otoqupmVYkdW/FfY7sjJV0sBiCI/j9T9U2O5JwqE4=
Subject key identifier:   59:20:2A:3B:51:19:FA:B6:AE:E3:28:8D:55:CF:C7:83:BC:AF:65:8C
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       019D2703938B66E4552D0D402543314DE5F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          1880
Signing time:             Wed 25 Mar 2026 22:00:38 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:38 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:38 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: bkdkh2nj7jm6s4lqTVTkb1uiyPs6kBPbtJwAbxfuuEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:93:8b:66:e4:55:2d:0d:40:25:43:31:4d:e5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: Mar 25 22:00:38 2026 GMT
            Not After : Mar 26 22:00:38 2026 GMT
        Subject: CN=59202a3b5119fab6aee3288d55cfc783bcaf658c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:e3:8c:04:00:94:6e:54:fc:d6:d1:b3:5e:
                    6a:f2:31:8e:2b:14:02:1f:c9:48:3e:58:d4:f7:72:
                    27:d1:5c:29:2c:57:8e:86:ac:ce:ba:85:b0:10:8f:
                    d9:a5:d6:05:78:43:79:ca:7b:c5:98:81:32:43:71:
                    42:1c:58:41:fd:90:e4:7b:f4:07:4f:ef:21:23:7c:
                    47:95:29:fa:3f:22:02:c5:04:62:ee:5a:7a:31:84:
                    09:64:20:82:c0:4f:de:6d:d1:e1:f9:57:3a:4a:a4:
                    60:eb:48:2c:dc:ed:ed:ee:2f:32:02:08:52:e8:4b:
                    9f:86:84:7a:02:e7:4e:81:cd:b5:35:ca:95:dd:42:
                    50:a3:4b:68:7c:d2:78:a0:2d:60:6f:49:a2:17:0d:
                    70:f2:97:9d:42:81:9c:4c:4b:3e:b9:44:49:33:02:
                    b8:f4:84:6d:d8:5c:80:80:69:4c:a8:c2:e4:5a:ee:
                    2e:bb:69:02:5d:7b:36:9e:00:1b:f1:50:f0:f6:f3:
                    14:c5:b0:26:0a:d6:3f:5b:2f:cf:7e:29:8c:e1:da:
                    67:66:47:0d:12:3e:77:a9:27:0c:f6:a2:39:ac:4e:
                    31:18:b4:cd:52:14:59:ee:7d:f4:12:1d:ee:5a:bc:
                    17:61:36:42:cf:e9:65:60:c5:9f:6f:62:dd:94:11:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:2A:3B:51:19:FA:B6:AE:E3:28:8D:55:CF:C7:83:BC:AF:65:8C
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:15:a8:b5:3f:6d:61:26:33:01:ae:d7:e4:cf:21:2b:ad:
         b1:11:d8:30:e6:2f:b4:17:cc:dd:81:24:34:4e:e9:db:17:c4:
         08:ef:dd:ab:13:19:93:f9:c2:e2:b8:cd:f1:d5:0c:2f:25:23:
         45:b4:6e:5d:48:89:f2:71:0d:a2:c5:cb:d6:71:f2:ff:6a:97:
         b9:44:88:f7:e6:d6:e9:69:dc:cb:ce:76:21:70:94:8f:1c:44:
         7b:e2:e2:a3:02:7c:a3:95:de:6f:b7:9b:b3:a4:cf:39:8c:14:
         b1:5a:fb:fe:35:17:0a:82:fd:71:b6:ca:dd:08:f4:fc:c3:2a:
         93:b5:ae:e2:30:0d:c3:6b:c7:fa:f2:67:07:cd:f4:f5:bf:5f:
         c1:69:c8:71:84:f1:7c:eb:5f:19:1c:33:5e:3e:66:7d:ba:fc:
         8c:5c:7b:bc:b7:d4:28:7f:a0:97:16:91:ea:ed:d9:86:1b:ff:
         64:c4:d3:75:44:2f:04:a1:c2:7f:8d:43:ea:71:57:b9:7b:92:
         d8:46:45:1e:2d:ac:40:6a:27:3f:ba:41:53:02:88:55:d9:97:
         3c:e9:d2:b8:69:99:5a:5e:b2:bf:5a:e1:20:f0:20:c6:e1:a7:
         de:62:e9:13:91:3e:08:8b:db:13:d9:e9:31:0f:6a:74:24:6d:
         19:fd:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:20 2026 by rpki-client