Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File:                     1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier:          xBTDvPGPRx7u8IkrlJKDjyOCHtArA5xs8yXs+o0wi04=
Subject key identifier:   99:E2:77:A5:35:D5:D4:5E:00:61:49:D1:3C:93:59:F8:A3:25:50:7A
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer:       /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial:       01A1DF4C53E29DF9E5B1A6E228CE37B0B8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number:          04B1
Signing time:             Sun 15 Nov 2026 13:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:23 +0000
Files and hashes:         1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: MRk3NXd6+wuLs27C8HFvjYZJuenEKypAtdRm2mRga2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:53:e2:9d:f9:e5:b1:a6:e2:28:ce:37:b0:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
        Validity
            Not Before: Nov 15 13:01:23 2026 GMT
            Not After : Nov 16 13:01:23 2026 GMT
        Subject: CN=99e277a535d5d45e006149d13c9359f8a325507a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:83:11:d4:01:d0:41:38:4b:1d:09:45:26:
                    67:5a:b9:0b:fc:cc:4b:3a:33:4e:72:14:42:2c:2a:
                    d4:05:21:9b:f5:a9:47:5a:2f:bc:e7:e9:fa:00:63:
                    37:5b:8a:7a:f5:a0:01:18:0f:17:cf:03:b9:29:34:
                    85:e0:f5:ad:d3:ae:ac:a8:ef:18:5b:5a:ed:dc:c6:
                    08:89:15:1d:13:fc:55:d2:63:4d:7c:aa:2e:ad:50:
                    ef:f7:74:98:30:95:fe:58:1f:ad:02:e2:e1:6b:61:
                    2d:c9:9e:a1:42:6e:74:99:e1:be:2c:21:05:0f:c8:
                    87:84:f0:27:96:d5:a3:ba:0d:11:c4:2c:a3:8e:c4:
                    9a:9f:42:63:44:45:2a:03:1c:9b:df:21:ac:f0:4d:
                    db:db:0e:08:9e:e9:a2:8e:a9:8d:1e:8e:7a:a2:d3:
                    80:7a:b7:b3:3f:6f:ad:93:f5:76:ce:c6:47:a3:1e:
                    fe:a2:8c:c8:5e:ed:b4:8b:cf:a6:d3:81:c4:78:fb:
                    27:e4:a3:67:47:34:8d:dc:00:0e:b6:12:aa:21:4b:
                    0d:86:36:fa:6e:86:f0:54:6b:28:dd:1c:25:6c:12:
                    4c:4b:a0:63:fe:7c:ef:ee:3e:c6:ca:2d:bb:be:4a:
                    cc:47:1b:cd:0f:c2:a2:85:9d:4f:6f:7f:85:fc:65:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E2:77:A5:35:D5:D4:5E:00:61:49:D1:3C:93:59:F8:A3:25:50:7A
            X509v3 Authority Key Identifier:
                keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:38:39:dd:d8:7d:3d:11:5b:e7:8d:6d:50:87:46:76:e7:
         53:4a:f2:2a:79:30:82:31:7b:c5:91:6c:18:4f:f2:56:79:d0:
         db:32:61:09:f7:97:df:70:fc:df:3f:b2:46:7c:73:be:8e:2f:
         08:a3:1e:32:68:c9:95:7b:c9:46:65:de:43:a2:ab:f3:db:6d:
         62:51:3c:dc:a6:f3:df:27:3b:f3:a4:22:72:64:f6:3f:d1:50:
         44:0d:76:13:3d:5b:9e:82:e4:e1:cd:01:d7:08:34:3c:03:a6:
         ac:f3:a8:6e:c8:7d:a8:3a:95:da:98:49:91:cc:32:f5:f8:32:
         34:06:d0:12:b7:f5:1b:6c:73:9e:e0:fa:99:4f:89:a0:c9:8f:
         ad:d5:2b:9f:eb:70:f9:e0:b0:1f:40:7c:42:98:68:2f:dd:cc:
         29:3c:0a:ac:62:55:16:34:13:2a:6e:ba:d7:fd:09:15:15:da:
         2d:b1:27:9e:be:d6:87:02:25:bd:9f:3c:86:fb:84:05:9a:64:
         b4:89:08:d7:23:15:64:8f:4d:06:6d:1e:36:b2:c2:52:bc:9b:
         1a:0a:a9:93:89:82:de:24:36:28:34:4f:89:92:b0:87:a0:dc:
         25:b4:53:28:44:9f:3a:e1:4c:22:f2:d7:17:61:b6:7d:b3:67:
         eb:47:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:39 2026 by rpki-client