Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          4sX+KNzM0oG2BP3I2IifL+Ui8PNN9D3jFmwMlImSQxI=
Subject key identifier:   91:53:69:D5:89:E8:CE:E5:2E:76:F8:D0:13:DF:39:8A:74:44:55:F3
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       019D27727501AB6BB8C22E7DF72564D477C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 00:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:45 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: gvHXhCmq4z7rTW2k0r3/ThBl3zTQBeCrkyid6CEk09A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:75:01:ab:6b:b8:c2:2e:7d:f7:25:64:d4:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Mar 26 00:01:45 2026 GMT
            Not After : Mar 27 00:01:45 2026 GMT
        Subject: CN=915369d589e8cee52e76f8d013df398a744455f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:72:81:cc:ee:38:07:14:51:18:4c:41:66:
                    5e:92:58:f9:97:07:ac:8f:57:bc:31:75:9d:3a:b8:
                    d4:fe:89:30:00:69:cd:e2:6d:43:1b:ac:ec:40:45:
                    d0:27:49:29:74:ea:69:1e:bc:4f:28:a6:21:16:f7:
                    de:cd:26:05:47:c8:ad:80:0a:a6:8e:57:8d:a6:b9:
                    ea:3b:93:3e:33:53:4d:9a:5a:23:c9:e2:60:25:81:
                    cc:05:96:63:39:a5:eb:27:f3:8c:51:d4:e6:6a:8b:
                    36:f0:dd:d6:cb:64:1c:a4:74:76:85:e1:f1:da:05:
                    08:21:d6:8e:11:25:5a:5c:01:1f:f4:ab:0b:2a:bc:
                    b8:07:02:6c:f6:df:01:0e:8d:22:44:50:05:c3:00:
                    ee:9f:70:5e:69:7d:69:10:de:76:b0:b2:c5:f1:db:
                    41:2b:f9:40:ea:9e:a9:8c:12:49:3e:86:66:c6:e7:
                    7e:f8:f7:8d:c6:51:d7:51:59:30:54:f3:e8:5d:a6:
                    ca:05:2f:87:01:9f:a5:81:7f:87:da:7d:39:0b:40:
                    c9:1b:33:79:31:d3:46:4a:d4:65:2b:6f:32:38:ab:
                    3d:c0:af:8d:5d:66:9c:df:e6:a3:c2:a0:e9:91:b5:
                    ec:e5:88:72:90:8f:99:47:46:aa:ce:85:c6:0f:ba:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:53:69:D5:89:E8:CE:E5:2E:76:F8:D0:13:DF:39:8A:74:44:55:F3
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:00:4e:a8:5b:c6:c4:92:ee:f8:30:5b:ec:a7:76:38:2e:
         ba:26:b9:ee:d2:bc:36:11:84:0c:be:a0:83:64:31:83:85:79:
         b6:8c:53:36:3f:c2:bb:36:b4:8a:8f:db:81:4d:d6:19:cd:85:
         ad:98:47:4f:01:e0:c4:ee:83:91:2b:ea:50:59:8d:9a:a1:4b:
         bb:57:59:20:d2:bf:dd:cb:26:d9:09:f2:82:46:20:0e:aa:d6:
         5f:01:cf:a2:e5:65:98:12:b2:7f:cc:01:6a:ba:f3:fa:d8:52:
         ca:94:dc:a5:fc:34:a6:c2:3b:df:49:19:7c:e0:53:bb:b7:2d:
         fc:dd:e3:e4:05:57:18:a1:a6:b7:8e:2d:ae:31:92:35:73:5f:
         99:62:96:e9:78:3c:8d:55:dc:28:0c:a9:4e:9b:bb:3c:bd:e1:
         63:cc:e1:df:45:a0:f6:a4:4a:95:c9:a3:bf:64:d9:3e:be:97:
         c1:97:11:e4:62:e2:51:30:0d:41:98:4f:59:67:b5:5f:d0:45:
         a8:30:43:58:a6:bd:4e:dc:df:cf:bb:72:69:d0:10:4e:b9:92:
         19:dd:c4:f1:96:79:eb:39:46:44:c3:1e:99:95:99:be:07:55:
         c9:d3:80:e2:65:4b:ef:80:b3:56:ff:64:e1:12:4f:ce:73:8f:
         c4:98:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:44 2026 by rpki-client