Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          6/FfpsPxJofE7UXiVTzy1kfFiKcywFHiKeUy0W5sSMc=
Subject key identifier:   EC:B0:77:4A:A5:4D:DD:A4:CD:8A:AD:51:44:CF:02:39:B8:2D:55:F7
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       019D27049E47215AB2A8AB43AF7894FFB896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          0924
Signing time:             Wed 25 Mar 2026 22:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:47 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: FiJUU08KJzxbi3TgB+ElGSrrSZIvghVxrRoNDzX+4vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9e:47:21:5a:b2:a8:ab:43:af:78:94:ff:b8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Mar 25 22:01:47 2026 GMT
            Not After : Mar 26 22:01:47 2026 GMT
        Subject: CN=ecb0774aa54ddda4cd8aad5144cf0239b82d55f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:2d:92:47:2a:03:49:99:7d:6e:a2:39:f1:
                    8b:23:0c:ee:c1:43:b8:ff:86:54:f5:61:a1:05:f8:
                    73:91:22:6d:56:42:aa:ec:16:b2:70:40:0a:6b:44:
                    3e:1c:1d:45:5e:79:31:ee:e2:ed:60:6e:8e:44:9f:
                    ac:6a:0f:2f:c7:11:88:1f:cd:15:6e:fc:01:b8:c4:
                    f7:3d:d5:f2:18:77:ff:89:29:bd:95:37:6f:84:01:
                    20:a3:70:51:fa:05:80:6a:3c:81:27:a4:17:b3:40:
                    72:3b:c8:63:ea:69:cc:c8:35:3f:53:8a:42:a6:b7:
                    02:e2:9d:9e:f6:e2:eb:40:64:7b:9f:10:85:de:c5:
                    97:b5:9c:20:e6:18:5d:79:6b:bb:03:7d:04:84:44:
                    38:1b:75:a4:24:e1:0b:c5:08:82:38:ec:61:fb:4c:
                    59:b9:89:f1:dc:aa:56:ea:28:5f:b7:2a:73:47:aa:
                    a8:93:dc:22:f5:f9:6b:99:14:f0:5a:a4:d2:3c:f6:
                    1c:9f:c8:6f:47:3c:70:b5:64:9e:68:51:80:8c:b2:
                    38:41:31:ab:f7:26:f9:44:5e:ad:2b:c3:c5:bd:69:
                    b5:68:20:98:64:4b:29:cc:79:c3:8f:37:cf:a0:f3:
                    21:cc:cf:1c:99:67:70:ed:08:e8:c0:3c:63:4a:a8:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:77:4A:A5:4D:DD:A4:CD:8A:AD:51:44:CF:02:39:B8:2D:55:F7
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:55:44:d2:9b:eb:46:94:71:5e:68:ee:86:84:d3:cd:ea:0b:
         24:58:aa:77:22:4a:86:82:8a:cc:94:07:7e:45:55:9b:8b:7d:
         ac:f4:0b:e5:84:6c:2a:a9:00:b4:bc:bf:64:45:96:ac:02:bf:
         df:0d:25:9c:5f:8e:fc:c7:36:38:d1:56:71:12:a5:f7:5e:1e:
         f9:ab:9e:3a:75:af:54:79:b2:02:8b:e9:49:23:d9:93:1b:d3:
         22:75:be:9f:58:db:7c:61:79:65:c3:16:92:31:85:c3:4e:b3:
         d3:d5:59:d7:58:70:dd:ec:1b:b0:dd:09:f0:84:3e:64:48:f4:
         67:91:e3:ac:1f:d6:7e:53:ee:7c:32:df:d4:05:d5:ca:f1:91:
         5c:24:51:ee:82:55:41:19:b8:41:fb:e2:72:a7:e6:ac:03:dd:
         e8:b3:dc:74:44:07:eb:1a:0c:15:e6:ef:f8:55:0b:8d:74:cf:
         f0:1f:d6:0a:5c:f4:b6:7f:8d:71:22:8c:6c:ee:d0:12:b5:75:
         82:3b:6d:2f:53:bc:8a:cd:a4:18:4b:09:7b:86:cc:e1:37:55:
         05:b7:2c:b8:9b:a4:88:75:27:ca:fb:ca:ad:05:2e:26:b1:77:
         09:94:58:ae:d9:c6:7b:4c:ac:0f:8c:d3:c7:20:fb:9d:a6:d9:
         1b:23:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:47 2026 by rpki-client