Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File:                     AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier:          wp6xHMdOqEsT8LqoyKTx/g1GzVavQQ5zs4Yhf06Khs0=
Subject key identifier:   49:4D:52:CE:85:47:B2:6C:B1:1A:B7:41:34:F0:8B:37:76:3D:31:FA
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer:       /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial:       019D2704060130D6736C0EC18C85D5907D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:08 +0000
Files and hashes:         1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: YlKtZz4/x5z3r0KTfjFOnZIyJaWf+3PLCURgAuulLOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:06:01:30:d6:73:6c:0e:c1:8c:85:d5:90:7d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015921784488add9a05661ff11787ec754e605e5
        Validity
            Not Before: Mar 25 22:01:08 2026 GMT
            Not After : Mar 26 22:01:08 2026 GMT
        Subject: CN=494d52ce8547b26cb11ab74134f08b37763d31fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:51:52:c9:b2:71:ad:54:1b:f6:4b:fe:94:
                    96:f9:ba:00:9b:24:ed:c4:99:81:d5:92:46:71:03:
                    0e:db:21:d9:d6:03:a4:13:61:e6:65:47:fc:c7:d4:
                    eb:44:79:95:70:95:68:e7:b2:42:59:47:d8:cb:9b:
                    62:11:20:d8:48:d0:b5:67:6c:00:85:46:34:01:62:
                    67:60:a2:d8:1a:35:82:04:14:4a:11:7d:69:e6:fe:
                    83:de:16:95:27:5a:8c:8b:e9:61:25:a0:a4:3b:fd:
                    24:92:6b:5f:03:07:6c:20:1a:b1:c6:e0:3e:c6:32:
                    3b:55:e0:de:df:44:9a:6b:99:52:47:e8:19:96:1a:
                    23:fa:55:cd:f4:75:a7:67:52:1c:40:33:e7:7d:0e:
                    9c:7b:1d:35:8a:39:35:4c:89:d1:65:91:44:20:cc:
                    49:ec:15:2b:e0:55:ea:96:4a:f8:fb:6b:9a:90:7a:
                    ab:2b:70:e3:4b:c0:d1:b1:e7:82:06:6b:ea:08:cc:
                    c9:66:cb:11:8b:ca:42:79:fa:cb:23:7b:c7:67:44:
                    89:73:e0:b8:b6:60:33:32:91:37:41:5f:bd:00:27:
                    d0:22:81:b0:71:e5:b8:e1:4e:1e:18:6b:d1:02:0a:
                    c4:a2:6d:9b:26:5b:f2:ff:d7:65:ca:12:36:dd:d6:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:52:CE:85:47:B2:6C:B1:1A:B7:41:34:F0:8B:37:76:3D:31:FA
            X509v3 Authority Key Identifier:
                keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:26:22:52:2b:19:27:6b:0b:ef:81:c3:6f:a3:84:89:2a:
         64:7b:0d:47:53:c2:fe:d0:e2:54:03:ee:43:de:00:0c:c4:b6:
         99:ec:75:32:d4:97:79:0d:2d:78:52:ea:8a:4c:fb:04:d2:16:
         ca:a1:0f:d8:64:08:ab:00:c2:f0:82:fc:6e:04:68:17:01:76:
         52:3b:16:33:56:e4:44:ca:0c:8a:e6:30:f5:5c:7e:7d:56:6f:
         e3:5e:58:28:a9:15:0d:f2:98:fa:b3:7a:96:a0:d4:f3:4f:c1:
         f3:01:62:47:e2:a6:da:85:e4:8e:11:b5:d1:55:3d:9d:db:bf:
         77:2a:5c:f6:5d:bc:5b:df:bc:0c:34:04:72:28:67:5d:07:8a:
         4c:10:87:b6:ad:38:da:97:e5:97:0b:e3:18:e5:92:33:9c:01:
         56:c4:08:f5:6e:67:2a:98:5a:07:24:37:9d:b6:a0:0e:d5:9b:
         18:66:48:eb:c7:f1:64:21:19:0b:fc:10:f7:01:4f:31:cc:7a:
         47:d8:db:62:9b:98:d2:ba:c5:76:34:a4:2b:5b:0f:32:c4:ea:
         47:33:1a:84:03:7a:10:29:05:ca:53:2c:72:13:cd:33:58:02:
         dc:6a:95:0a:c5:61:46:3f:52:63:17:27:33:fd:8d:4b:38:31:
         24:56:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client