Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File:                     PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier:          QDXpVyfK20o5tiQraePkrTF5JX6PAc9lqIZFed0a870=
Subject key identifier:   93:40:76:7E:A4:33:CC:F4:A3:21:40:A8:09:0B:D4:3C:B0:F4:67:46
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer:       /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial:       019D2703DD219355BF8F781BC1B9AA7DDC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 22:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:57 +0000
Files and hashes:         1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: 3ENc6o+R3o9ykzOOI7lyqHVT1KoepNhxNA28SHPNddI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:dd:21:93:55:bf:8f:78:1b:c1:b9:aa:7d:dc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
        Validity
            Not Before: Mar 25 22:00:57 2026 GMT
            Not After : Mar 26 22:00:57 2026 GMT
        Subject: CN=9340767ea433ccf4a32140a8090bd43cb0f46746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:0d:ac:aa:28:11:68:c7:a8:c4:ec:b2:f5:
                    29:be:b2:a4:11:94:dc:41:b7:99:e5:cb:ea:d6:c4:
                    a1:f8:fd:c9:30:fa:d1:35:37:9a:e7:5c:9b:6e:63:
                    00:8c:7a:b1:2a:98:1a:52:27:03:3e:7f:ee:3c:09:
                    e4:0d:89:4f:2c:a5:59:38:9a:fe:43:c0:ef:cd:2e:
                    5b:bb:5b:25:88:34:3e:1c:17:20:b2:1c:e8:53:62:
                    a9:be:1a:2a:2c:47:d5:95:2f:a5:8a:3b:59:83:52:
                    be:9c:f9:86:5b:54:e5:0d:a7:fc:b3:88:92:a1:10:
                    83:97:e0:8d:5d:70:85:a9:ca:fe:c4:8c:88:7c:e8:
                    17:87:e0:89:ec:0b:02:8c:7e:bc:e6:9d:70:61:92:
                    59:2b:f2:03:c9:b2:05:2f:15:9d:32:0c:5c:3c:1a:
                    28:15:6b:03:94:24:c1:29:8f:77:19:44:67:d6:c5:
                    92:18:81:c5:ab:d6:e3:6a:ee:b7:7e:31:be:c1:ac:
                    07:f9:44:95:4c:b7:5d:77:7b:90:b8:30:de:24:38:
                    ed:5b:8b:b1:b6:e1:7e:aa:72:10:49:06:34:6d:66:
                    10:e3:1d:c7:fe:2b:c3:f1:dd:8b:4a:0d:7e:0c:a8:
                    2e:98:53:52:bf:f5:44:29:20:ab:a4:02:97:9e:c6:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:76:7E:A4:33:CC:F4:A3:21:40:A8:09:0B:D4:3C:B0:F4:67:46
            X509v3 Authority Key Identifier:
                keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:87:9a:07:97:45:19:42:88:b5:db:fe:62:f0:2e:c5:e5:
         61:18:61:ef:cf:99:e6:63:cf:a5:c9:fc:47:46:5a:21:c2:19:
         4a:47:9a:b4:5e:e6:1a:40:0a:fd:a3:f5:9f:93:4b:fe:3c:53:
         fa:b6:32:2d:8a:b3:2b:8b:15:95:4c:92:80:02:e2:1f:94:95:
         8c:1b:e4:a5:2e:e9:97:a0:17:33:21:87:2a:56:88:97:5a:cd:
         25:8b:5e:3f:b9:bb:9a:a2:6d:f9:7b:7e:73:f1:93:5c:56:dd:
         11:fc:a8:ba:f9:1a:4b:ad:87:f3:d4:3f:9b:1e:02:ed:6b:9a:
         e8:6a:ec:b5:30:8f:1c:d2:c7:eb:44:3e:8f:ce:bc:d4:7e:23:
         f2:bb:4b:8a:5b:7e:d9:ba:e8:7f:08:00:cc:66:6b:30:f8:b8:
         b5:d0:3c:9f:83:7e:47:95:67:bc:56:2b:f8:2f:3b:89:f5:c1:
         2e:1d:10:b6:f8:fb:29:2e:ae:19:a1:1a:69:3f:dd:9f:86:b9:
         c5:bb:0d:eb:13:41:ab:57:cd:3b:6e:0c:a5:82:3e:aa:70:9b:
         b2:6d:1d:00:78:bf:3e:4f:d7:b6:3d:5f:6a:e2:8b:21:22:88:
         10:a0:2c:7d:9e:97:9e:b7:e3:ea:89:e8:4c:98:8c:bb:5a:74:
         b9:1a:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:38 2026 by rpki-client