Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          axmiC7GbKG6E7CYnbTsMI+ymibPKZ6mnv/XvBxs3Pfc=
Subject key identifier:   81:23:24:0B:11:68:13:C0:B4:D7:BD:03:36:18:25:FE:68:0D:80:9A
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       019CAE6C7798CAC2168C431D435479874386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0905
Signing time:             Mon 02 Mar 2026 12:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:09 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 6Q4pzswlMx4PBtBWLC0YhNbk1ggddybH11nK7IzNWrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:77:98:ca:c2:16:8c:43:1d:43:54:79:87:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Mar  2 12:01:09 2026 GMT
            Not After : Mar  3 12:01:09 2026 GMT
        Subject: CN=8123240b116813c0b4d7bd03361825fe680d809a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:86:8e:59:fe:d5:d8:04:74:b1:80:dc:7b:
                    29:5f:44:f3:8b:a4:c2:98:10:cb:2d:f6:fb:d7:ec:
                    e7:99:5b:76:b4:a0:06:28:32:00:ed:96:73:f5:e6:
                    e0:4c:60:a9:9e:c1:a0:0f:dd:04:57:cf:8a:de:a2:
                    ac:28:27:b3:a5:cb:ab:b8:65:87:65:91:a2:75:51:
                    9f:62:ef:c9:77:ac:1b:33:75:2b:ec:7a:43:64:2b:
                    d3:1c:ea:2e:52:fb:62:f5:5a:3a:aa:b8:b5:fd:35:
                    f0:e4:84:cd:42:f1:63:85:d5:15:06:03:3e:cb:c6:
                    02:e0:f3:f8:b3:f3:37:55:dc:21:73:c6:e6:96:92:
                    ae:56:7e:8a:43:ca:e8:79:31:2d:09:07:9f:f4:44:
                    2b:07:63:41:51:07:89:0f:5f:9d:43:bd:3d:64:6c:
                    13:1a:f5:d6:ed:61:58:f2:8d:c4:22:15:b8:47:85:
                    26:a9:21:e1:d6:ea:72:f0:71:be:ce:2a:28:25:cb:
                    09:6e:0b:93:87:8f:54:88:a9:8b:62:ad:4b:22:d0:
                    40:f3:5b:1d:3a:a7:49:f6:f5:a6:ff:08:b6:cc:93:
                    49:f6:1b:73:d9:11:7c:30:5a:7f:40:22:5d:a3:f3:
                    e4:43:28:b3:73:13:d1:74:ac:b6:fb:6a:0e:31:be:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:24:0B:11:68:13:C0:B4:D7:BD:03:36:18:25:FE:68:0D:80:9A
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:0f:7d:96:61:09:80:c7:a4:5e:d2:bb:92:91:53:97:36:
         29:6f:95:50:bb:68:d7:53:b6:7d:25:42:a0:4c:d7:0d:60:28:
         fa:cf:93:f0:e2:cb:b3:ab:c6:49:73:25:cc:37:9c:fa:e1:94:
         56:ed:7c:e9:76:b4:bf:a4:b6:cf:da:d5:3f:28:41:81:ed:62:
         e8:2b:8c:76:4a:da:44:c4:98:c0:6f:b4:11:d2:bf:c8:50:06:
         61:6a:7f:f8:52:2e:c6:40:97:b8:ce:c5:6b:7f:5e:64:08:5b:
         46:ba:f6:b3:25:20:6f:88:90:7a:3e:2f:2c:b2:46:50:76:21:
         d4:fb:6d:78:2f:73:c5:ef:8e:21:33:a8:0e:62:ab:16:63:df:
         7b:8f:75:a7:a0:a6:cf:b2:65:1d:dc:94:0e:ab:5f:70:ab:d0:
         3f:d4:97:b8:77:3e:83:3f:89:f5:c7:63:84:dd:ad:86:4d:aa:
         11:b3:20:03:d1:02:f2:ff:95:01:27:4f:c3:34:ca:ff:8e:9f:
         5c:8d:d2:34:a0:d2:e0:be:90:e6:53:e8:0f:02:0a:0c:5b:e8:
         16:8c:67:00:d7:1b:74:11:c9:17:ba:82:43:44:46:f9:e0:c8:
         d7:f9:38:37:55:db:75:e3:6d:81:d7:ef:4a:79:c4:37:f8:e3:
         fc:84:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:05 2026 by rpki-client