Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier:          jHu2VzVjqO7WVSYW0pMxtmQSr56LHAbdx4gVtaMybHI=
Subject key identifier:   9D:8B:ED:48:C1:40:C4:CC:24:3E:92:52:A0:DE:6E:8C:0C:3C:8D:8C
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer:       /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial:       019CABD9E62F298026D1E990AE3055E6ED34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number:          07C3
Signing time:             Mon 02 Mar 2026 00:01:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:50 +0000
Files and hashes:         1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: bver29/YnbaxsrdCiUR+YX8wIxcSQKukJ7cx1XDmPDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:e6:2f:29:80:26:d1:e9:90:ae:30:55:e6:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Validity
            Not Before: Mar  2 00:01:50 2026 GMT
            Not After : Mar  3 00:01:50 2026 GMT
        Subject: CN=9d8bed48c140c4cc243e9252a0de6e8c0c3c8d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:07:b9:14:d6:c7:f5:06:a8:0b:d7:ab:11:
                    a5:0b:03:9f:46:06:31:c9:74:77:0d:61:66:54:07:
                    ce:75:0a:b6:d3:bf:c6:00:f1:cd:6e:2d:af:0b:41:
                    86:9a:9d:26:7c:0f:b6:f2:8d:89:f9:07:83:93:b1:
                    3d:22:4d:ab:0b:4d:6b:a1:79:db:e8:73:8a:d9:db:
                    5a:e6:de:17:7d:82:98:e5:e3:0b:aa:1a:c3:7c:c5:
                    77:17:7f:d1:e4:8b:c3:d8:27:d6:85:57:b2:77:b6:
                    6c:87:63:85:7d:99:89:d3:63:2d:bd:58:8a:42:be:
                    91:35:a1:d4:f1:0e:5a:fe:13:dd:ea:0e:d7:5d:57:
                    19:77:03:da:33:e7:94:de:29:db:5c:d7:38:41:54:
                    d4:48:2e:fa:46:2a:ff:d7:ff:69:f5:cf:92:4a:f3:
                    75:c6:61:06:26:c6:79:27:13:8a:f0:44:64:ca:f9:
                    75:95:51:61:14:1c:8d:9c:de:35:44:73:69:d8:33:
                    ab:77:50:33:11:27:99:27:f4:fb:c4:39:5c:58:4e:
                    3a:63:ae:d4:68:b6:9d:d4:9e:80:79:c6:9d:79:53:
                    8f:2d:eb:bc:c1:39:f4:33:a5:2d:3f:30:f5:49:fd:
                    86:f1:f7:67:55:15:d1:49:70:76:61:24:d9:bf:98:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:ED:48:C1:40:C4:CC:24:3E:92:52:A0:DE:6E:8C:0C:3C:8D:8C
            X509v3 Authority Key Identifier:
                keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:b9:00:de:b6:eb:bd:22:b8:ec:9b:eb:31:10:2f:2e:b0:
         4f:d3:15:9e:28:03:d5:a9:c9:e8:7b:0b:72:61:b8:69:45:f6:
         7d:d4:41:bf:f5:19:91:c4:e4:c6:63:b3:6f:03:c5:d2:bd:27:
         c2:a1:3b:10:72:e0:4d:22:f3:87:aa:03:b5:30:6a:f5:b3:ba:
         53:f2:6a:5e:d8:77:7d:72:06:73:3d:cc:f7:42:70:9e:81:e8:
         55:ed:c2:31:57:bd:53:13:76:6e:59:2d:eb:5a:7e:4d:ec:98:
         7b:75:61:08:6e:0d:82:95:d8:40:67:45:9d:9f:a4:6b:27:11:
         ef:ef:71:bc:51:c1:60:c6:c3:70:0d:21:82:df:7b:3d:f5:ac:
         64:aa:7c:f8:1b:c7:1d:68:11:9c:d8:08:26:e7:11:ef:be:4d:
         29:87:3c:03:0b:34:68:60:cf:33:63:6c:b2:66:2e:e1:89:b2:
         a4:a2:5c:24:37:a0:2d:fd:2d:c6:78:63:b2:c0:5e:78:62:3b:
         70:3f:4a:f1:b5:6e:3a:58:b8:68:ed:10:d8:e8:9e:1f:ac:61:
         bf:2c:09:e7:46:bb:84:1d:6e:b2:52:1c:4d:09:3f:6c:e1:d2:
         88:28:59:d4:69:77:28:d7:50:46:94:2b:b6:f4:3f:3e:95:91:
         04:a6:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:06 2026 by rpki-client