Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          pzwar+p7A0EIMr8+u5RSU0J3DrLHuwxED8Q0cIRB1PY=
Subject key identifier:   A9:11:20:5E:4F:83:00:38:27:72:E1:D8:D4:02:9D:17:1B:27:E6:B4
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       019CAA215ABD6B068D58A1EF700564E5891B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          1840
Signing time:             Sun 01 Mar 2026 16:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:38 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: V6EcQ/OYPfIsmtn539uq7sS1R4j7wuW78ilP7FC+2+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:5a:bd:6b:06:8d:58:a1:ef:70:05:64:e5:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Mar  1 16:00:38 2026 GMT
            Not After : Mar  2 16:00:38 2026 GMT
        Subject: CN=a911205e4f8300382772e1d8d4029d171b27e6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:58:8d:14:f6:37:f9:f4:58:28:15:25:84:
                    6c:37:20:86:3b:16:6e:09:e4:f9:e3:e0:a8:38:3c:
                    ae:68:bf:45:3a:51:6c:10:6a:c0:45:62:4e:8a:54:
                    29:97:7b:f7:98:fc:b6:eb:de:b6:d3:25:93:a2:45:
                    3f:9d:3e:f8:5a:4e:e3:35:44:0f:a7:ef:6d:90:15:
                    01:f3:1d:4a:e4:25:4c:07:28:49:33:74:d4:fb:7c:
                    63:85:42:52:93:4d:cd:e0:25:f2:6e:3c:7c:0d:7e:
                    b8:8a:07:1a:05:24:63:56:ab:51:03:44:e3:67:8f:
                    05:ca:8a:04:92:f7:8e:0c:a5:65:ce:a7:83:44:8d:
                    44:6c:db:65:c5:4f:f7:02:2e:bc:ee:40:8d:f5:40:
                    a0:ce:46:7c:6a:cb:99:2e:3b:ab:5b:c4:51:52:a2:
                    5b:44:0a:36:68:aa:62:95:5c:e3:ef:52:b0:55:47:
                    73:bd:c5:e2:f0:e6:d8:78:c2:39:26:be:bf:34:fb:
                    8b:54:a6:63:f8:62:e8:75:4f:43:16:dc:fd:f5:d1:
                    e1:84:97:06:c2:45:79:16:09:39:69:c8:03:58:41:
                    a4:86:32:d5:3d:4b:63:24:b6:14:e7:7c:11:9b:41:
                    b5:7b:a9:a4:bc:3b:c1:8c:8f:d8:dd:2e:9b:58:85:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:20:5E:4F:83:00:38:27:72:E1:D8:D4:02:9D:17:1B:27:E6:B4
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:ee:85:dd:9e:48:77:5d:a7:36:e0:5b:0d:b1:23:0e:ea:
         52:3c:72:20:e8:92:f3:de:b2:75:ef:80:92:f9:31:a2:83:f5:
         27:38:0a:87:5f:27:44:ef:03:bf:1d:25:bb:b2:f1:a9:69:5c:
         0e:36:c6:c5:9e:4f:e9:87:15:14:09:1e:4e:c8:15:a9:8a:a5:
         48:6c:f2:f2:ac:3d:37:b5:0c:a2:fc:28:8a:6c:61:b9:93:c5:
         7f:44:0d:7a:2e:d5:4f:83:ae:08:5d:cf:37:21:52:3a:aa:93:
         84:4e:be:c7:19:a9:b1:40:64:62:4c:06:57:96:76:74:36:2f:
         3d:81:44:7f:2e:eb:6a:a6:fb:47:f8:ae:04:96:79:89:9c:93:
         b0:08:23:0d:e9:e4:2a:98:7b:ec:ad:92:6e:73:8e:0e:bc:1f:
         f7:0f:ae:35:d4:9e:b9:94:05:35:6c:43:fa:ef:5e:d1:b6:aa:
         13:0f:a6:3a:a9:47:a8:91:cb:ec:4e:d6:b4:c5:0f:ad:67:1b:
         d7:9d:0f:92:83:cb:31:8c:b2:5f:c7:98:9a:31:1e:e7:e3:27:
         4a:a1:ca:d3:04:1d:28:b4:5d:75:7b:7b:db:36:9d:70:b0:ed:
         ef:3a:1a:2c:12:ef:09:fc:0c:ec:6c:df:c3:07:09:b0:47:57:
         d0:d9:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:51 2026 by rpki-client