Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          LBfDbuwi+im0VnrC0tPne8F1CberVksor5ey8fk8heE=
Subject key identifier:   54:C5:4E:1E:14:66:A3:F2:AF:85:45:D2:47:90:1A:00:36:EE:BB:CA
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019CAB6ACA80F83AA9BD88270CB24ECA4119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0F2B
Signing time:             Sun 01 Mar 2026 22:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:28 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: MW983gZKF7yg99AzXJYmpDKXEcYIFcXkue62vLknZgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:ca:80:f8:3a:a9:bd:88:27:0c:b2:4e:ca:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Mar  1 22:00:28 2026 GMT
            Not After : Mar  2 22:00:28 2026 GMT
        Subject: CN=54c54e1e1466a3f2af8545d247901a0036eebbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:e1:f9:d2:8d:80:75:f3:85:3c:e8:85:9d:
                    42:11:c6:13:64:41:c8:dc:22:eb:28:ba:0b:45:13:
                    15:a0:27:cf:45:5f:07:72:0c:70:cc:e7:ed:a4:5e:
                    0c:c9:1c:17:d8:b0:f8:25:f7:3f:5c:f3:60:4c:48:
                    e5:d2:ad:13:4e:41:d9:07:61:e3:5f:dc:30:df:3d:
                    47:65:88:fa:86:a0:96:44:ec:92:99:3c:f3:5b:ef:
                    9a:5e:a2:96:c0:93:0c:8d:ba:93:ce:63:ba:a7:75:
                    31:97:e4:18:5f:7b:a0:88:cd:fe:2d:c3:01:78:ae:
                    12:38:44:73:e7:66:e0:bb:9e:42:3e:2a:f0:b9:c6:
                    cb:cb:51:cb:41:b5:e0:cb:e3:30:0c:fe:21:9b:11:
                    64:6d:3a:5b:22:e7:5f:2a:f2:e7:ce:c0:11:24:f4:
                    a3:1d:16:ab:67:0e:fc:54:14:e2:f8:b6:c2:5e:b0:
                    23:21:06:80:3a:6f:05:3a:ca:9e:37:06:29:9e:23:
                    e1:a1:10:70:9e:3a:bf:c7:f1:d2:d4:16:0e:9f:1b:
                    fe:73:46:a8:96:fa:68:e6:8d:4a:65:2b:bb:52:b2:
                    07:83:78:64:72:fa:a0:b6:2b:a9:3a:fc:d6:0d:b8:
                    dd:aa:cd:95:c4:3e:60:9c:67:fa:de:6c:16:5b:f4:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:4E:1E:14:66:A3:F2:AF:85:45:D2:47:90:1A:00:36:EE:BB:CA
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:66:71:70:6b:ab:dc:0f:aa:cf:e2:28:69:fa:a6:42:4d:2d:
         33:bb:8a:ab:75:d2:5a:eb:e3:95:9c:10:ab:8d:21:c4:ad:41:
         55:e3:8d:f1:e4:82:f1:19:7f:45:ca:cb:f7:e8:fa:fd:4b:d3:
         36:4f:ec:27:00:33:0a:21:74:22:ef:47:93:09:c9:eb:63:bf:
         fc:60:7e:cf:40:28:0f:0e:5a:67:e9:68:d8:a5:5d:f8:f9:b3:
         26:db:0d:af:51:c4:cc:f0:fa:bf:d3:37:86:76:e0:63:79:b4:
         71:8c:1b:a5:d9:75:6e:d5:d9:39:84:9b:2a:b2:1a:4b:24:4f:
         e7:bd:5d:0f:a4:94:74:fe:2b:8b:eb:cd:77:ca:9a:c2:9a:eb:
         e7:7f:09:93:8f:ce:97:e6:87:a8:38:09:c6:2f:8a:7e:7d:93:
         5e:50:c2:02:0e:de:c0:c1:55:6d:d4:15:6c:4d:1a:99:bc:69:
         7e:9f:18:4c:25:77:34:f9:86:06:d8:07:09:df:78:42:7a:de:
         4a:01:c6:76:d9:ae:18:7f:16:33:7c:2f:c7:0b:f5:3d:94:cb:
         68:7f:0a:28:d4:b2:6a:9a:f9:83:e9:37:0f:05:02:55:c5:a4:
         a3:69:ac:e3:6c:53:da:46:9f:78:ac:82:f9:0f:fc:c8:e5:03:
         09:15:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:46 2026 by rpki-client