Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          aBA+WiWlHeB9k2/akehNwkYI2pWQpILrfk4XEjhjWbQ=
Subject key identifier:   87:21:15:00:49:5F:A4:B8:1C:6B:44:4F:C9:37:36:57:DE:58:02:06
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       019CAD5A076443C26FBEC3729D2360AE1D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0E33
Signing time:             Mon 02 Mar 2026 07:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:24 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: BIK9Xbhp67SEFZ7+4cZsFtvjz0zK+F6e3H0nJ9QA+VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:07:64:43:c2:6f:be:c3:72:9d:23:60:ae:1d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Mar  2 07:01:24 2026 GMT
            Not After : Mar  3 07:01:24 2026 GMT
        Subject: CN=87211500495fa4b81c6b444fc9373657de580206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:4d:95:ef:a6:0e:34:4f:ac:b7:78:23:06:
                    92:0b:dc:52:e3:f2:4e:24:3e:d4:24:2b:dc:f2:b0:
                    bb:2b:9f:25:93:d8:35:4a:2b:08:65:aa:9b:68:33:
                    a5:c6:68:bb:7d:97:40:e9:1f:46:74:67:8d:c1:0d:
                    e7:f2:c2:b7:12:35:0a:ea:a5:7b:bb:22:93:40:aa:
                    15:28:ad:89:d2:e2:e5:0c:53:14:69:07:d0:46:f1:
                    e8:b7:ef:8c:97:cf:c7:0d:59:d0:a2:03:e4:40:f7:
                    18:87:b8:b5:bb:56:24:d9:90:36:df:f9:48:62:48:
                    84:da:bb:2d:82:36:30:f7:87:73:8c:45:7a:c0:4e:
                    23:58:0f:bd:d6:5a:bb:e3:26:91:5b:09:97:3e:cd:
                    1e:45:35:e1:8f:63:00:b2:74:ea:1b:a5:05:4e:f8:
                    7b:bf:5f:25:78:97:14:3b:c5:94:9c:d2:6e:dc:3c:
                    a0:44:e4:14:25:49:75:c5:02:28:0c:c9:a9:cb:46:
                    6c:9e:68:97:5a:1f:43:e2:ee:80:c4:d7:97:a7:72:
                    22:cd:7b:ac:d2:f9:24:d7:d8:0c:56:a0:3a:5f:fd:
                    66:60:d6:4a:2f:79:2a:c6:0e:40:9a:82:e2:fe:58:
                    ea:2a:e5:5d:7c:8f:26:06:5e:85:7a:0f:00:b4:4e:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:21:15:00:49:5F:A4:B8:1C:6B:44:4F:C9:37:36:57:DE:58:02:06
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:db:4c:2e:85:cb:9e:70:ce:6e:96:7b:95:bc:da:97:8c:80:
         79:67:bf:33:01:84:b0:8a:de:84:c1:d8:1c:33:cf:6c:fb:a9:
         fd:d0:fd:15:78:ca:58:57:b5:18:71:3d:c6:12:21:f7:69:ce:
         6b:24:04:02:97:3d:54:28:10:f7:5a:15:64:75:0d:52:66:04:
         0f:fe:27:72:fa:fb:a7:5f:e8:a4:60:4f:e2:62:8c:82:75:f6:
         c2:ce:ca:f9:99:74:96:e8:8e:5c:3c:97:76:a2:61:c5:ad:62:
         85:df:b3:a7:85:0b:d0:f0:f6:25:a9:7b:54:7c:b7:55:16:ca:
         07:c4:2a:f8:1d:f8:b6:93:5a:35:e7:8b:3f:cc:ed:9b:73:89:
         92:ff:ca:b5:b2:f5:ac:b1:c1:f6:ff:47:23:fe:58:e1:e2:c1:
         e8:a7:7e:10:1c:4e:43:5a:6c:71:3f:f3:64:46:45:7b:03:a9:
         9b:54:49:be:94:dc:7a:f9:77:bf:70:c1:cf:ed:38:7f:5c:df:
         14:74:b0:1b:9a:ca:a4:2c:96:c2:05:07:c6:e5:03:8d:c2:5b:
         02:23:3b:1e:6b:31:25:c7:04:13:38:90:a4:a8:fd:48:de:64:
         d3:05:77:e2:99:99:fe:18:b8:a0:56:c0:e5:1f:ac:2c:77:4f:
         4d:ff:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:08 2026 by rpki-client