Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          dA+w/66iqwXnnEjJBFO4i7TtLzYLdwQh0aZbcsdqxJ8=
Subject key identifier:   B7:88:96:84:98:52:2A:2F:55:7E:B2:6F:D3:78:9E:1A:91:24:D4:D7
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       019CAAC6B6ACBBB13D7A583AD8BA526F4159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          0599
Signing time:             Sun 01 Mar 2026 19:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:15 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: Z8/4e79QSCyzraj2E6YhRx89KOzYwXVdWih1gZQy5j4=)
                          2: de6ErolZQIyqyskxIJ9qsMNkKNo.roa (hash: jruSnROhXq+S2qj6HU2rC2fPnP4UTAP+/5sPjL7DukM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:b6:ac:bb:b1:3d:7a:58:3a:d8:ba:52:6f:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: Mar  1 19:01:15 2026 GMT
            Not After : Mar  2 19:01:15 2026 GMT
        Subject: CN=b788968498522a2f557eb26fd3789e1a9124d4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:3f:c5:74:74:82:51:1a:28:cc:19:5f:63:
                    dd:00:4a:b0:de:fe:2d:65:2a:53:dc:45:39:7f:7a:
                    68:a0:a4:62:5b:71:bd:ec:00:bb:93:da:91:11:dc:
                    59:46:be:7b:bd:a0:c2:5d:91:fc:7b:80:a8:94:74:
                    f9:ba:74:ad:e1:c2:db:85:5a:b9:b5:d9:39:a1:02:
                    b3:1f:7c:b5:42:c0:a7:8c:1c:d0:a4:9f:86:24:cc:
                    ad:3c:f0:8f:dd:92:53:75:22:37:8c:d4:c3:97:e0:
                    e8:c0:34:b0:0b:c1:54:f8:2a:e0:cd:57:69:92:be:
                    a4:ea:ac:ed:5b:ea:f6:8a:73:d9:8a:e7:55:73:af:
                    0b:7f:3e:fd:d2:ab:f1:f7:89:26:90:5f:0d:2d:96:
                    83:5b:12:cf:41:13:b3:02:3c:84:ab:39:4c:bf:d0:
                    8f:6e:dc:20:1f:db:39:eb:40:5d:c8:f1:13:a4:2c:
                    7a:67:fc:04:e8:61:1e:06:1d:6a:0e:16:34:8b:8f:
                    28:7b:98:04:ee:30:dd:49:0a:aa:70:26:66:4f:68:
                    ef:17:00:0e:1d:2f:6f:6b:43:e6:f9:8e:8b:a9:7b:
                    78:25:c0:39:25:46:73:4b:f8:0a:ca:cf:0d:a1:e0:
                    b6:f7:c3:a3:c8:23:88:cc:64:eb:2f:8d:7f:78:96:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:96:84:98:52:2A:2F:55:7E:B2:6F:D3:78:9E:1A:91:24:D4:D7
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:86:92:84:62:7d:2a:8e:0b:2c:de:79:15:06:de:4e:43:
         70:1a:f8:06:9c:a3:43:d0:02:96:3b:9f:75:09:57:42:2d:e8:
         b3:0e:88:3c:60:79:25:6e:fa:f1:17:3d:c5:c9:43:02:1f:75:
         cb:5b:2b:01:b4:87:fc:71:c7:a9:c5:83:f7:53:b5:38:88:a4:
         ed:02:b5:fe:c9:c8:d0:d9:f2:1b:dd:f3:97:98:96:f5:e6:c2:
         10:be:de:7e:c5:d7:bb:7a:5f:e8:a1:3f:a5:ae:36:84:84:9b:
         d5:fe:87:d5:b3:48:18:95:44:5b:b7:e2:a4:99:9c:e5:7e:13:
         3c:02:49:87:a1:46:5c:df:8c:4d:8c:e1:04:65:d7:84:61:7c:
         78:99:b6:d9:48:fc:08:0a:1f:8f:5c:11:2d:dd:87:8a:4a:db:
         96:20:e7:11:bf:09:22:d6:07:6b:bf:db:a8:8c:8a:a9:a1:5d:
         74:fa:3a:e5:4a:8b:d8:b9:7e:d7:61:db:b6:1e:b8:cd:1f:be:
         76:66:bb:f8:b6:43:4d:fb:61:e0:a3:e1:74:7c:f7:84:1b:93:
         39:93:a8:3e:d8:61:d8:10:5b:56:c7:fe:87:77:09:c2:74:e2:
         01:f4:cf:fc:96:bd:84:2f:97:9d:37:56:b3:e1:8e:74:7a:b8:
         1c:c0:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:16 2026 by rpki-client