Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File:                     Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier:          j2Lg52crB+Lx1nzgr0VYrVTfE59MSaLqkksme/5Dolc=
Subject key identifier:   C0:0A:1B:72:2F:BC:8F:25:64:FE:63:98:29:37:8B:41:21:86:D5:04
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer:       /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial:       019CAB6BDB64B11A329667B4B3DF5DD1C772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number:          0884
Signing time:             Sun 01 Mar 2026 22:01:38 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:38 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:38 +0000
Files and hashes:         1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: Ikcfu9M7JTc2MQ/HQPaMHfEGGPAfhmNq2ozqdIEYtwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:db:64:b1:1a:32:96:67:b4:b3:df:5d:d1:c7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
        Validity
            Not Before: Mar  1 22:01:38 2026 GMT
            Not After : Mar  2 22:01:38 2026 GMT
        Subject: CN=c00a1b722fbc8f2564fe639829378b412186d504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:e3:54:54:15:7b:c5:e1:b7:f6:9d:a5:79:
                    0c:31:28:46:ea:b5:08:a5:f9:86:ca:95:8c:f7:69:
                    d2:ea:5d:78:17:3f:06:bd:17:be:85:01:c1:5a:60:
                    b8:b2:00:ee:df:e7:2e:0e:df:76:55:4f:fd:ad:73:
                    22:c4:6c:b6:d8:9b:39:1c:f5:ab:21:4b:9f:75:cc:
                    82:f9:32:a3:db:56:bd:b8:5d:e8:b9:04:5b:19:d7:
                    c8:42:8f:1d:3f:d9:76:4f:b0:ef:f6:b6:b3:83:37:
                    fe:1f:09:d2:d8:d8:f1:e7:75:a6:27:4a:37:66:6d:
                    c4:3e:6c:16:93:bd:10:c6:26:39:b1:1e:78:d9:85:
                    f3:75:42:73:23:b0:f4:13:53:d6:95:99:e2:65:bb:
                    1b:8f:23:43:53:f3:6a:55:c0:ff:de:89:94:ee:18:
                    b2:1e:8a:34:0d:15:c7:7d:21:4f:02:d7:a3:48:d6:
                    58:18:c8:7a:56:59:ba:cc:57:d1:9d:e7:a8:74:db:
                    2b:b0:0d:d7:c1:6e:1d:aa:d6:1d:37:7e:d6:b8:74:
                    67:ad:8a:7a:b6:18:78:ae:ef:28:44:81:fd:45:ff:
                    f2:e0:b7:9e:c8:b5:80:44:10:c8:a1:f6:4a:21:be:
                    75:73:6a:2a:bd:a2:8a:d7:6b:e1:12:92:da:ab:a8:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0A:1B:72:2F:BC:8F:25:64:FE:63:98:29:37:8B:41:21:86:D5:04
            X509v3 Authority Key Identifier:
                keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:82:6c:8e:32:95:b6:74:bf:11:fc:2d:90:c7:df:d2:79:13:
         ba:48:b5:a5:5a:68:a3:bd:30:94:4f:fe:63:41:0d:80:ea:08:
         7d:d3:fd:55:33:3c:eb:2e:30:b9:8b:27:2e:a2:ad:d5:c8:48:
         f2:83:cc:b4:d4:37:b3:5a:99:52:a7:c5:3a:64:8d:01:a6:a2:
         79:28:e0:ef:fb:c0:a3:97:14:2a:d7:e7:7a:06:e1:22:b4:fa:
         c2:6a:d6:82:45:c6:06:e0:01:f4:75:80:32:0b:12:a5:96:7a:
         5e:42:7d:80:dd:16:4d:af:ab:89:d4:12:b1:84:74:51:76:f8:
         2f:38:6b:83:57:02:18:55:08:47:2d:18:e8:41:e2:bc:2d:42:
         41:5c:7e:52:27:92:28:c6:17:62:90:50:80:0b:56:8b:d3:bb:
         81:5f:90:68:70:d7:06:9c:c8:1a:74:3f:98:ee:21:38:66:f1:
         da:3c:19:f4:cd:d5:fb:19:74:e3:b8:a5:10:39:a0:a1:c4:40:
         d6:4f:81:f3:16:08:f1:4f:10:69:83:d0:83:68:1d:90:f7:6e:
         52:e3:10:39:ee:fd:51:51:bd:4f:8e:40:fe:5c:3c:46:18:fa:
         69:d3:18:65:5d:05:49:2e:0c:26:b5:d0:a0:d3:b0:1c:26:ff:
         bf:3a:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:34 2026 by rpki-client