Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
File:                     gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json)
Hash identifier:          g41ZEqe3ugoP2HJgeUEUaFHn8TGiaGujMtWU4byn7WY=
Subject key identifier:   F5:F5:67:18:0A:AE:77:F2:C0:07:A8:AD:AB:5C:3E:5E:43:25:39:41
Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
Certificate issuer:       /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Certificate serial:       019CADC85A4C5F9E16C83089D561581BF30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
Manifest number:          0F62
Signing time:             Mon 02 Mar 2026 09:01:54 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:54 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:54 +0000
Files and hashes:         1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: 0EG2ogvCL2dmUWxlmLX3tM/eeyWeeqfqMAODKCqUdIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:5a:4c:5f:9e:16:c8:30:89:d5:61:58:1b:f3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
        Validity
            Not Before: Mar  2 09:01:54 2026 GMT
            Not After : Mar  3 09:01:54 2026 GMT
        Subject: CN=f5f567180aae77f2c007a8adab5c3e5e43253941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:f4:1a:02:74:50:05:8a:33:94:18:d0:e9:
                    cf:3e:36:7c:af:39:41:52:df:15:e9:52:dd:94:d1:
                    0a:d8:cf:4b:67:f4:d7:62:ed:fb:71:6c:56:cf:5c:
                    2c:db:3c:2b:d3:2f:13:d8:f9:a3:c9:ce:08:fe:b4:
                    e0:20:ce:1b:9e:52:e6:cb:b8:37:c6:28:21:27:f9:
                    7c:94:dd:dc:a5:90:db:a7:10:22:7b:3c:07:76:d7:
                    27:f1:6b:eb:06:46:b0:0a:14:d0:cd:f1:55:48:c3:
                    5d:0d:e3:4d:ef:9d:27:15:a1:9c:70:2a:df:5e:82:
                    83:a3:b7:20:df:0a:a0:a1:0c:de:b1:f8:37:d5:75:
                    f8:20:66:80:d2:7d:f9:a8:49:40:2f:50:ea:3e:12:
                    64:46:db:5e:8d:38:44:be:fe:7f:6a:cb:31:32:62:
                    01:a7:f3:f0:c7:a2:38:36:36:a6:81:c5:23:64:48:
                    04:eb:d8:d6:06:8d:90:0f:86:ea:70:ff:7b:f3:6d:
                    5a:87:ea:31:d3:91:b6:4f:f8:32:b4:a7:f8:62:0d:
                    77:96:81:1e:47:ba:93:7c:03:76:e0:1f:a3:f4:4b:
                    35:00:5b:b6:1a:49:49:55:fa:da:f8:7e:0f:cf:08:
                    76:1b:ea:14:7c:30:a0:e1:05:a7:13:a9:b7:3f:37:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F5:67:18:0A:AE:77:F2:C0:07:A8:AD:AB:5C:3E:5E:43:25:39:41
            X509v3 Authority Key Identifier:
                keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:81:ff:5b:23:71:f0:3c:2b:d8:2d:e0:80:4b:61:3b:85:e4:
         35:f4:97:ae:6c:29:b5:b6:3b:c2:f4:1e:78:6c:d2:40:df:81:
         3f:50:9d:f0:63:58:50:50:6a:a0:21:62:8c:2e:33:03:54:c7:
         d5:43:4d:b2:9a:cc:d9:77:53:9b:4e:6b:0d:84:7b:b2:89:3f:
         1b:51:2e:b9:d8:ef:3d:27:9f:1e:46:62:d8:fb:77:06:0f:ab:
         33:67:31:19:b5:d4:60:62:a5:b8:85:7c:74:90:21:41:10:eb:
         32:cc:00:47:1b:35:86:7c:92:61:7e:64:e8:48:a8:ba:7d:9c:
         f2:1b:a2:79:1f:ce:62:dc:20:2d:d6:bd:fa:32:f9:78:e1:f5:
         f0:8a:82:d9:b5:3a:98:74:eb:7c:d2:3f:1b:31:cb:22:8e:98:
         9a:89:2c:06:f2:84:d6:cc:0f:65:23:de:e5:a6:f4:12:c8:2a:
         7a:cf:f8:33:88:59:d2:94:5b:dc:a9:a3:93:96:0c:62:5a:22:
         5e:6c:3a:47:cc:08:65:d6:bc:9a:dc:d3:ea:0d:8d:c8:2f:0e:
         72:23:ea:7d:4f:80:50:3f:72:bc:29:ac:82:36:fc:aa:f0:94:
         7a:48:e7:61:65:b3:6b:27:e6:84:27:73:11:03:10:95:66:5e:
         37:90:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:36 2026 by rpki-client