Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File:                     F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier:          +YcKPaY6NF1E6jpFP9nHkEXUqCPG9EvUTJf2q5sP130=
Subject key identifier:   EC:F5:D8:48:6B:C3:59:92:81:A8:92:85:6A:C6:93:25:6D:CD:21:98
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer:       /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial:       019CAA21FB022CD839F3DCE5DB47C32A966B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number:          0710
Signing time:             Sun 01 Mar 2026 16:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:19 +0000
Files and hashes:         1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: 3jKTyt5Yzx4IR46FAt4WEGQ9t7hxhAYyjba883M5Xvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:fb:02:2c:d8:39:f3:dc:e5:db:47:c3:2a:96:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
        Validity
            Not Before: Mar  1 16:01:19 2026 GMT
            Not After : Mar  2 16:01:19 2026 GMT
        Subject: CN=ecf5d8486bc3599281a892856ac693256dcd2198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:04:41:7e:33:49:cc:7c:19:0e:3b:4d:56:
                    33:5e:ae:00:54:a2:f0:a1:03:af:7f:2c:08:94:6f:
                    35:7d:8f:54:55:12:e8:d2:0d:4e:c5:c0:e5:b3:5f:
                    ef:16:c4:eb:de:10:ae:b5:df:de:85:3d:52:3f:92:
                    ab:50:6e:85:2b:82:20:0c:db:03:60:86:d9:2c:3b:
                    ac:17:f3:26:e3:36:07:f3:94:65:c5:40:28:29:98:
                    47:2f:21:1c:54:4e:6e:25:27:c7:76:5c:a1:74:56:
                    44:33:17:24:35:fd:ab:29:f9:55:18:d7:b9:6e:27:
                    4e:da:c9:4a:84:11:6a:a3:82:b3:53:13:d0:4b:cc:
                    4b:87:f8:8c:ae:15:40:e6:77:d4:38:47:e8:7d:09:
                    f6:1c:95:3b:4d:d9:92:9a:84:a6:69:ce:db:93:63:
                    09:1f:1f:44:1c:f5:00:fa:45:13:bf:be:7b:2f:54:
                    1d:b0:e0:36:25:de:54:cc:da:49:e3:b1:9d:ed:51:
                    44:72:de:71:e5:23:66:de:df:af:87:99:c3:1f:0c:
                    c7:80:b7:40:fd:b9:a4:6f:3c:82:3c:5d:a1:f5:de:
                    4c:d0:2a:9b:30:5f:ae:dc:c7:ae:e6:19:83:45:08:
                    ad:60:87:eb:d1:d8:bd:a1:f5:69:12:94:16:dc:63:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:D8:48:6B:C3:59:92:81:A8:92:85:6A:C6:93:25:6D:CD:21:98
            X509v3 Authority Key Identifier:
                keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:62:9d:09:43:56:94:69:ca:05:e2:e6:e7:40:8c:52:04:
         0b:3e:a9:a6:04:1e:85:41:77:06:25:4b:2b:6e:58:10:ed:40:
         f5:20:b1:91:94:77:3f:e1:61:ad:2c:d2:63:70:49:42:7b:94:
         8b:3a:39:98:7c:c5:27:bd:a5:5b:1e:f2:99:c6:5c:ce:df:55:
         e2:fc:e7:72:97:f0:8e:50:f0:9e:56:a5:29:cf:59:d6:99:d6:
         5c:31:19:3b:a6:3d:be:cd:fb:8e:ea:75:4e:6b:74:f0:28:43:
         08:20:9d:c8:51:b3:60:a1:7e:ee:99:9d:f2:5e:51:e1:a6:a5:
         3f:72:d0:00:14:c9:70:5c:df:68:c0:fa:00:0b:15:dd:bf:7a:
         24:48:8b:2d:ce:f3:0c:1b:51:b9:31:4d:6d:ce:7c:ef:32:40:
         90:08:2c:3b:32:8e:08:19:a1:3a:4e:42:60:29:af:2b:03:56:
         f9:7c:c5:f0:5f:f9:1e:91:b3:07:ea:c1:0e:3d:6c:c4:f9:dc:
         d8:9b:c7:3b:53:d6:32:41:bc:9c:18:f1:a7:78:9f:c5:2a:2b:
         39:e1:2f:ca:f3:25:53:56:6c:5d:b1:af:f4:99:fc:07:4c:4e:
         7c:44:5d:57:80:bb:45:7a:a2:76:f1:28:95:f9:ce:97:86:d5:
         f6:fb:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:31 2026 by rpki-client