Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          zwg+jOYK9E/IBqNI78KZI4E+N2ApPhDXPw2ZfveYZYs=
Subject key identifier:   89:30:34:66:29:3D:C7:BE:CF:F7:FD:51:62:6B:0E:8C:B0:42:43:A2
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019CAA900253E5BF4FA24F6C04E91DF05916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          184D
Signing time:             Sun 01 Mar 2026 18:01:30 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:30 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:30 +0000
Files and hashes:         1: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: W04dY9uq9iZURF2ZRoh4RX2vIH3fUFJ9LGMrVOxkrdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:90:02:53:e5:bf:4f:a2:4f:6c:04:e9:1d:f0:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Mar  1 18:01:30 2026 GMT
            Not After : Mar  2 18:01:30 2026 GMT
        Subject: CN=89303466293dc7becff7fd51626b0e8cb04243a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:f3:c1:e5:74:ff:33:a8:11:68:1a:86:ca:
                    3e:ac:1c:88:51:28:83:2a:ba:e9:9e:63:c4:10:de:
                    6b:54:53:28:81:ea:0b:32:7d:2c:2e:fd:14:48:f8:
                    24:82:11:01:6d:1c:ed:16:ac:0a:a2:a8:55:bb:e4:
                    36:48:98:94:c4:fe:09:bf:c9:28:97:12:97:05:c2:
                    72:db:e2:ed:15:ce:a0:cc:7c:2c:36:57:af:d2:da:
                    53:5e:b8:29:71:77:55:f0:f2:4e:fb:69:17:0a:e3:
                    6d:3c:48:be:bf:d2:95:e1:0a:71:ba:e0:0b:67:db:
                    25:4e:44:01:44:ff:e8:ac:ce:04:0c:84:df:f4:a3:
                    c8:7a:29:87:0a:e4:4f:5b:38:50:07:3f:83:ce:ec:
                    1f:91:45:c0:40:db:c7:63:77:2d:36:7c:98:f2:b5:
                    b3:63:1c:3c:e1:1a:50:9f:f3:dc:60:b1:1f:be:e1:
                    43:0c:39:bb:c3:49:1e:da:1d:57:bf:90:c3:41:ff:
                    a2:22:f3:f0:6d:82:48:b7:97:b6:d6:e3:5a:64:ce:
                    fd:b7:0f:c7:49:26:f0:d7:01:e6:f9:6e:04:17:9b:
                    63:b7:36:c9:b7:3c:b6:46:e1:44:ae:6d:e1:08:d7:
                    66:0e:16:20:25:fc:c8:a4:59:97:b5:8f:13:7c:bc:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:34:66:29:3D:C7:BE:CF:F7:FD:51:62:6B:0E:8C:B0:42:43:A2
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:e0:29:86:58:42:33:e5:03:46:4d:a4:5f:52:13:e1:a2:
         47:ce:06:1f:f1:ef:29:dc:b5:53:69:a4:71:76:45:b5:bc:61:
         16:41:6f:0a:5d:02:fa:5f:d5:a6:75:70:fd:cb:4c:8b:0e:a9:
         b2:73:40:70:dd:2f:92:1d:0d:24:85:89:c0:d2:e5:a2:6a:a0:
         49:8b:ab:bf:0d:08:67:50:7c:a3:c0:f2:c1:bd:5f:30:6f:d2:
         7a:25:d4:dc:b2:77:23:12:0f:e0:e9:c4:be:a5:5e:e4:69:2e:
         1f:b6:92:c9:ab:61:86:f1:72:6c:8a:9a:3a:02:10:19:8c:ec:
         cc:ef:0f:14:6d:42:48:9c:2f:ad:f1:03:01:b5:5f:92:40:ee:
         98:27:3c:9b:87:96:e3:7d:cd:13:26:14:e0:21:8a:02:98:bd:
         fd:cb:66:b0:7f:01:cb:0c:09:f0:e1:a1:7b:86:ef:eb:26:ab:
         e4:b5:b5:00:cc:c8:3e:33:5a:14:5f:20:20:2d:86:3d:92:f8:
         01:21:8b:63:13:a7:36:ef:e3:d3:f3:eb:93:4f:d5:31:5a:e6:
         52:d5:91:c1:4f:01:22:2c:77:43:1f:4f:6e:04:76:e4:06:68:
         99:2d:79:5b:b6:cf:4b:7c:36:21:97:45:e6:0c:75:34:08:e9:
         f0:dd:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:21 2026 by rpki-client