Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File:                     eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier:          fsez2n4gXNzYpcnOU6iUPnT7lvGKghfzXFno2W8ixS8=
Subject key identifier:   AA:5D:D5:22:0D:26:87:7B:4E:56:25:0B:38:EE:9D:C7:31:13:58:72
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer:       /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial:       019CAB6BA16BE46CA691D1071A344C25DC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 22:01:23 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:23 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:23 +0000
Files and hashes:         1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: yN7xuDE2Op4aaDmave7sh/yRSnZi8BVFwEZXOmsa6UU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:a1:6b:e4:6c:a6:91:d1:07:1a:34:4c:25:dc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
        Validity
            Not Before: Mar  1 22:01:23 2026 GMT
            Not After : Mar  2 22:01:23 2026 GMT
        Subject: CN=aa5dd5220d26877b4e56250b38ee9dc731135872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:f4:c9:bd:54:47:a9:00:63:fa:71:83:a2:
                    b2:7e:a9:eb:0e:0a:8c:9b:10:65:5f:3a:0d:93:fe:
                    8a:48:11:dc:66:dd:0e:2e:89:41:52:f1:84:cd:96:
                    24:25:5e:0f:b6:1b:1b:48:51:5b:83:9b:93:15:6b:
                    22:3e:58:f9:ee:a6:75:d1:98:0e:d9:0e:68:1a:eb:
                    c6:c5:b5:49:d8:27:08:82:a5:bc:f5:ff:8a:c3:eb:
                    6f:d1:c2:f9:3f:32:74:a6:c5:7b:27:7c:05:2f:56:
                    3c:12:9f:80:ce:5a:63:48:62:79:ca:a9:64:4e:a8:
                    ec:2a:51:3b:4b:d9:85:3f:f6:b8:e0:c6:0a:f9:a8:
                    41:9a:e7:0b:59:3d:08:79:a3:68:c5:aa:dd:be:44:
                    00:04:e0:9b:b0:94:7a:55:6a:c1:0d:31:6e:40:27:
                    77:3c:aa:91:e1:38:9f:10:f2:2e:d4:72:2e:a5:15:
                    da:36:63:ba:40:23:eb:57:95:be:fc:ce:aa:9a:2b:
                    53:ef:62:ba:14:8b:d2:c4:c2:ca:23:27:4a:c0:ca:
                    6d:d7:b4:a8:46:a1:87:08:1d:4d:42:b5:1c:67:bb:
                    f3:7f:e5:7d:4e:c1:df:c4:ee:d9:c5:d4:52:3c:92:
                    6e:7a:6e:79:35:0f:0d:d8:f9:56:6a:78:cf:d3:d0:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:D5:22:0D:26:87:7B:4E:56:25:0B:38:EE:9D:C7:31:13:58:72
            X509v3 Authority Key Identifier:
                keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:19:20:7f:be:7c:a5:42:f8:5f:11:55:83:5f:04:62:52:
         91:97:e1:05:c2:3f:a4:02:0a:54:f0:ec:1d:c3:e1:b3:ea:73:
         48:cc:f4:ff:fb:81:b2:25:79:d8:85:62:da:19:6e:e0:d8:d9:
         ac:41:88:aa:11:9a:2a:84:4a:74:38:9c:a6:05:87:d0:e4:4e:
         98:56:b3:47:20:2c:1e:7f:18:07:b5:91:44:35:f4:7d:19:e8:
         78:77:b3:13:f2:8f:64:61:f1:38:b0:ac:5c:00:8b:b4:f2:84:
         1e:cb:f8:8a:4c:ca:12:41:6a:70:96:f1:9a:82:31:4b:29:09:
         e5:a9:1a:2e:f6:e8:fe:34:46:ed:dd:65:7f:85:85:52:81:00:
         05:88:4e:52:be:90:b0:96:c8:be:11:57:f8:ed:18:4b:3d:79:
         fc:8b:8f:58:72:ab:f8:4c:08:90:de:5d:0c:ba:92:64:c3:22:
         bd:03:1d:b0:69:42:88:03:20:d0:e3:ac:18:f9:d4:1b:35:70:
         e6:04:ba:d9:a4:84:c0:98:60:b4:4b:8d:e0:e7:50:9d:20:fd:
         81:c7:80:60:01:4c:a9:d1:7c:45:e8:50:7a:9b:f6:fc:5e:b1:
         ad:45:19:94:e6:0c:bb:0d:6c:df:3d:66:9b:f0:7d:3d:75:f4:
         43:b7:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:06 2026 by rpki-client