Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File:                     ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier:          ZxdbYxgPxhFL0763TyJkUcr1ia37/exgi5klulHea/I=
Subject key identifier:   B0:24:6B:23:74:00:02:80:AE:A7:23:5F:32:9C:BF:F2:A4:B7:56:FC
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer:       /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial:       019CAB6B6D46F1FC72EE686603929E3C43D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number:          123E
Signing time:             Sun 01 Mar 2026 22:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:10 +0000
Files and hashes:         1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: ZtFgGPBY0Gdhi1RRDw/4bfewvSUXo8dYef4hqgVAqiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:6d:46:f1:fc:72:ee:68:66:03:92:9e:3c:43:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
        Validity
            Not Before: Mar  1 22:01:10 2026 GMT
            Not After : Mar  2 22:01:10 2026 GMT
        Subject: CN=b0246b2374000280aea7235f329cbff2a4b756fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:11:23:43:84:15:47:cb:f9:39:d4:71:d2:
                    1c:9f:73:67:56:31:f0:fe:14:a9:ab:0f:27:ce:ab:
                    d7:55:84:27:57:ef:e8:d3:f8:26:7b:9e:a7:0a:92:
                    14:33:3b:ce:c0:43:48:ec:2c:a9:93:98:90:c6:7d:
                    ae:75:3d:dd:f3:f1:25:cd:f8:74:84:8d:46:9c:a2:
                    c8:43:35:be:d5:1d:73:70:73:4c:80:d1:ea:40:a0:
                    29:2d:14:4c:c2:d4:74:db:6a:36:8e:ab:c6:13:eb:
                    bb:cb:6f:50:b5:f0:6f:05:c3:72:0b:55:f6:5f:10:
                    3a:92:73:c8:8b:ab:a5:fe:fe:b7:d3:2e:a9:53:48:
                    ec:1f:d6:a3:a7:15:7d:ca:c6:c5:92:da:74:f7:a8:
                    62:f8:51:b6:ca:27:38:4d:96:4e:37:2a:84:10:ff:
                    94:d8:e3:05:c2:6e:2f:7f:35:12:0c:f2:d3:02:33:
                    7c:29:79:bb:41:dc:50:f4:6b:47:62:2c:cd:46:fc:
                    9b:07:38:57:de:1c:96:e4:45:35:e1:b3:d1:03:eb:
                    85:f4:e3:37:98:9d:62:e2:e7:c9:86:54:c1:25:2a:
                    df:c4:ff:50:d9:15:1d:56:7a:ec:bc:6f:ab:99:f6:
                    86:9c:d7:b7:aa:11:b4:a4:82:b2:2e:3e:8d:6e:14:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:6B:23:74:00:02:80:AE:A7:23:5F:32:9C:BF:F2:A4:B7:56:FC
            X509v3 Authority Key Identifier:
                keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:6d:98:2a:51:10:ab:c3:ae:f4:4f:36:07:e7:fb:d3:cd:
         21:a7:13:4d:68:95:8f:af:9a:a6:d1:25:e6:04:1f:fc:95:24:
         87:04:b6:00:87:fc:ba:a9:55:22:f8:c3:09:71:1e:09:65:94:
         5b:ad:3b:e7:3e:e2:e6:6c:58:ed:81:c1:6d:5f:85:dc:21:82:
         7f:1f:40:dd:64:d5:d5:80:75:4e:76:24:4c:5b:43:1f:6e:37:
         0a:85:0a:6e:33:ef:b3:79:bb:ca:97:89:9d:60:9b:ea:f4:a3:
         be:0c:5b:4b:ab:81:b7:1a:2f:c9:e0:05:83:65:c3:26:2d:fe:
         e5:40:4d:21:3c:e3:4d:20:cb:6e:11:39:bc:27:ff:47:1e:2f:
         37:78:0b:11:b7:8e:64:29:fe:e3:39:7e:d2:32:66:38:2a:5a:
         4b:7f:92:de:28:ab:4b:97:3b:55:6b:04:e3:a7:75:a9:58:ca:
         aa:13:6c:2e:8e:46:98:f6:61:0a:8f:07:93:50:a6:ec:72:6c:
         df:d9:68:8d:ca:c6:af:88:aa:5a:f8:7b:81:61:f7:ac:7d:43:
         05:f5:4a:ef:ad:c2:6e:5d:27:47:7b:da:60:39:4d:0d:23:0b:
         e6:f7:57:0f:8c:12:43:5c:44:af:d1:33:00:b0:7b:81:38:64:
         eb:93:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:10 2026 by rpki-client