Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File:                     LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier:          rSUDAkJwMsfJPol5h9itr8iM450611/z/e3coD9b1bc=
Subject key identifier:   0E:EC:43:DB:64:55:21:EA:A9:0E:40:37:6B:A5:F0:6A:C1:07:FD:DD
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer:       /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial:       019CAB6B65E77E9483711DA3D115A363E3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number:          12D4
Signing time:             Sun 01 Mar 2026 22:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:08 +0000
Files and hashes:         1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: 1RfFVngiVzX08AFns+zIulKbcyXYApVuzujkB41Gito=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:65:e7:7e:94:83:71:1d:a3:d1:15:a3:63:e3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
        Validity
            Not Before: Mar  1 22:01:08 2026 GMT
            Not After : Mar  2 22:01:08 2026 GMT
        Subject: CN=0eec43db645521eaa90e40376ba5f06ac107fddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:2c:d4:c2:e6:ec:84:73:6c:e3:cb:9c:3d:
                    14:a8:10:7a:a3:2c:ed:fa:d9:11:59:77:ca:0a:6e:
                    7d:db:b4:27:79:f3:eb:bb:39:39:bb:9d:49:f1:86:
                    5d:7f:8c:b1:50:7a:cd:b7:8b:f4:50:29:56:9b:46:
                    73:35:87:43:74:03:fe:a8:05:3f:9b:9d:e5:7f:cf:
                    cf:02:38:66:f6:f9:59:3f:99:b0:8a:e0:2f:2b:74:
                    af:65:41:57:e9:97:5d:91:1d:ee:ed:d3:fb:84:ba:
                    32:17:00:b9:aa:01:8d:92:ad:71:e0:f3:62:fc:f3:
                    72:18:a2:86:e9:1a:68:d5:a6:b1:c4:8f:b4:06:9f:
                    0f:3b:71:fc:95:a4:92:61:31:7f:c6:41:12:73:21:
                    85:32:ce:62:c4:ab:7f:9c:24:b5:c6:a1:71:bd:0d:
                    2c:4a:0d:d4:62:cf:31:4d:90:ea:25:93:25:ab:1a:
                    37:9f:48:25:5c:9c:86:f7:22:61:e9:c5:c5:5a:73:
                    89:6c:6e:09:f7:85:10:6a:aa:56:36:f3:25:af:22:
                    37:63:35:5f:4d:cf:b1:bb:de:14:53:0c:31:4e:13:
                    69:9b:59:a5:a8:63:e0:92:86:bc:b0:2c:c6:43:2e:
                    f9:c1:40:25:1d:bc:16:ba:fe:93:38:b4:38:de:28:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:43:DB:64:55:21:EA:A9:0E:40:37:6B:A5:F0:6A:C1:07:FD:DD
            X509v3 Authority Key Identifier:
                keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:29:cf:d0:40:82:df:49:38:7c:69:71:fd:0f:d5:a1:d8:39:
         f0:24:9c:b1:7f:cf:94:73:5c:3c:47:86:46:bc:69:3f:85:cd:
         f3:4d:38:c7:52:66:79:7e:e2:fe:31:1c:26:48:bd:6a:71:b7:
         2c:34:db:52:6a:e8:7c:3e:32:c0:18:c6:1a:a7:35:76:09:90:
         95:c7:bd:d2:8a:19:d7:57:61:ef:4c:a7:64:76:f1:c2:da:b5:
         2b:78:ee:83:44:cb:cf:cf:bf:8f:7a:68:45:cb:4f:f8:c0:6b:
         a6:b9:b7:db:27:ba:36:db:f8:be:b4:b4:63:0e:6e:ac:32:bb:
         1c:bb:d8:2f:5c:b7:ca:17:54:62:c7:00:57:16:e6:a7:51:84:
         4f:c3:98:6d:eb:eb:a5:d0:fc:ab:e4:ba:fa:9a:75:41:9d:ad:
         08:ab:a8:48:a0:2b:de:06:5f:16:11:c0:b9:dc:be:8a:cc:11:
         a6:c9:ba:b7:b7:87:14:49:4b:4d:ce:dd:b1:64:53:ec:b6:56:
         e3:97:e8:7f:e1:2e:dd:f3:0e:f7:96:ef:90:f3:eb:07:dd:83:
         a9:23:e7:45:fa:4c:8e:6c:15:bd:3e:86:8c:f4:49:8f:cd:05:
         49:f1:6f:0b:e1:16:12:cb:35:d9:d1:f2:1f:f0:8c:04:94:99:
         4b:76:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:28 2026 by rpki-client