Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          GcAbtrzCzGydl6xWSNastshgs14rSYcVZvhjDL/nqog=
Subject key identifier:   63:3E:A9:F8:0E:62:9C:C2:FB:A6:ED:89:5E:B3:B8:6C:BA:DC:C6:34
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       019CACB5155EB02B5B9AE0062B26D70CAFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          1366
Signing time:             Mon 02 Mar 2026 04:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:14 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: 4K8Tt2DhJHyjYUEpj93pYTc63nzQ+mzT9T+IDQE1ok4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:15:5e:b0:2b:5b:9a:e0:06:2b:26:d7:0c:af:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Mar  2 04:01:14 2026 GMT
            Not After : Mar  3 04:01:14 2026 GMT
        Subject: CN=633ea9f80e629cc2fba6ed895eb3b86cbadcc634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:37:38:7a:56:78:14:9d:4e:78:50:cf:54:
                    ff:e9:45:43:9c:98:e2:1d:f0:ce:6d:29:eb:f3:42:
                    68:b2:71:fd:fd:75:8d:af:63:36:98:39:15:4b:fb:
                    85:27:12:d9:37:97:df:5f:fe:8c:7c:6d:35:64:e0:
                    ab:9f:bd:49:71:90:db:20:4a:1f:55:16:d6:d6:2e:
                    ba:44:0b:59:35:55:8c:34:bc:ee:18:1e:68:53:15:
                    25:df:95:e3:b0:55:f7:64:d2:6e:b8:b4:43:a6:bd:
                    b4:63:e5:9e:7b:4d:aa:a9:72:f4:20:a3:84:b6:f7:
                    66:05:ce:c5:1d:dc:1d:50:2b:24:04:c0:89:54:6f:
                    7a:34:a1:21:2a:bd:da:14:01:cc:d1:4d:ff:65:d3:
                    15:47:d3:30:91:b8:ca:03:b9:63:84:34:a0:b7:47:
                    c4:74:c4:0d:51:f6:0d:6c:1b:85:64:c8:61:b5:50:
                    85:6d:ba:a8:86:61:3f:75:00:70:78:c9:0f:3d:6f:
                    e8:fc:e4:b6:79:2a:30:ea:c8:c0:b8:69:28:17:97:
                    e1:bb:d6:cd:c7:8c:43:37:7d:a5:72:d2:44:fe:65:
                    27:47:48:9a:17:4a:32:6d:4d:5a:c1:22:a6:22:75:
                    9a:11:bc:bc:9e:e3:49:e9:b1:48:9a:c6:90:e4:04:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:A9:F8:0E:62:9C:C2:FB:A6:ED:89:5E:B3:B8:6C:BA:DC:C6:34
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:1c:f0:61:35:69:9a:63:ce:1a:c7:43:3b:a1:48:71:5d:
         03:79:0f:5e:7a:1a:50:04:84:48:72:51:e1:70:da:03:2c:d7:
         a7:5a:fc:c7:f4:76:f9:91:66:80:90:ef:7d:cd:c6:66:03:ed:
         74:d0:78:f7:89:ad:ce:da:da:2e:3f:ff:ae:5e:51:6e:e6:b9:
         1a:21:f2:99:d2:94:48:bf:6b:87:07:ea:51:b7:f8:32:85:dd:
         65:5d:e2:f5:3f:00:01:cf:3a:f2:ad:63:ab:be:04:cb:0e:da:
         ab:1f:78:11:b7:ab:db:89:50:9e:a2:5e:23:2c:d7:d7:f4:41:
         29:e3:5b:23:3c:13:31:2d:2a:53:60:6c:e7:81:60:5a:d3:2a:
         bf:bd:96:24:92:4d:01:b1:71:9f:b5:38:ae:ee:c2:46:cf:82:
         31:c6:40:1d:85:e3:3a:3e:44:3d:b6:16:36:76:e1:4b:6e:e4:
         0c:50:79:e7:6a:19:86:f4:24:eb:a7:a6:9e:40:01:88:dc:63:
         f2:eb:9e:e0:cf:04:9b:3e:71:15:5c:21:13:da:f9:3c:6f:d9:
         04:63:d4:b8:a0:4a:33:e2:9b:0e:76:4d:0f:91:c8:5f:1b:c0:
         f3:6f:e0:7f:b4:d4:be:5d:03:68:bf:13:62:be:fa:fb:da:fa:
         60:5f:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:26 2026 by rpki-client