Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File:                     _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier:          UkVtfOOVazESAhgvH4HybsCs2wxvaGMZ66T0OG+KBAk=
Subject key identifier:   49:AF:01:BC:C7:C8:50:81:29:FE:28:52:B3:DA:25:4B:7E:5D:10:D6
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer:       /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial:       019CAB6BF89825242EF258C03A30173A3301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:01:45 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:45 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:45 +0000
Files and hashes:         1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: aDfyPlC34+pFN2NTj/9RbKgiID7ldjuUhnxnwMz4v20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:f8:98:25:24:2e:f2:58:c0:3a:30:17:3a:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
        Validity
            Not Before: Mar  1 22:01:45 2026 GMT
            Not After : Mar  2 22:01:45 2026 GMT
        Subject: CN=49af01bcc7c8508129fe2852b3da254b7e5d10d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:d5:ba:99:03:cf:a4:5f:bc:25:85:aa:a1:
                    e3:dc:0f:56:0e:c1:c5:9d:29:fb:a7:59:dc:07:67:
                    e0:a6:b4:52:21:ae:74:77:9e:84:0e:db:25:24:53:
                    5e:ad:ae:85:90:7e:9e:c0:cc:66:da:b4:b0:8b:e4:
                    31:7c:1b:5e:c3:9f:b1:d1:f8:87:4f:38:60:a1:0c:
                    8c:e3:aa:06:3d:1c:da:ea:ed:bc:f0:2e:bc:80:c8:
                    29:35:e3:61:2b:0b:90:31:bc:67:79:de:38:f7:9d:
                    b4:18:b4:9a:c4:71:0d:d2:b8:8f:b4:1d:86:34:35:
                    49:6a:ff:0c:13:a5:ca:c4:ef:f6:0b:72:b2:26:e0:
                    42:94:18:96:65:56:65:4b:db:52:40:5d:af:b3:28:
                    4e:ce:57:6e:07:76:a1:c0:97:15:a1:99:51:6d:c9:
                    b3:dd:fb:d2:0a:5f:e6:4c:ab:a0:31:32:5c:74:0e:
                    fe:b0:71:3d:60:e7:c5:84:5a:42:7b:d9:53:cd:7e:
                    6b:f6:cc:24:c6:81:c9:3d:05:30:0a:0e:f4:9c:07:
                    88:af:7b:b1:ff:75:ea:a9:d0:61:a6:dd:7b:35:22:
                    58:be:ba:76:0b:d6:f6:a7:ba:62:1f:04:b1:b4:dd:
                    69:77:24:c3:35:8e:76:d8:32:6a:ee:6e:82:6f:a8:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:01:BC:C7:C8:50:81:29:FE:28:52:B3:DA:25:4B:7E:5D:10:D6
            X509v3 Authority Key Identifier:
                keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:13:5b:61:a1:41:45:7e:ab:ef:43:d8:89:3f:8d:c5:93:22:
         1a:3a:60:fb:96:52:bd:ab:b6:79:78:f9:13:a9:10:72:bc:50:
         0e:3d:58:6d:f3:3a:ce:22:60:ad:ee:92:59:8e:48:45:e1:e9:
         82:d5:77:16:b7:77:ee:27:4d:29:52:0a:8c:8f:23:03:e6:e6:
         00:a8:f2:0e:35:9d:c4:c0:3a:eb:71:3c:c6:a0:da:d2:cf:af:
         00:00:27:41:81:c6:2b:2b:b4:c7:44:63:20:ab:be:3d:40:4c:
         9e:47:73:b3:c7:96:e2:66:dc:77:26:0f:97:45:b3:4f:64:69:
         7a:47:e3:4c:75:1c:71:6a:73:b1:4c:37:0e:45:72:a6:19:97:
         4c:16:c7:e0:35:d6:a6:79:ec:d0:5d:3c:2d:3f:a3:5d:3d:b8:
         c1:81:cb:49:90:db:fb:54:12:27:64:fb:ff:bb:84:b8:5d:d5:
         60:31:9f:59:bd:75:d2:1a:3b:51:be:9e:4e:65:f8:2f:17:69:
         40:d9:79:3b:ee:ff:e6:17:59:49:f3:a9:28:9a:70:c7:ce:4a:
         d3:2a:12:cf:59:d7:7c:52:44:7b:5f:4a:38:8a:8e:c3:3b:4f:
         be:99:e8:e8:2e:8f:50:b4:e3:f6:7e:45:27:53:7f:e3:df:12:
         46:69:f6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra/iYJSQu8ljAOjAXOjMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTk0NjMwZmM3NDU1NmNlNTA4MDI2ODcwOTAxNTQ1ZmI3
YjA0Y2QwHhcNMjYwMzAxMjIwMTQ1WhcNMjYwMzAyMjIwMTQ1WjAzMTEwLwYDVQQD
Eyg0OWFmMDFiY2M3Yzg1MDgxMjlmZTI4NTJiM2RhMjU0YjdlNWQxMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh3VupkDz6RfvCWFqqHj3A9WDsHF
nSn7p1ncB2fgprRSIa50d56EDtslJFNera6FkH6ewMxm2rSwi+QxfBtew5+x0fiH
TzhgoQyM46oGPRza6u288C68gMgpNeNhKwuQMbxned449520GLSaxHEN0riPtB2G
NDVJav8ME6XKxO/2C3KyJuBClBiWZVZlS9tSQF2vsyhOzlduB3ahwJcVoZlRbcmz
3fvSCl/mTKugMTJcdA7+sHE9YOfFhFpCe9lTzX5r9swkxoHJPQUwCg70nAeIr3ux
/3XqqdBhpt17NSJYvrp2C9b2p7piHwSxtN1pdyTDNY522DJq7m6Cb6jm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmvAbzHyFCBKf4oUrPaJUt+XRDWMB8GA1UdIwQY
MBaAFP+ZRjD8dFVs5QgCaHCQFUX7ewTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAt
ZWFmY2E1ODU0MjU3LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAtZWFmY2E1ODU0MjU3
LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBNbYaFB
RX6r70PYiT+NxZMiGjpg+5ZSvau2eXj5E6kQcrxQDj1YbfM6ziJgre6SWY5IReHp
gtV3Frd37idNKVIKjI8jA+bmAKjyDjWdxMA663E8xqDa0s+vAAAnQYHGKyu0x0Rj
IKu+PUBMnkdzs8eW4mbcdyYPl0WzT2RpekfjTHUccWpzsUw3DkVyphmXTBbH4DXW
pnns0F08LT+jXT24wYHLSZDb+1QSJ2T7/7uEuF3VYDGfWb110ho7Ub6eTmX4Lxdp
QNl5O+7/5hdZSfOpKJpwx85K0yoSz1nXfFJEe19KOIqOwztPvpno6C6PULTj9n5F
J1N/498SRmn2Og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:44 2026 by rpki-client