Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File:                     IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier:          w06GwBMWXDMdQv6DzBYNAOkgLNc5J6plfVj8Ipo/Gcs=
Subject key identifier:   01:2E:CB:56:74:37:64:3C:B9:4B:77:1A:62:09:48:BF:4B:E9:6F:B3
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer:       /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial:       019D9962D7114449BD86FA88ABD6BDB938AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number:          082D
Signing time:             Fri 17 Apr 2026 03:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:24 +0000
Files and hashes:         1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: gUKtAbr08FTAWaNNlHd2aCCX56YFR2qAcNz5cO3zT6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:d7:11:44:49:bd:86:fa:88:ab:d6:bd:b9:38:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
        Validity
            Not Before: Apr 17 03:01:24 2026 GMT
            Not After : Apr 18 03:01:24 2026 GMT
        Subject: CN=012ecb567437643cb94b771a620948bf4be96fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:57:02:41:fc:fc:04:ed:ab:73:5d:34:28:
                    58:65:58:d7:14:2f:0d:3d:cd:ea:cc:7f:94:b6:ba:
                    56:73:d6:75:ea:6c:35:52:53:3a:9c:3f:f3:bd:ef:
                    82:d2:c7:65:18:05:2a:8d:5c:e9:05:31:7a:18:50:
                    7c:81:32:32:4e:d2:c3:6f:df:a2:a0:50:96:60:aa:
                    2f:19:28:d2:44:f8:5b:50:5a:69:66:24:51:17:45:
                    dc:a9:a6:e4:6d:b9:40:70:16:e6:20:ef:31:76:19:
                    6f:bd:72:a2:ba:93:2e:f1:0f:29:76:b0:76:ca:87:
                    53:6a:c0:86:48:16:ed:ef:0d:bd:da:1d:e9:02:46:
                    f7:86:c2:92:af:e5:b2:3f:e8:99:34:13:70:31:3e:
                    53:ac:ef:2c:74:99:a6:b2:4a:9d:d2:9a:78:02:89:
                    24:cb:d0:57:48:76:d8:29:08:d2:54:d9:aa:63:c8:
                    47:7c:86:f6:2a:1c:c4:27:bd:d8:3c:ce:ac:58:1f:
                    1f:4d:48:2f:c3:c2:7b:00:3f:a8:f5:ad:58:83:33:
                    f8:34:fd:a7:7b:d8:22:68:94:fe:29:29:e4:73:58:
                    9f:8f:08:f1:7d:2c:2c:75:85:0e:f3:67:b7:66:5d:
                    66:76:b6:c9:db:54:4e:ea:09:ba:0d:25:b7:79:e4:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2E:CB:56:74:37:64:3C:B9:4B:77:1A:62:09:48:BF:4B:E9:6F:B3
            X509v3 Authority Key Identifier:
                keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:14:66:f9:2f:14:5d:ed:b4:5a:c1:f6:55:a1:12:7a:51:db:
         02:34:1a:2f:1c:b4:eb:29:7e:e7:90:0f:ea:c8:5b:a6:60:c3:
         a0:93:c6:0f:4d:b1:01:ac:01:37:18:3d:7a:92:67:fd:9a:48:
         1f:3e:50:25:04:99:54:52:a3:5a:94:7a:61:bc:f5:f6:a6:3c:
         e6:4f:ee:f7:11:40:11:56:2d:85:a5:44:a1:60:09:8a:a4:93:
         d9:f3:2b:2c:09:12:66:0e:d1:cc:a0:14:1a:97:21:f9:87:ab:
         65:fe:49:8d:0a:12:81:94:6c:16:5e:31:7d:2f:ff:5e:9e:be:
         8b:63:a2:86:51:96:b7:9a:be:99:68:bc:14:74:75:93:fd:c6:
         96:4b:b3:5e:bc:2e:b9:25:de:d7:68:d2:78:6e:ee:bb:dd:38:
         61:93:27:87:e3:d3:d5:cd:b7:79:a0:42:4a:7a:4c:97:a0:c3:
         e9:3c:b2:5a:60:9f:12:a6:d7:86:ce:f8:b9:c3:4b:06:16:45:
         f0:3f:ad:bc:04:e8:62:2d:e7:07:78:78:75:82:fb:0a:3f:8c:
         2e:ce:09:4d:21:e0:4c:07:63:8b:ab:8d:57:4f:15:ff:20:bb:
         4f:1e:65:14:59:a5:7c:79:c8:62:eb:b9:bf:8f:0b:7b:5f:dc:
         ec:cc:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:54 2026 by rpki-client