Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          llsTFzeHfgCusna9oMf6H1UcvzP2sW7w0cRCL8DD7J8=
Subject key identifier:   47:1D:B9:B3:F6:E4:48:32:94:47:C4:EF:76:BA:E8:12:74:A0:06:B1
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       019CAE350A610B26D5FD65E91D8EF93C6FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          0503
Signing time:             Mon 02 Mar 2026 11:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:37 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: IhEq3mHOg7cJE2px6AqVo/cZOAycUX2TJh20IbSrn8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:0a:61:0b:26:d5:fd:65:e9:1d:8e:f9:3c:6f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Mar  2 11:00:37 2026 GMT
            Not After : Mar  3 11:00:37 2026 GMT
        Subject: CN=471db9b3f6e448329447c4ef76bae81274a006b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:95:ea:a1:49:88:1c:87:69:6e:a3:2e:4b:
                    f0:56:6d:d8:86:b3:c6:4b:80:64:5f:70:f1:99:3a:
                    46:e4:ec:f4:d4:9a:f6:7a:f1:d5:c4:6e:1b:af:cc:
                    8d:3b:9e:47:a6:d7:25:54:42:9f:d3:d8:c1:c6:c3:
                    e7:26:6a:bc:ec:d7:0e:f4:35:df:bb:15:97:c8:dd:
                    4d:f5:2f:bf:69:1c:5c:76:3a:ec:12:23:d0:f7:4b:
                    23:dd:20:22:4a:f9:74:17:16:3e:71:35:34:b2:05:
                    37:cb:4b:16:ff:78:b7:2a:14:b2:86:ef:11:66:12:
                    25:c9:4a:c6:d3:a0:9c:ab:79:95:e0:61:f0:e7:56:
                    93:c6:bb:d8:c1:e0:02:0e:33:40:95:26:68:55:04:
                    c8:59:05:0f:b5:9b:ac:37:3a:00:d5:fc:93:9a:32:
                    4b:94:5e:2a:1e:74:87:56:b4:f7:1c:fe:ca:21:ba:
                    c4:4e:60:b9:45:fd:10:c0:82:9c:32:2f:8a:8d:c6:
                    95:04:da:3d:aa:f1:74:fa:b9:8f:d2:c8:03:d6:97:
                    68:6c:55:fe:3b:08:8c:e3:11:52:0a:d5:0d:37:78:
                    01:d4:f1:59:30:6f:4c:8a:e7:7d:e3:f1:64:9e:af:
                    bb:48:6a:ee:8a:85:7d:76:61:ef:6d:b9:9b:4f:7e:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:B9:B3:F6:E4:48:32:94:47:C4:EF:76:BA:E8:12:74:A0:06:B1
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:8f:11:ab:18:3d:1a:3d:41:ce:aa:a9:ac:d9:5a:11:3b:
         05:c7:dd:01:5f:b5:5a:56:41:20:f6:8c:54:56:81:22:1c:fa:
         e6:fa:15:d1:72:0b:5a:d4:1c:47:2b:dd:13:2d:c6:91:cd:09:
         00:0a:00:96:93:c5:0d:3f:fe:58:e7:b3:c8:66:2c:1c:b3:1f:
         14:f6:56:0a:c8:c2:43:d9:c8:71:1b:32:59:32:70:a9:26:93:
         58:bf:8f:e0:3a:fd:7f:cc:be:64:24:5c:d1:f7:20:4b:e8:42:
         2a:67:23:80:b2:a0:35:3d:5f:cc:b3:28:5b:28:6f:d5:59:f7:
         3f:00:de:ec:79:ba:3d:da:7f:9c:b7:a5:1b:1d:da:22:52:c4:
         5a:c8:37:03:85:4e:56:cf:6f:d5:8d:f9:66:14:64:b8:f1:99:
         03:1a:d1:fa:3e:02:20:62:98:3a:c0:22:3e:26:7b:4b:b1:b3:
         42:a8:10:5d:f6:0c:66:e8:09:af:04:73:dc:c7:ae:12:a7:5d:
         27:94:01:17:e8:9c:c4:41:64:8e:ef:0f:42:4f:42:84:75:95:
         55:6d:3f:87:1d:1d:61:aa:bd:5b:58:df:a5:20:5b:a0:47:ac:
         75:6d:f8:34:2b:e0:83:3e:d5:f1:b0:f4:a2:a9:24:aa:be:e9:
         7b:46:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:26 2026 by rpki-client