Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File:                     J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier:          /H+0hYo6gfEITONeRDTQ5PWM1laXluJw0HsdnClvFls=
Subject key identifier:   57:C6:A0:F3:6B:CA:88:57:8A:F9:3A:12:7D:00:1A:E3:B4:17:E3:4A
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer:       /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial:       019CAAC643618404513A3972A8E13D9EC1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number:          1414
Signing time:             Sun 01 Mar 2026 19:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:45 +0000
Files and hashes:         1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: r3MNPa4ziYs0oBGeBU7WABcHry1F6XDuxOWrfJB7Eos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:43:61:84:04:51:3a:39:72:a8:e1:3d:9e:c1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
        Validity
            Not Before: Mar  1 19:00:45 2026 GMT
            Not After : Mar  2 19:00:45 2026 GMT
        Subject: CN=57c6a0f36bca88578af93a127d001ae3b417e34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:ac:9f:b9:c0:a2:85:2e:c5:37:4a:9d:e3:
                    c7:e2:21:d9:54:56:1c:07:51:8a:2f:f4:90:d0:b5:
                    be:0e:04:28:6a:fe:06:6b:01:dd:4b:45:f7:06:d0:
                    37:c4:6f:fe:57:2c:69:bc:e6:06:69:59:29:07:2f:
                    ac:20:9a:c0:7c:65:81:e0:7d:f7:8f:bb:37:f9:d4:
                    ec:4c:19:2b:59:d2:48:66:3b:ff:a5:ef:be:82:23:
                    2f:73:d7:05:9f:25:fe:82:a0:43:f0:8b:b1:0a:1d:
                    6c:4b:7d:c1:f0:b4:45:d8:0c:2e:b4:65:67:f2:84:
                    8e:96:41:21:34:07:14:3e:85:e2:b4:10:c2:91:ed:
                    9f:ed:13:2f:6f:be:e6:f2:33:b3:17:43:b7:59:12:
                    ad:bf:a9:03:97:2c:6d:d5:6f:88:f6:45:92:eb:b0:
                    d2:b9:95:fe:a8:ea:aa:7e:24:7d:0c:67:a2:0d:c0:
                    4b:7b:28:c3:6f:92:5b:37:f8:10:47:da:c3:fe:e3:
                    56:dc:13:24:f4:ba:b2:77:a3:f3:08:51:cb:67:05:
                    37:79:8f:31:36:c6:0c:62:b2:0b:d4:59:0f:87:fa:
                    fa:c5:5a:75:2e:e3:93:26:80:b7:d3:e0:5e:1b:13:
                    e2:29:cf:6b:4a:6d:19:73:8d:d9:e8:5d:ef:ca:06:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:A0:F3:6B:CA:88:57:8A:F9:3A:12:7D:00:1A:E3:B4:17:E3:4A
            X509v3 Authority Key Identifier:
                keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:66:08:0b:51:c0:4b:e9:d1:ce:94:e7:e4:19:91:c6:53:8d:
         d2:45:e7:44:cb:a5:24:22:17:cd:c1:60:2b:fb:0d:e6:eb:1f:
         bf:58:4d:5e:bf:43:ed:13:c6:79:96:23:07:a8:e6:44:bb:28:
         67:88:c0:98:32:70:d6:d3:10:4e:26:5d:28:0c:e3:44:95:83:
         93:b9:60:c7:df:12:f7:2d:d6:6f:97:e0:08:75:54:a7:57:bf:
         62:86:51:df:34:19:d1:64:d0:d9:a0:99:69:8f:ec:a3:7a:a3:
         90:e2:fa:77:f2:94:f6:54:71:94:91:71:e2:57:c1:48:00:98:
         f5:c8:e3:be:06:ee:82:20:26:75:9f:28:3d:de:d5:51:e5:2b:
         68:a3:a4:b6:98:34:50:c8:8b:89:19:63:f9:8b:5a:df:78:c5:
         2d:6a:4f:f6:58:e4:dc:8e:92:33:3a:0d:a6:2b:be:d4:a1:de:
         26:7f:82:de:21:23:b1:2b:b2:af:61:27:0f:62:a9:85:41:ea:
         7c:88:b0:38:1a:52:04:01:9a:ee:40:4c:59:d4:bb:eb:a4:4e:
         58:4f:48:8b:1c:5d:a7:a3:e7:bc:79:71:f5:22:c4:e4:e4:03:
         dc:fb:9f:2d:a5:b4:cf:c5:91:5d:b9:ae:48:d6:48:4b:a7:94:
         78:d1:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:27 2026 by rpki-client