Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File:                     tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier:          BsEUOb9iBetyrv+NN89/5GQnbItzzR/UCvarJ/lh+vk=
Subject key identifier:   12:46:0F:5C:EB:BF:62:4A:21:E4:67:49:9A:0E:F1:73:7F:E3:20:29
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer:       /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial:       019CABD99B967B3253468220BB10EF51C248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number:          1841
Signing time:             Mon 02 Mar 2026 00:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:30 +0000
Files and hashes:         1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: TNy+gbQ57+nEsN2GYBFohbRuoZEFBoKnOT7gVcl7YYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:9b:96:7b:32:53:46:82:20:bb:10:ef:51:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
        Validity
            Not Before: Mar  2 00:01:30 2026 GMT
            Not After : Mar  3 00:01:30 2026 GMT
        Subject: CN=12460f5cebbf624a21e467499a0ef1737fe32029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:d0:49:c7:54:14:3d:ca:d9:5f:f2:7b:b5:
                    a6:cf:63:9e:f0:a2:e6:2d:a8:99:9b:4f:1a:ad:ea:
                    ef:c6:b6:d8:75:23:9c:71:8f:77:39:a2:d1:6d:b7:
                    26:f6:bd:ec:36:f9:6a:f2:e9:97:77:1c:b4:58:8c:
                    f7:17:eb:f7:72:37:08:13:54:50:8a:e2:80:0d:a0:
                    f7:15:76:f0:d3:8a:da:08:e5:2e:89:c9:07:71:7d:
                    eb:81:7e:6f:c8:64:50:53:c3:c2:b4:45:1c:50:e3:
                    98:4c:bb:62:b4:8b:5f:de:ff:02:03:d8:aa:a9:0d:
                    52:99:35:33:72:14:86:77:9c:15:a6:ef:4d:fe:05:
                    c6:67:41:23:5c:fb:08:0d:47:48:4b:7b:94:cb:7f:
                    3a:33:0a:a2:b7:f7:dd:f2:fe:19:b4:70:21:db:74:
                    6a:3c:46:53:c7:a1:ee:67:b1:60:3a:81:17:b2:0e:
                    86:25:a8:30:12:d8:67:4d:87:25:f3:16:e7:a7:3a:
                    b6:b9:9a:12:5c:6d:a7:be:46:d6:8a:23:70:9f:58:
                    d9:e6:62:4f:0e:e1:8d:34:0e:ed:52:40:25:4f:59:
                    47:9e:c2:46:71:28:0a:11:0e:96:78:a1:58:d2:fa:
                    c5:6c:73:4f:ac:05:dc:5c:ea:4b:3d:f7:96:f3:a7:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:0F:5C:EB:BF:62:4A:21:E4:67:49:9A:0E:F1:73:7F:E3:20:29
            X509v3 Authority Key Identifier:
                keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:d3:97:74:b7:57:28:8b:0c:d8:90:24:23:fe:a1:de:e4:
         66:50:8f:90:72:94:44:8d:5f:93:95:7e:c8:90:da:2f:1d:9d:
         c0:c2:b1:ce:57:0a:2d:c4:95:45:ba:38:c3:6c:b7:bb:50:5c:
         f4:3e:77:16:3c:d4:ed:af:b8:5c:5c:6f:7e:78:96:26:80:54:
         e7:f9:02:ff:32:ed:f1:ef:48:1b:3f:6a:64:19:54:09:ab:2a:
         b8:1b:27:25:7b:c2:8b:45:59:fb:d6:f0:0d:b2:d0:2e:04:01:
         3e:e6:86:0c:78:57:69:27:62:48:a4:54:1a:ac:25:87:79:c6:
         16:1e:fe:a8:46:82:af:54:81:5b:70:7e:43:da:03:5b:ce:7d:
         f8:c9:61:d5:fa:36:7e:5a:4b:3e:10:9a:5b:ba:70:e1:12:7b:
         7b:fb:fd:5b:fe:11:d1:73:6f:ec:8a:5c:ea:53:8c:e6:e5:8b:
         1c:f7:f4:45:08:da:68:8d:43:78:19:41:cf:2d:98:1d:8e:d3:
         10:dc:2e:1a:f3:eb:a5:80:07:7c:75:3c:50:f5:59:4f:54:0e:
         b2:b3:2b:28:03:e1:36:d2:04:07:37:53:31:92:e7:00:d9:b6:
         1c:c0:d7:69:9f:55:5c:30:6a:5d:7c:57:80:29:f2:29:77:36:
         57:64:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:23 2026 by rpki-client