Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File:                     savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier:          9pXUDA27DS3ANK2TKST/lr4mSvdK/SrXqoITuNWbHBI=
Subject key identifier:   76:05:9E:17:BE:1B:A7:07:3B:2A:8D:B2:86:9A:7C:8F:A8:1F:48:BC
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer:       /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial:       019CAEA3E410CC8DEEEBFE20465824BFF456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number:          061E
Signing time:             Mon 02 Mar 2026 13:01:42 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:42 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:42 +0000
Files and hashes:         1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: Naekizy57yEcJwPDo8dK4GbyChe2OCeB4FvAyJ3e578=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:e4:10:cc:8d:ee:eb:fe:20:46:58:24:bf:f4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
        Validity
            Not Before: Mar  2 13:01:42 2026 GMT
            Not After : Mar  3 13:01:42 2026 GMT
        Subject: CN=76059e17be1ba7073b2a8db2869a7c8fa81f48bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:82:b4:ff:63:c2:c0:85:a2:f1:a8:b5:11:
                    0f:dc:0d:91:98:1b:43:15:6f:85:d7:e9:b2:e7:34:
                    62:5f:5a:b1:e1:0f:28:fc:d4:55:84:dc:f7:c6:25:
                    90:76:3c:4c:6f:5a:06:9b:05:f5:5d:59:69:fa:c2:
                    fe:e8:73:c1:26:80:0b:7a:f9:a1:a0:22:7f:43:eb:
                    6c:42:49:69:df:27:b8:90:13:dc:39:fd:b2:d8:a6:
                    53:7e:91:07:ca:68:07:1f:90:0b:f2:29:37:38:cc:
                    94:02:1b:33:be:4f:8d:39:51:bd:7a:87:d1:bd:70:
                    56:d8:53:83:ee:d4:b1:a7:c0:45:1a:26:0c:d1:1d:
                    ba:81:79:b9:cc:d5:8c:9b:27:5f:b0:90:ba:69:01:
                    04:3d:a9:bc:f6:85:88:3c:e8:3b:ef:7e:69:ca:8f:
                    d3:e5:54:06:84:88:01:b0:76:14:c3:fc:95:50:f5:
                    7f:0c:d8:97:cc:2e:90:8f:3d:19:7b:44:55:b7:3a:
                    11:02:97:ba:94:d7:69:67:53:c0:61:3c:a5:37:92:
                    7e:00:0c:ce:6a:02:eb:ba:64:75:d5:98:a6:09:86:
                    c8:cc:94:99:ed:e4:7c:03:f0:8b:c6:8c:2b:24:4b:
                    21:8f:de:6d:d0:91:f4:b5:dd:34:4d:19:23:ea:79:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:05:9E:17:BE:1B:A7:07:3B:2A:8D:B2:86:9A:7C:8F:A8:1F:48:BC
            X509v3 Authority Key Identifier:
                keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:8e:11:1e:7b:79:2d:cc:48:b4:b6:79:cc:83:77:bd:28:
         5f:6a:61:9b:02:a9:71:0b:f7:37:49:72:75:cd:57:ac:46:d6:
         08:bb:71:d8:63:b4:a4:0b:db:98:a9:a4:a2:c3:11:7e:98:d9:
         51:71:57:4b:c3:ec:fb:87:1a:93:8b:01:b1:a9:48:18:7b:cb:
         54:28:d9:94:2b:13:6c:33:bb:19:ef:1e:ce:f0:7b:8f:64:42:
         84:a8:e3:6c:ab:d2:c5:65:b4:2e:4b:49:32:79:08:ea:39:5e:
         e8:b0:4f:b6:df:2b:7a:ba:a3:e0:13:12:e3:b5:89:64:3f:8d:
         05:f9:ed:4d:58:4c:00:ba:0a:d9:08:2f:56:45:02:4f:f0:d2:
         3e:b4:f0:13:fe:a8:3e:dd:6a:fb:62:fa:18:42:74:4e:b6:d6:
         bb:6b:c1:8f:b4:c7:ab:91:14:fc:7f:b9:15:e4:f9:4b:74:22:
         cf:b1:6b:20:3b:15:09:08:8e:38:df:22:ae:89:6e:c4:59:cf:
         bb:f1:1a:4e:6e:c0:bc:c2:91:00:35:9a:27:9e:c0:1f:15:5b:
         78:71:d0:d0:f0:ac:d7:a6:0b:ec:ae:71:ff:b4:9d:90:7d:00:
         c4:9f:a5:bc:90:8d:ea:55:b4:04:3b:4f:bd:04:dd:02:f9:b8:
         d8:aa:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:35 2026 by rpki-client