Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File:                     VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier:          fa+j3LYWUZALqx0JLzzDSzqXu7CKS0VUvslT2lNvzWA=
Subject key identifier:   57:8F:F7:A8:37:19:21:79:60:C2:54:78:6D:96:21:F7:DC:94:82:E5
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer:       /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial:       019CAD5A2485EC74B65F56009FB758795BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number:          0B36
Signing time:             Mon 02 Mar 2026 07:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:31 +0000
Files and hashes:         1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: ZzKMlhs5hMvf7Urg07g1XrDNoAYQudrL35X0ehTpI5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:24:85:ec:74:b6:5f:56:00:9f:b7:58:79:5b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
        Validity
            Not Before: Mar  2 07:01:31 2026 GMT
            Not After : Mar  3 07:01:31 2026 GMT
        Subject: CN=578ff7a83719217960c254786d9621f7dc9482e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:0c:87:1a:82:32:e7:2c:1c:e9:57:31:64:
                    eb:8b:a6:1e:db:ee:d6:b6:78:25:5e:49:d1:d6:3d:
                    75:30:d6:9b:d2:54:b9:fa:e7:2c:6d:ef:42:b2:70:
                    45:b9:98:7d:83:83:14:4b:a4:f0:46:0d:24:c2:b1:
                    ab:5b:7c:95:9d:25:95:c8:4e:70:a7:0d:90:7e:b3:
                    74:fc:9b:6b:71:9f:20:de:6f:39:8b:17:ee:7c:c2:
                    73:47:05:50:c4:a3:69:33:7d:19:30:01:d6:b2:05:
                    0b:5f:89:c9:d8:99:be:4e:e0:63:70:06:44:82:80:
                    32:a3:16:c2:25:12:82:66:c6:60:17:4a:1d:62:37:
                    cb:53:62:e1:2d:0e:55:60:01:6a:30:76:46:03:1f:
                    04:1a:95:dc:b1:5e:b0:b4:85:66:30:4a:87:77:d3:
                    c2:dd:0e:39:41:bc:5f:75:e3:ed:88:12:93:b1:eb:
                    fa:a1:fd:36:5f:93:e5:11:14:2f:5a:ed:0c:37:9d:
                    2f:88:2a:10:57:87:82:d3:92:59:36:3f:e9:e7:44:
                    72:98:b8:a6:bb:5c:b7:a8:76:4c:31:d6:0f:85:c5:
                    20:86:3d:31:d1:cf:c8:09:6e:da:2d:4a:d3:1e:e7:
                    a7:11:57:47:b7:d7:b1:55:b3:0b:f6:75:81:4d:5d:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8F:F7:A8:37:19:21:79:60:C2:54:78:6D:96:21:F7:DC:94:82:E5
            X509v3 Authority Key Identifier:
                keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:09:f7:50:d5:2b:96:b6:ca:48:57:83:32:62:f5:6c:f7:99:
         bb:04:b2:63:1d:82:7f:30:70:bc:66:a1:41:33:45:eb:1c:ad:
         07:6f:88:c3:6c:d5:99:d6:fe:a5:4d:71:e6:22:0e:e0:84:bf:
         4f:32:0e:8a:b5:a2:cf:1b:53:4b:ac:29:51:bd:11:93:47:bd:
         d0:98:59:f8:bc:86:10:c3:7a:f9:ec:ad:25:69:de:49:2f:8e:
         ed:e4:a8:78:ae:b7:3c:11:6a:1a:3a:17:d7:f9:c8:44:d2:13:
         d8:08:d3:b8:e5:ed:ed:60:b0:1c:85:50:ac:5f:ef:01:4f:38:
         f1:1d:b5:00:16:07:7b:cf:c6:32:19:44:c0:0a:62:79:6a:53:
         3f:3b:8a:a4:55:a6:45:61:42:91:71:e2:b0:64:f7:cf:19:d4:
         e8:f2:5a:b2:44:96:d6:ac:f4:4c:f0:e3:ed:ae:99:07:b9:c5:
         b3:f4:be:32:8e:98:b9:63:8f:ac:98:27:d9:e0:0a:0f:f1:61:
         78:09:47:cf:5d:06:c0:c5:13:82:1c:b3:59:28:ae:b4:74:83:
         74:fc:e4:3a:a5:90:f9:7c:33:4f:b6:d8:d3:8a:95:0d:a9:03:
         36:ec:15:86:e6:f7:4c:31:e6:cf:05:99:98:8b:68:90:f3:f0:
         e6:ff:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:42 2026 by rpki-client