Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          sY3p5ES4yo0KMqRBdC5h8rbpRzpeFtgwhpHRJeaTd1s=
Subject key identifier:   17:84:01:A5:CF:90:53:0A:09:B6:8A:BF:F7:70:00:1A:66:77:D3:05
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       019CAA58AB8552B9D47F00DBF5FD16DEDC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          12CF
Signing time:             Sun 01 Mar 2026 17:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:03 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: qHdeCPnuSG/ttzKHDDqNwdH42ACQPusOktMre8oaq+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:ab:85:52:b9:d4:7f:00:db:f5:fd:16:de:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Mar  1 17:01:03 2026 GMT
            Not After : Mar  2 17:01:03 2026 GMT
        Subject: CN=178401a5cf90530a09b68abff770001a6677d305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:a7:73:2e:6c:ee:17:51:40:43:59:eb:f8:
                    cd:e1:aa:83:d0:ea:4c:64:be:d5:d3:ed:26:ba:55:
                    e3:94:e0:86:5e:ca:0d:5d:1d:3b:ae:9c:c5:2d:72:
                    36:63:d9:95:46:71:b7:7f:7b:e3:5b:60:7a:c5:8d:
                    55:ea:c2:b4:f0:b0:0c:ce:5d:50:54:b2:dd:40:43:
                    91:59:11:c3:6b:0a:b6:56:10:fe:e0:5c:29:e5:fc:
                    f4:fd:30:e4:0f:25:63:c6:45:13:79:52:75:42:b1:
                    f3:d6:c4:e5:67:d0:08:e7:87:c6:69:0a:55:2c:8c:
                    fd:95:0c:18:c2:e9:04:8d:78:e7:55:9a:1a:89:6b:
                    8f:e2:79:f4:ea:30:a9:59:f8:cb:db:4c:cd:60:df:
                    a1:4d:75:9b:8b:b7:a9:5b:f1:c2:42:e2:40:dd:3a:
                    40:cb:5d:24:ca:f2:d8:57:43:f3:52:7d:23:22:4a:
                    6b:58:9f:8c:c3:79:32:1f:27:b6:b2:4a:0d:3f:cf:
                    f0:05:20:d8:af:79:1f:59:77:b3:8b:1f:90:40:3a:
                    61:a7:5c:30:d2:5d:28:27:69:7f:e3:2f:c2:af:5b:
                    ac:da:a6:92:88:cc:7f:a7:57:b2:e9:c3:d1:45:b9:
                    c7:12:92:6d:39:80:f7:01:d4:a3:61:98:ff:ed:42:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:84:01:A5:CF:90:53:0A:09:B6:8A:BF:F7:70:00:1A:66:77:D3:05
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:69:77:96:c7:db:ef:78:d3:f5:94:88:8b:bf:58:46:ac:62:
         e0:1b:10:34:84:4e:a4:2d:ac:a0:52:5d:d0:58:19:33:b0:31:
         e9:3d:c6:1e:d7:84:2e:5e:fa:71:f5:3d:32:21:63:ac:dd:b4:
         c5:d0:70:9f:aa:3c:c2:ae:79:c3:63:f0:66:1d:0e:55:37:47:
         65:05:8d:ee:8d:be:6f:53:4d:3b:13:ad:19:43:e6:d1:ee:d0:
         49:34:e8:a6:f2:e9:8f:bd:35:cb:1e:5e:4e:a9:e6:1b:89:8c:
         4a:fa:80:19:b2:67:28:ea:b4:82:73:40:7f:39:de:35:ce:eb:
         e4:28:19:7b:9d:a1:3f:c6:15:96:19:39:56:01:bb:64:26:39:
         53:e6:4a:f2:9f:1a:6e:e0:3f:e3:dc:e4:d0:6a:91:bc:75:9b:
         3e:5a:54:59:8a:b3:09:38:5a:85:e7:1a:82:26:b0:a1:8a:80:
         24:9f:3c:7b:1f:72:fc:57:75:07:53:d3:9d:9f:ca:4a:fc:0c:
         04:83:87:4c:9f:68:ca:4d:00:67:cd:c6:2a:1c:5c:0f:3d:d0:
         cf:fa:7b:c2:85:06:35:08:4c:62:c9:dc:94:b0:31:55:c8:3b:
         7e:88:40:49:fb:ca:2e:ed:64:30:d6:ec:c4:30:11:04:18:2b:
         d1:38:19:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:15 2026 by rpki-client