Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          wDmQUvZByOoHTwqTFnLITW3pc5xxbSL3UfHLW0Em09w=
Subject key identifier:   18:1E:B2:B6:19:6D:DC:03:77:B3:96:43:11:D0:A4:10:6F:9C:C3:B1
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       019CA9B35DF882D984368BD2F24AC09471DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          0E64
Signing time:             Sun 01 Mar 2026 14:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:30 +0000
Files and hashes:         1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: Yzqt8tGCKX93g0H6ITPqco78PWRzeXjuE6khpukReEY=)
                          2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:5d:f8:82:d9:84:36:8b:d2:f2:4a:c0:94:71:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Mar  1 14:00:30 2026 GMT
            Not After : Mar  2 14:00:30 2026 GMT
        Subject: CN=181eb2b6196ddc0377b3964311d0a4106f9cc3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:09:59:94:99:2b:35:bb:03:a5:98:e5:da:
                    7b:6f:b7:89:a7:8c:81:a6:aa:84:be:a3:bd:39:28:
                    cd:30:10:79:41:7f:c3:16:23:a2:59:b8:3d:30:fc:
                    05:bb:8a:a5:da:bf:43:8d:ea:2d:58:fc:93:f3:c3:
                    9e:23:4a:92:fa:52:e1:79:d8:f5:94:c2:4b:7d:63:
                    06:7c:95:54:cf:db:2c:53:7d:06:87:03:31:a4:d3:
                    b8:fc:28:a2:b2:b6:16:0f:5c:ea:6d:6c:36:de:f9:
                    6b:9e:40:7d:b8:bd:61:3e:2b:3b:7f:40:c0:18:68:
                    e6:6b:e6:6b:7c:f0:38:d4:e6:e2:ee:52:87:49:3e:
                    82:65:9b:4c:96:13:29:dc:12:a0:fb:23:09:5d:72:
                    ed:d4:05:ef:08:6c:78:1e:7a:c6:4f:02:cb:65:ac:
                    6f:30:50:de:d8:a9:28:fd:5c:e0:7c:28:c3:46:03:
                    32:85:08:3e:17:a9:c2:1b:86:1f:4f:8c:dc:92:a1:
                    dd:24:01:c0:ab:ce:a1:f3:3b:c0:39:cb:fb:fe:02:
                    d0:bd:e1:f4:a9:fb:9f:67:0a:bd:f0:06:61:d6:31:
                    69:ab:6a:46:3a:7d:12:ce:cc:fc:bc:1f:9d:4a:58:
                    5f:7d:55:58:23:6f:73:8a:ac:1d:28:7f:f5:ca:54:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1E:B2:B6:19:6D:DC:03:77:B3:96:43:11:D0:A4:10:6F:9C:C3:B1
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:34:f3:1c:fc:9c:f9:56:2e:87:24:01:62:c9:79:57:8d:7a:
         2f:e3:fd:a7:b4:a1:91:b8:ff:b0:46:da:2d:89:4a:ac:48:01:
         18:53:e5:92:73:d4:68:a7:da:ce:93:a1:98:0c:bd:4c:21:03:
         f4:8d:ab:2c:9f:30:62:60:09:e6:b6:e4:5c:6f:b6:32:3f:a0:
         9a:b4:b2:bf:aa:b7:77:be:7d:16:6a:85:c2:0a:6c:19:d4:d9:
         dd:99:41:7e:f1:2f:db:9f:2e:74:05:29:ea:cf:3d:cb:5d:0f:
         da:2c:eb:91:23:30:1d:9f:d0:c4:58:4c:07:85:7c:58:72:07:
         7f:88:ac:0d:be:8e:96:12:6b:2e:06:3c:b5:48:5c:2f:6a:4a:
         a5:a6:38:ea:95:66:20:79:31:b4:b7:2d:a2:37:33:9b:de:f3:
         9f:74:f1:4a:af:12:3f:19:c8:6c:18:f1:d8:4f:db:e1:3d:f0:
         63:40:42:1a:a4:fe:fb:2f:a6:e5:ad:30:07:0e:1d:a6:8b:a7:
         96:01:ec:b1:0b:30:d7:25:3d:2a:a3:2a:3f:5e:da:a9:cb:1d:
         91:37:83:96:ec:ea:7c:ae:b0:7b:f6:b2:06:09:dd:10:72:77:
         c8:42:ec:66:3d:a9:f4:de:0e:34:8c:26:75:80:8f:3c:f5:cc:
         6c:b8:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:28 2026 by rpki-client