Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          NkngX19oNfhiFn+FjgkCSlQZoeokYfFbWATMWqRiaXY=
Subject key identifier:   DB:10:7B:32:83:47:91:C4:ED:31:76:3D:E2:D9:47:30:67:35:AD:CE
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       019CAE35094B3E5C62AC561F034AF7211EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          1616
Signing time:             Mon 02 Mar 2026 11:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:37 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: bISS6GAbsqfbWO0C8RCSImysKTftii4aWz0JfwYasP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:09:4b:3e:5c:62:ac:56:1f:03:4a:f7:21:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Mar  2 11:00:37 2026 GMT
            Not After : Mar  3 11:00:37 2026 GMT
        Subject: CN=db107b32834791c4ed31763de2d947306735adce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:36:1a:47:ee:ca:cd:f9:90:ce:21:bc:5e:
                    26:3c:c3:fe:32:28:41:8c:e8:47:f0:a1:01:e0:bf:
                    c6:68:e9:99:97:24:91:6f:0f:cc:f5:f9:c3:5a:ba:
                    2c:a6:1a:3d:b3:b6:9d:d2:e3:24:79:a1:95:59:a7:
                    c1:fc:b4:ea:b1:9e:a1:77:02:95:1f:4b:07:dc:08:
                    a0:3f:90:e6:4b:72:95:fa:33:6b:c7:a9:dc:61:56:
                    0a:cb:fc:fb:a1:8a:0b:4b:28:5a:f3:d2:db:b4:4a:
                    ee:b3:a5:30:a3:05:b5:4a:bd:81:c0:f0:21:32:a6:
                    8c:a6:90:f9:b1:01:4b:bc:c1:2b:60:d0:44:fc:79:
                    b9:37:dd:47:2c:7b:c2:1f:d1:15:e6:01:86:0d:a9:
                    a7:cc:35:72:97:47:7a:9b:ac:37:f1:1a:54:58:9f:
                    88:9e:f9:63:2d:02:66:3d:2c:14:7e:3b:94:83:3d:
                    31:9c:a2:68:6b:db:1a:29:95:ef:72:72:09:58:c2:
                    0e:2d:dd:43:4b:a6:00:e6:31:a4:d1:a4:37:aa:2b:
                    be:b6:07:76:9d:64:d5:9f:c8:0c:30:30:64:65:b6:
                    ae:8c:aa:ff:fe:e1:8c:7f:c3:9c:ed:35:f9:53:b1:
                    b9:66:f8:1a:fd:b7:28:8d:7f:c4:82:b6:b0:04:4a:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:10:7B:32:83:47:91:C4:ED:31:76:3D:E2:D9:47:30:67:35:AD:CE
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:65:c6:dc:e6:4e:b7:b8:d5:01:63:0b:53:ef:34:8b:f1:
         50:01:b1:3a:06:d0:c1:45:02:3b:a5:41:3d:47:ce:11:34:11:
         c9:ca:bf:56:41:f9:3f:0c:51:b8:14:62:0b:dd:aa:dc:25:e7:
         41:7e:dc:ea:67:22:d0:41:92:08:00:06:71:a0:4f:a6:48:03:
         0c:0e:3b:ed:7e:51:a8:ae:93:94:45:e6:09:3b:a8:1d:31:57:
         cb:96:79:6a:72:5c:7b:ce:41:8e:0d:22:d6:38:af:3f:5d:a0:
         da:ec:22:79:b8:fe:b1:19:66:64:f4:57:7d:10:1e:d8:c4:cf:
         48:13:f7:16:72:6f:d9:b8:41:5b:a0:ab:fd:7f:ca:11:6e:e4:
         77:2b:11:7f:55:9f:34:43:49:0c:3b:a2:d3:be:77:e5:48:48:
         78:d5:10:c8:ed:11:bf:85:59:f9:5e:07:51:a3:b1:38:79:10:
         4d:a0:e6:f3:02:4e:8a:b0:91:6b:15:5c:7f:06:e7:63:f4:fe:
         08:76:64:31:b0:8f:4f:f7:56:d9:38:93:06:d7:bd:14:67:13:
         3b:f5:12:57:70:1d:ff:90:3b:43:64:a1:c1:aa:c3:8e:f5:c1:
         49:d6:0b:45:02:d9:45:26:e9:c6:5c:b1:f8:99:4b:0b:df:16:
         14:7d:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:20 2026 by rpki-client