Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File:                     RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier:          U2DKWczFtDQELv1jQrrSYI1v3k09urnQPkHuuPmPV/o=
Subject key identifier:   1D:4C:0E:DF:80:81:35:56:7C:93:9E:CC:FA:46:17:55:E5:6F:6C:70
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer:       /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial:       019CAB34356A578628C51DE3611A3BE1D193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 21:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:51 +0000
Files and hashes:         1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: PL0iZhV0VugZ7SFHA4qUSAycRB2PK1soAoyOu9iZTqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:35:6a:57:86:28:c5:1d:e3:61:1a:3b:e1:d1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
        Validity
            Not Before: Mar  1 21:00:51 2026 GMT
            Not After : Mar  2 21:00:51 2026 GMT
        Subject: CN=1d4c0edf808135567c939eccfa461755e56f6c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:9e:28:5b:8a:09:45:5c:13:02:16:cd:62:
                    b4:8c:50:8b:e9:af:65:81:e2:77:89:da:a9:cd:dd:
                    30:ad:c8:a2:79:f0:19:3c:26:38:30:f9:f5:6e:28:
                    37:2d:85:72:61:a3:07:52:37:5a:b5:52:34:84:5a:
                    00:d0:3b:09:f2:d7:52:a3:d9:7a:f5:be:14:75:0d:
                    5e:d2:47:23:aa:1d:32:0f:fa:bd:b5:e0:a8:bf:42:
                    d9:0c:55:9e:ef:8a:59:ff:e0:ba:74:74:5e:1c:a6:
                    47:fe:87:57:03:79:77:a6:8d:c3:74:3c:ba:41:ed:
                    79:b9:ef:b3:73:e6:ce:5f:92:9f:7e:a9:81:05:8c:
                    65:33:7c:af:72:91:05:2d:f0:a5:0b:42:95:91:cb:
                    f3:b1:87:c1:74:b2:26:1d:31:27:81:61:dd:27:87:
                    a4:17:c8:d8:29:c8:88:d8:0c:23:08:3b:99:70:69:
                    8f:58:28:23:13:7e:c3:f7:20:a6:68:75:f7:6d:5f:
                    35:bd:e3:ed:3d:f0:51:0c:a3:ee:3a:d7:0a:6f:b8:
                    0b:7c:6d:0c:95:9a:08:01:1f:78:1b:9b:47:c7:98:
                    c9:2e:3b:b5:98:78:1c:17:98:67:35:0c:fd:a9:0d:
                    b5:12:72:e6:98:cd:d2:11:3b:4d:f6:28:bd:d8:ea:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:0E:DF:80:81:35:56:7C:93:9E:CC:FA:46:17:55:E5:6F:6C:70
            X509v3 Authority Key Identifier:
                keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:e2:0f:bf:c0:02:01:83:cc:8d:95:16:18:cd:e4:a7:38:
         12:76:a8:9c:bd:63:1b:cd:68:5f:f5:17:e7:43:12:8d:1b:5d:
         d2:59:84:fa:5c:b0:1f:13:d8:87:26:a0:97:3b:f0:df:74:91:
         f1:2f:96:c9:3e:a8:7f:1d:e1:96:79:9e:33:f5:47:31:85:c3:
         25:6a:e4:f1:43:79:1c:b4:14:c4:66:75:1a:94:99:0b:e9:07:
         00:61:71:97:c8:4d:29:09:e4:70:6e:fa:bc:37:a4:bc:49:8c:
         e6:48:8e:b1:17:af:f1:0c:d7:4e:36:d9:22:75:0b:30:7e:37:
         c2:3e:f6:0e:8d:b9:4d:f9:c9:a3:6e:3a:39:58:ba:39:9b:ec:
         0b:2a:81:89:ca:c8:e2:75:0d:10:07:4d:d0:13:fb:03:56:a8:
         32:20:e7:fb:4f:1e:c5:a8:48:44:af:fd:dc:32:18:4c:34:8d:
         89:7c:82:8d:ca:32:84:b0:94:b3:ed:35:a6:78:03:29:e8:3c:
         47:5e:31:ed:a0:d1:1a:6f:15:cf:7b:7a:bc:52:38:fa:1a:0e:
         6d:61:e0:9a:77:38:b7:9f:78:a3:9e:77:bc:c1:fd:dc:cc:7a:
         12:bf:34:e5:37:9f:00:b2:16:a4:84:66:18:36:be:2e:d5:1c:
         78:f2:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:32 2026 by rpki-client