Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          efkPjcTBNVBL8NLP32pifka95HS+rScOp6D1JNRJyss=
Subject key identifier:   5D:5D:88:2D:36:96:0C:40:C8:76:B9:E2:90:E3:05:FD:45:65:99:F7
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       019CA9EB865AB01E19D962FAF56D6C15C13E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          17D4
Signing time:             Sun 01 Mar 2026 15:01:50 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:50 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:50 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: vJA2yr5jHiWhqvK+2Pj/pCxDBFOc01Tl1vPzxUetDtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:86:5a:b0:1e:19:d9:62:fa:f5:6d:6c:15:c1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: Mar  1 15:01:50 2026 GMT
            Not After : Mar  2 15:01:50 2026 GMT
        Subject: CN=5d5d882d36960c40c876b9e290e305fd456599f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:26:b6:2e:00:fc:4d:90:93:04:c3:c1:cf:
                    17:a3:6e:a7:48:57:15:b9:af:0e:f5:67:51:bc:8e:
                    99:51:cc:e1:a9:de:f0:34:3c:48:08:63:c4:d8:0c:
                    5e:d3:11:05:a6:5f:a8:88:74:66:10:8e:a5:9a:f4:
                    cf:6e:49:8a:46:3b:1d:0a:a6:29:10:fc:8a:99:2c:
                    ae:0d:4a:cf:6d:58:c1:30:f8:f7:d6:a0:84:e7:91:
                    2e:1e:5f:26:95:0d:f4:13:7e:f6:3f:a2:10:ea:30:
                    81:15:5a:09:eb:a3:47:82:43:dc:c7:60:f4:59:fb:
                    05:76:96:25:07:63:da:84:30:13:b6:fb:7f:b5:51:
                    79:dd:68:2e:87:54:ae:04:a2:65:97:ec:ad:ef:9d:
                    30:ea:c7:90:f1:68:a4:44:be:97:91:c0:3d:b1:5a:
                    f2:79:99:f9:9c:72:15:fe:3d:4b:39:4d:67:9d:a0:
                    c0:01:ef:74:82:aa:1c:34:fa:e0:1e:2e:e9:1f:b9:
                    29:a5:54:88:80:14:04:ff:84:c0:98:20:4c:a3:42:
                    a2:8b:05:fa:52:6a:78:66:12:f1:2f:2d:33:f0:1a:
                    b0:cf:50:bc:e0:5e:45:02:17:02:74:7c:d5:f8:a7:
                    cd:00:8c:dd:b0:78:1e:f2:e3:c8:fa:73:46:fa:ec:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5D:88:2D:36:96:0C:40:C8:76:B9:E2:90:E3:05:FD:45:65:99:F7
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a3:01:f6:f7:20:43:2b:75:d0:06:63:a3:3b:7e:cf:87:41:
         73:68:32:d2:12:cb:43:f1:ee:f8:aa:d5:d7:19:0e:b9:aa:ba:
         ad:af:27:91:8b:1f:c3:e6:55:3a:0c:ce:57:2c:36:c1:cf:5b:
         7c:ae:67:26:12:5e:e7:49:68:7f:4e:b5:82:d8:6a:dc:01:8f:
         03:12:b0:1c:fb:4a:b7:3c:82:a7:b2:6c:d6:18:8b:11:c6:b5:
         45:d7:19:e4:cb:f2:1f:bd:0c:19:a7:a2:4d:8c:0d:1d:1b:9b:
         e9:4e:b3:11:1d:c1:02:e7:83:1c:67:aa:4b:1d:a4:00:5a:b3:
         2a:cc:d0:90:21:96:91:a3:40:0a:81:42:f8:3a:b1:7e:8b:68:
         ae:c0:75:bd:ff:70:4c:c5:52:64:bf:46:65:11:38:09:0b:b4:
         99:a5:0d:e0:61:86:47:e2:7b:a1:dc:91:67:4c:db:d0:cd:2b:
         44:45:be:98:f8:73:0c:da:b4:68:ba:62:0a:c8:7f:f8:8f:9a:
         c6:a6:78:10:02:60:8d:3f:19:0b:6e:6f:27:31:8c:82:3c:8a:
         28:1d:15:cb:3d:8c:b3:cd:81:e5:4e:fa:d9:ea:8a:48:7b:c4:
         0a:37:9b:f2:0a:37:cc:35:9c:62:92:d5:cf:34:3f:60:64:00:
         e0:04:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:30 2026 by rpki-client