Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          XvicBkWpF3mq8T3EyxqLYs4D8EY3iPgWSELwKJxH0iI=
Subject key identifier:   98:84:50:36:5A:35:9A:E8:BB:41:C2:54:6C:45:E4:0A:56:ED:2F:BC
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       019D37895AB5C7AF0251DEBD9DC7A97F0D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0663
Signing time:             Sun 29 Mar 2026 03:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:41 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: 0euvBbPNdXGvmZXXnbjqP4Gyqtdk2SoahyyUdQki9Ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:5a:b5:c7:af:02:51:de:bd:9d:c7:a9:7f:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Mar 29 03:00:41 2026 GMT
            Not After : Mar 30 03:00:41 2026 GMT
        Subject: CN=988450365a359ae8bb41c2546c45e40a56ed2fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:99:d3:47:04:ae:b2:d6:94:5a:bc:de:96:
                    c0:48:83:fe:ae:22:69:af:7f:4a:96:18:65:f6:a1:
                    44:66:04:82:dc:f7:e0:af:93:7a:06:8c:a7:21:9a:
                    56:cb:d3:07:b6:5d:b3:49:06:7d:17:de:7c:5f:61:
                    a0:ac:8e:3f:0b:a8:02:44:4f:9b:27:10:77:7a:4c:
                    ca:12:bc:3e:e2:8b:fb:29:01:33:48:a5:5c:4a:6b:
                    f3:de:32:85:dd:33:5e:cd:f5:d1:88:b8:a0:da:e4:
                    a4:87:af:02:63:b0:4b:30:4c:ab:22:f8:8d:50:86:
                    90:f2:a0:dd:9c:8d:99:69:db:41:55:1e:46:24:c0:
                    ae:3e:36:c8:20:d0:9d:84:be:6b:f1:ee:87:3a:a9:
                    fb:18:6c:0c:2e:08:5a:8b:b2:a2:9b:6b:3f:d5:89:
                    73:b6:ab:a8:44:4a:73:17:21:3a:25:58:7e:e2:56:
                    ed:d7:fd:62:44:ad:1e:70:69:f1:36:23:48:3e:11:
                    5c:68:c1:e3:2e:23:4e:fb:d4:bc:1f:87:6e:4d:f0:
                    03:f6:f1:ab:91:93:89:db:28:cd:3f:4d:cc:39:15:
                    ee:7d:a9:e2:10:25:bb:7e:9e:77:d8:b2:95:78:7d:
                    5a:a7:6d:6c:b2:b5:39:e6:a1:8c:4c:fe:f0:73:ab:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:50:36:5A:35:9A:E8:BB:41:C2:54:6C:45:E4:0A:56:ED:2F:BC
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:74:90:27:61:ec:8b:1c:9d:a9:b1:b3:a0:be:0a:1e:0d:
         52:0e:3e:8c:e9:36:96:bb:6b:56:de:0e:c4:a8:27:d1:b1:6a:
         01:ee:0c:f8:a3:2a:fa:59:a9:10:2f:5c:25:dd:20:e6:1b:23:
         d7:ba:81:9c:12:af:cc:fe:82:8e:b3:c4:3c:39:4b:72:a0:c7:
         d7:28:fe:f0:4a:e1:08:e3:d2:54:39:f3:41:0b:b8:de:59:19:
         c2:6e:f7:de:d4:2f:cb:21:3b:67:b5:59:ba:8d:cc:a6:2f:07:
         60:27:b4:e6:4f:7b:e9:d9:10:b9:80:6c:62:2f:65:39:25:1f:
         53:17:0f:8a:6d:d3:98:d0:9e:7b:7b:28:bd:9f:57:16:35:90:
         25:72:cb:33:b5:fe:ab:49:8a:46:70:86:c1:44:a4:62:da:14:
         dd:a4:4b:f8:0a:19:45:29:4a:e9:65:fe:3f:c5:6a:d7:cf:45:
         a6:5a:55:d8:70:b1:9b:c5:d8:db:a5:63:90:8d:57:4d:21:33:
         e6:f0:16:fc:45:06:73:86:cf:82:30:e8:20:f4:fd:da:c4:ae:
         ea:d3:9c:4e:aa:a8:63:0d:32:32:bb:da:c2:d1:c0:4f:05:36:
         b9:d5:0d:76:50:aa:b8:30:a6:54:ad:19:1f:57:c3:f2:b7:07:
         11:ac:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:21 2026 by rpki-client