Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File:                     J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier:          EcW9/bp7wpCiYiUuu4cqVCESNDKs+93SL9ubIXzI1d8=
Subject key identifier:   74:2E:04:F5:76:D6:87:A1:D2:4E:A2:65:4E:1F:5D:22:28:5B:E1:64
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer:       /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial:       019D38661E49001378F8EBDC488AF9CC3C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number:          11E1
Signing time:             Sun 29 Mar 2026 07:01:49 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:49 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:49 +0000
Files and hashes:         1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: 0FrTA1ucAnSi69Ks8hkZcrQ/UBOuqvMs4K5hp4UgBzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:1e:49:00:13:78:f8:eb:dc:48:8a:f9:cc:3c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
        Validity
            Not Before: Mar 29 07:01:49 2026 GMT
            Not After : Mar 30 07:01:49 2026 GMT
        Subject: CN=742e04f576d687a1d24ea2654e1f5d22285be164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:30:3c:90:bf:a6:db:6e:08:bc:7d:e7:7b:
                    bb:1b:a3:f3:07:e5:0d:35:cf:fe:03:25:65:64:a8:
                    20:8e:32:ef:10:6a:cf:57:38:a6:dc:0e:c8:77:53:
                    8a:63:74:ab:f3:d4:bd:e3:26:91:72:a2:9e:2e:9a:
                    bb:f8:95:9c:46:ed:8b:30:90:6d:77:9f:af:6d:80:
                    26:fb:bd:f0:d9:c0:de:a3:3c:d6:c5:5a:ca:2e:e6:
                    90:e4:68:92:fa:ab:68:e1:a3:68:86:ce:43:82:ab:
                    2d:fa:0a:c6:f1:88:ee:43:6c:ea:54:9a:29:92:55:
                    ee:42:67:63:2e:4f:75:16:b6:93:a7:3b:51:e9:d3:
                    bb:6c:2e:3a:0f:6c:72:a7:30:06:28:ca:19:20:65:
                    6e:8e:a4:37:fe:e1:d9:dd:fb:3f:8e:28:13:15:94:
                    54:f2:36:6a:01:a2:f3:36:e8:a5:81:14:84:3e:2a:
                    16:a8:06:1f:b6:bb:18:bd:a5:0a:bd:ff:17:06:73:
                    f1:d2:f1:2a:c9:00:48:3d:17:ca:e2:e1:21:73:2e:
                    e3:04:85:bf:3c:af:7a:9b:e1:3f:b0:90:52:41:5c:
                    32:b3:7a:37:35:b0:f4:4e:d8:92:ee:7c:b4:51:7f:
                    3b:a5:c0:fc:17:86:8c:ee:3e:26:ad:94:34:32:81:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:04:F5:76:D6:87:A1:D2:4E:A2:65:4E:1F:5D:22:28:5B:E1:64
            X509v3 Authority Key Identifier:
                keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:d0:9c:62:2a:79:f9:94:41:37:71:b7:7b:de:37:9f:f0:
         be:b5:ad:1c:c7:1d:c9:d7:0e:cb:42:e7:9f:18:11:cb:dd:a6:
         81:c2:a4:12:63:91:7e:46:0d:30:07:2a:4d:cd:ec:4e:9c:ea:
         4c:0d:96:64:1b:1f:11:6f:6d:13:17:75:0e:f2:24:9d:66:f8:
         e4:c9:cd:ee:b1:c2:d3:1a:a4:b6:b3:ee:10:58:f9:18:02:78:
         df:3b:e5:34:82:97:ad:57:f5:e9:b6:7c:44:dd:2e:aa:38:95:
         88:cd:a8:85:43:55:90:3d:36:85:91:e6:06:f0:b4:bc:d9:fd:
         9c:72:5a:bf:a0:51:f9:19:08:9b:67:18:81:32:e4:9a:e3:bb:
         98:2e:ba:1f:b0:d1:07:25:48:88:66:4c:2a:67:ce:73:59:67:
         db:a3:99:5d:60:5b:d3:61:95:bc:93:d1:d0:f8:76:2d:5c:a5:
         b5:d5:08:3b:20:7d:a3:6c:cf:4a:be:94:8d:74:bc:4e:7d:4a:
         94:e0:a0:43:27:dd:f4:60:d1:1f:0c:1a:df:5f:ef:eb:25:3e:
         bc:a5:bc:bf:94:71:79:50:02:54:06:0e:1d:6c:ca:23:0e:28:
         de:f1:44:6f:bf:c1:82:b8:27:5f:1e:97:62:ab:3d:57:c1:c6:
         86:c2:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:36 2026 by rpki-client