Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          6LMN2Kaa5gmiUymicGF7xBVkpNEyRcrs/79+SWLac7c=
Subject key identifier:   B1:B8:D6:BA:16:C9:00:0E:B8:5A:CA:A9:84:11:4D:B1:53:E3:EB:EF
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       01A001DD34A5E726F38FF980FD9A2CB89C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 20:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:09 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 32n3XpCiOo4U1WbDVVwT+BdgRufng47EEcay3nFqIQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:34:a5:e7:26:f3:8f:f9:80:fd:9a:2c:b8:9c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Aug 14 20:01:09 2026 GMT
            Not After : Aug 15 20:01:09 2026 GMT
        Subject: CN=b1b8d6ba16c9000eb85acaa984114db153e3ebef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:85:20:2c:f0:d5:63:da:7d:44:4d:22:ad:
                    90:f0:25:c3:ed:67:f8:67:5c:97:a8:9d:96:8e:02:
                    2e:c8:f4:64:9d:a5:47:28:42:27:de:83:59:18:14:
                    5c:df:20:6e:d1:c5:79:b8:8f:ca:60:b1:21:3c:c2:
                    cd:2f:8d:c0:90:ba:ee:de:17:90:53:6b:24:6a:2c:
                    af:08:ab:12:41:bd:1f:1c:00:51:cd:3a:c7:2f:ab:
                    7e:c7:d4:80:d8:6e:5b:ac:34:f1:dd:87:f0:e3:2f:
                    3d:a3:a6:52:50:d4:59:d7:7e:78:e4:24:79:72:a6:
                    10:ce:04:a6:f7:1b:95:9e:42:03:88:f6:1e:c2:3a:
                    d0:19:cf:d0:3f:ef:7b:21:0b:a9:26:86:bf:9b:37:
                    d3:3e:4b:bf:62:fe:c3:6c:cf:7a:07:ad:03:7e:d9:
                    86:56:9a:5d:c9:51:8e:00:27:bf:89:63:19:b5:b7:
                    a3:16:60:9f:7e:d9:7f:68:e1:eb:93:c0:f6:ea:50:
                    35:7f:cc:ee:11:49:c8:50:a6:a1:4f:38:03:8f:e0:
                    50:19:15:60:cf:42:b5:9d:ad:6b:94:c3:43:e2:d4:
                    82:cb:f8:aa:6f:5b:78:40:16:a2:ac:17:97:d2:93:
                    15:f8:b4:e9:8b:c0:36:ad:11:d9:53:0e:bc:9d:78:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B8:D6:BA:16:C9:00:0E:B8:5A:CA:A9:84:11:4D:B1:53:E3:EB:EF
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:73:0b:3d:3a:10:9b:48:e1:96:1c:ff:c0:10:95:72:87:8d:
         0e:18:37:44:8c:e4:9c:85:31:45:92:7f:8e:04:81:a7:57:c9:
         76:11:f1:12:db:4a:33:80:83:b8:28:03:0a:5d:1d:a6:c1:83:
         37:47:99:71:76:c1:67:74:a6:24:c4:90:5b:46:f0:43:0f:c4:
         3d:61:18:d4:72:60:09:b9:be:0b:a3:93:48:64:db:b4:c1:e9:
         96:70:b9:89:e9:75:c9:17:fc:59:47:6b:14:f6:d6:79:43:c3:
         fe:07:e6:24:ff:a3:2e:2a:75:9a:ac:3b:f1:b9:c5:99:c0:5d:
         89:ff:36:98:29:9d:15:73:6c:f2:6c:12:d2:06:8d:0e:9a:aa:
         6f:e2:2f:8e:55:9f:04:e7:6d:21:f6:b9:03:9e:ea:f0:fc:50:
         70:2f:4d:fb:e9:21:a2:f5:95:93:a9:ff:aa:d2:4e:ff:7d:f3:
         98:14:72:fd:59:35:1a:3a:c7:3b:7e:e0:e2:3f:75:4b:97:13:
         96:1b:4d:73:b9:77:3c:8c:8b:90:08:35:c3:e3:58:49:74:f5:
         11:c5:96:3c:80:ea:09:51:36:d5:2a:da:6d:6d:9e:90:7c:46:
         1c:21:bb:2a:2a:ed:c1:fa:af:97:ea:63:3f:a9:da:04:f4:b6:
         10:0d:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:34 2026 by rpki-client