Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File:                     d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier:          +g2PXb5XDE7oRXGN4LmOAVsbouKiEiHA0THUEahsQcg=
Subject key identifier:   17:F1:56:5E:42:A0:BB:FC:4E:B8:7B:F4:48:07:A7:40:E9:7A:D6:F0
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer:       /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial:       019D37F70303C4FC0F2B585CDCFA59C86789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number:          072A
Signing time:             Sun 29 Mar 2026 05:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:28 +0000
Files and hashes:         1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: L36X3xyiUXHr60WD6GtEVexfb363jSyWrTgbKMxaGZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:03:03:c4:fc:0f:2b:58:5c:dc:fa:59:c8:67:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
        Validity
            Not Before: Mar 29 05:00:28 2026 GMT
            Not After : Mar 30 05:00:28 2026 GMT
        Subject: CN=17f1565e42a0bbfc4eb87bf44807a740e97ad6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:5e:f1:1a:53:6c:ba:e6:6f:7b:83:1b:7b:
                    8d:ab:63:ed:f8:e4:71:54:a3:d8:39:3a:d8:0a:bd:
                    94:cd:ff:ec:e6:0c:c1:8e:d3:7b:be:eb:e0:7e:94:
                    67:0c:aa:0d:a9:8e:75:ca:65:3b:fd:a6:f0:a9:c7:
                    72:f7:1b:27:62:56:52:42:c3:34:bd:48:d9:d8:27:
                    8c:71:eb:95:29:90:67:0c:3d:7a:69:7d:63:85:7e:
                    e6:35:1f:56:46:22:4f:48:46:3c:d4:84:72:22:08:
                    2f:92:65:05:ef:c4:e3:4d:ca:78:09:9c:f7:ca:64:
                    92:7a:3e:22:13:98:7d:b7:44:6f:79:5a:dd:8a:d6:
                    0b:ea:31:f0:88:67:0e:e9:cc:93:02:4f:90:0b:15:
                    ff:86:c2:40:15:34:49:ea:dd:c8:d3:67:f3:57:86:
                    16:13:1f:35:77:3e:9a:02:9d:9a:85:4f:6a:c5:0e:
                    21:66:04:74:de:ba:fe:98:6f:91:8d:c9:e7:f3:76:
                    3d:93:42:8a:d2:97:8e:a3:03:e9:f3:15:e1:8d:f3:
                    3e:e8:bf:82:2e:7a:00:0e:ba:de:f0:ba:d2:eb:8e:
                    52:9f:04:85:b2:da:c1:fd:16:de:30:0c:49:55:6f:
                    45:5e:2e:ae:37:c9:54:9b:c8:da:c5:62:e4:17:85:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:56:5E:42:A0:BB:FC:4E:B8:7B:F4:48:07:A7:40:E9:7A:D6:F0
            X509v3 Authority Key Identifier:
                keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:8e:a1:fc:aa:01:6e:4f:1d:5d:e4:6b:16:72:5b:58:c8:
         76:ec:49:cb:9d:f9:06:09:d9:7b:53:54:42:26:33:d3:f6:bf:
         74:47:6d:fd:31:03:5d:46:d9:05:1e:8f:e4:d9:13:9b:6c:0d:
         cc:de:03:5a:4d:0f:ba:95:a1:13:bd:87:ba:47:9b:66:dd:3e:
         b2:3c:3b:e9:b0:25:b7:93:a2:67:0a:8b:b5:0a:df:75:4b:10:
         a2:7f:b2:96:4f:76:a4:f7:08:51:f2:69:e1:e1:0e:a4:20:cf:
         48:8d:28:df:7b:fc:40:ac:62:5b:8e:2e:22:c5:31:e2:5b:16:
         6b:62:a9:2f:31:a8:fd:5b:f1:c7:41:b0:b9:0d:74:8d:7a:54:
         41:d7:91:19:77:f8:37:e2:39:b8:d5:be:f9:17:46:ba:c3:b0:
         86:51:67:51:fc:84:9d:68:b0:94:58:b3:80:fc:21:e1:0c:15:
         c4:6e:81:20:51:66:67:2b:58:85:49:a3:ce:0b:e3:af:60:d1:
         0f:5c:bc:68:48:a7:d9:38:13:97:f9:2b:79:81:ec:75:6f:f7:
         22:22:2b:de:c2:50:1a:97:e4:18:fd:4f:43:05:db:63:0d:02:
         00:1a:b7:89:41:2d:e9:b5:62:b6:64:8e:87:31:d2:5f:43:37:
         9c:32:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:02 2026 by rpki-client