Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File:                     _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier:          JBniwyZIcVMh0tHNDISoaOwwWkt2r7WRLiEJmc4nVEM=
Subject key identifier:   53:26:0A:85:81:42:E3:25:5A:B4:46:8D:15:F1:FA:EF:4A:D2:EE:80
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer:       /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial:       019D3865DE9D977E7D0FC865EC2D2EA9488C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 07:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:33 +0000
Files and hashes:         1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: baMGQZ7ICPPI8SDNT+iZhUXae2a79/+u/8i18hI2YLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:de:9d:97:7e:7d:0f:c8:65:ec:2d:2e:a9:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
        Validity
            Not Before: Mar 29 07:01:33 2026 GMT
            Not After : Mar 30 07:01:33 2026 GMT
        Subject: CN=53260a858142e3255ab4468d15f1faef4ad2ee80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:2d:5f:6a:5a:7e:34:83:21:0a:2b:b8:d8:
                    37:c8:95:e8:8e:67:ed:54:99:13:7d:31:70:0b:d8:
                    55:1b:a0:ef:7e:c3:e1:49:48:a7:88:81:7f:ba:0c:
                    d4:72:1b:25:fb:65:6b:ef:cf:46:e1:fc:db:14:13:
                    66:39:65:20:06:df:4b:f5:40:f0:8b:7c:58:c0:e4:
                    90:11:bd:df:f4:8e:51:c7:f5:db:f8:7e:09:7c:a2:
                    03:b0:3a:53:a5:28:38:e6:93:08:6d:c5:bd:48:7c:
                    87:e3:9f:9c:10:d8:93:6a:5b:78:53:b0:23:1b:af:
                    26:63:0e:19:62:cb:55:7b:1e:3d:0d:76:93:a2:bd:
                    a5:d4:5d:35:b5:de:16:a1:33:d1:66:64:d3:5d:11:
                    4d:8a:e8:bb:d5:f4:f9:56:60:2c:4a:cf:4b:a3:47:
                    57:da:c6:5f:17:9a:d9:66:00:73:5f:39:85:90:57:
                    85:a5:23:f4:77:73:d3:c6:a7:ca:ce:ac:dd:34:50:
                    b3:f0:00:f4:51:a9:13:36:fa:14:4c:c6:09:45:73:
                    a9:4e:8c:ed:3f:af:53:07:d9:af:7d:cf:43:85:af:
                    ae:73:2b:95:8a:99:fa:81:47:5b:0d:17:b6:15:4b:
                    f1:9f:e4:21:c9:66:8e:66:8c:5d:98:34:9f:c8:f2:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:0A:85:81:42:E3:25:5A:B4:46:8D:15:F1:FA:EF:4A:D2:EE:80
            X509v3 Authority Key Identifier:
                keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:3a:91:83:ec:e3:58:58:05:6f:f6:8f:7f:0a:c9:3f:91:
         52:10:23:b3:b2:6d:08:2e:9d:6d:ab:81:92:c7:3c:ef:f5:01:
         12:c0:f6:07:bf:22:cf:3d:cf:07:90:0f:58:8d:5d:6b:0c:49:
         16:c5:5f:a9:f7:df:61:65:24:86:66:6c:8a:99:80:55:39:a4:
         1e:67:de:e4:a3:1c:99:25:72:20:19:2b:bf:12:af:0a:3f:46:
         50:a1:15:b3:8e:f1:4d:b6:17:da:e5:c1:a4:d1:a5:de:44:f2:
         aa:a1:db:13:4b:94:8b:98:60:d1:93:57:19:d2:72:a4:0c:1c:
         13:e9:1f:b7:5f:00:e3:2e:8e:b8:29:da:c7:07:98:7c:95:41:
         fb:4c:51:3b:59:9b:0e:35:a2:37:64:69:e9:69:20:ed:84:b6:
         d9:3b:1a:02:9d:fe:73:f8:de:68:f0:bc:ed:1b:c3:0d:80:e1:
         10:78:cb:82:38:d5:09:e9:de:f5:be:aa:7b:e1:42:ef:47:b0:
         3d:28:00:f1:c0:9d:c4:b8:64:b4:c5:a1:92:69:f9:67:fd:a9:
         5b:8a:89:bc:2f:d5:3d:4d:8b:56:f2:7e:2c:73:c7:f2:22:89:
         9c:f0:d3:b7:6e:7b:42:5a:ef:16:3a:b8:95:ff:ec:73:c1:81:
         af:ef:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:34 2026 by rpki-client