Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File:                     2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier:          VNAN3Sc2Hu9RUKBLfizZTgpbRGgFdIrkRewDBrBgVN8=
Subject key identifier:   1B:D8:1E:3E:0B:02:43:A9:EF:36:C8:09:3F:4E:3E:2F:67:38:D8:D3
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer:       /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial:       01A13E5D4C9CAE9579B7CCF0438C40723877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number:          1A34
Signing time:             Thu 15 Oct 2026 07:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 07:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 07:01:04 +0000
Files and hashes:         1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: HD0wZdCvDhtRBFHv8vRlllWkSj2NSoXWXYV0f/wBHH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5d:4c:9c:ae:95:79:b7:cc:f0:43:8c:40:72:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
        Validity
            Not Before: Oct 15 07:01:04 2026 GMT
            Not After : Oct 16 07:01:04 2026 GMT
        Subject: CN=1bd81e3e0b0243a9ef36c8093f4e3e2f6738d8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:7e:34:6f:9a:71:82:2f:c0:d4:e0:66:63:
                    8c:f8:3b:c6:38:f0:42:7e:d0:3c:f6:fe:9d:e8:85:
                    bf:90:32:85:f2:ac:3d:91:2d:ff:5a:17:39:12:e7:
                    1e:84:90:27:55:0f:37:15:92:5a:cb:31:c7:ee:6b:
                    4c:95:ed:28:ef:75:14:11:cb:68:af:08:04:46:e3:
                    d7:29:fe:2c:fe:d0:ca:0c:7a:ec:28:8d:54:ea:11:
                    59:df:ad:ca:6c:21:bf:11:ff:2b:a9:58:96:08:f7:
                    cc:ec:3e:0c:81:2c:33:b9:90:9e:c2:4f:c1:56:b8:
                    39:37:04:c0:8f:32:e6:3d:66:02:b3:07:e6:75:48:
                    ee:c1:55:e8:8f:a3:f1:7b:c9:2c:ef:c2:be:68:76:
                    82:96:70:fc:08:09:f8:39:b7:bd:0d:26:0f:3b:36:
                    6f:bd:3d:59:c8:72:11:b7:03:20:5e:38:64:c2:68:
                    e9:fb:05:a9:a7:c6:92:07:45:3e:be:fa:74:8a:b6:
                    20:eb:d6:b2:94:04:82:05:5c:1d:95:bf:e9:65:28:
                    a8:d3:eb:dc:d9:d7:9b:b1:e7:b6:3a:8e:65:a0:24:
                    a7:a4:5a:78:42:14:c1:a5:d0:06:ec:8c:06:59:71:
                    b1:93:b6:f9:59:18:5e:25:4c:b8:cc:6d:86:74:94:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D8:1E:3E:0B:02:43:A9:EF:36:C8:09:3F:4E:3E:2F:67:38:D8:D3
            X509v3 Authority Key Identifier:
                keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:74:83:c4:0a:35:d0:36:dd:74:b2:e5:9f:3b:81:04:94:3c:
         5f:33:f7:68:01:ac:f0:39:54:fd:8a:45:b7:44:c2:88:83:74:
         f8:e4:4b:4d:47:83:2a:20:ca:d0:a6:3a:9f:0e:22:96:58:77:
         ed:c0:3a:a1:1c:f4:6d:2d:42:a9:1e:b7:0b:c0:2e:57:93:aa:
         f2:d9:8f:3d:22:c8:59:8b:b4:a8:7c:8a:b5:dd:a0:c7:d6:0c:
         ed:39:f1:4c:52:7c:41:b4:50:88:50:3d:2c:e5:7e:11:88:db:
         7a:7d:3d:3e:8b:a0:dc:e8:96:20:b7:f0:e5:70:19:37:a1:02:
         cd:8f:6c:2e:a2:61:94:4c:72:ba:6d:08:64:47:94:b2:d5:91:
         5f:c7:4f:5f:fb:86:35:c4:94:b3:45:8f:f8:26:2c:76:67:da:
         b0:23:d3:70:b1:64:04:b3:a6:6c:4b:c7:b7:07:ef:f1:f5:e6:
         17:cf:47:4f:61:a3:7d:d8:0c:ff:75:4a:fb:ae:10:36:5a:cd:
         7f:79:bd:60:63:6c:f4:34:80:0a:47:83:ef:19:3e:7f:f0:bd:
         cd:17:c4:2d:a9:70:b6:7a:00:84:59:f9:2c:03:06:68:71:20:
         2e:71:15:ec:7b:c3:fd:ae:01:e5:be:96:40:5f:67:fd:34:b9:
         81:92:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:50 2026 by rpki-client