Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          u8KJFF3Zqj7IH5Ee4Non6SGGt9283h9pRQb/KHHBdJ0=
Subject key identifier:   2C:36:15:ED:64:F3:B2:29:6B:97:B5:83:1C:8F:EC:14:46:7D:C8:EF
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       019D39408A96779EED7BF4CF4266FC9FECBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          054B
Signing time:             Sun 29 Mar 2026 11:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:24 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: vKFQLiFyFsNfOj7X164jqTnLZOf6Cn+KLvwBEIGI2U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:8a:96:77:9e:ed:7b:f4:cf:42:66:fc:9f:ec:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Mar 29 11:00:24 2026 GMT
            Not After : Mar 30 11:00:24 2026 GMT
        Subject: CN=2c3615ed64f3b2296b97b5831c8fec14467dc8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:93:8e:9d:43:3f:ad:aa:c6:40:2d:66:4c:
                    bc:44:14:b4:10:1b:bd:72:90:ea:1d:7f:67:78:6e:
                    53:fc:53:1d:a7:ae:8a:dd:21:2a:a2:65:05:0a:67:
                    83:e7:d2:01:b5:6b:25:e3:12:1c:64:d7:9f:53:e0:
                    33:7d:aa:78:b2:6a:6c:31:59:76:38:da:27:ef:3f:
                    8b:17:6f:32:dd:74:d0:7e:04:dd:5f:b7:05:fa:37:
                    68:f2:cd:1a:8b:32:4f:43:c6:24:33:f3:6e:f2:07:
                    23:6a:27:8e:d0:8f:fa:4a:78:e4:48:44:e8:94:ed:
                    f1:ee:ce:5e:95:00:6a:13:85:70:12:de:93:90:db:
                    05:05:6a:14:75:8b:88:7f:88:f8:ff:ff:37:12:9b:
                    10:16:e0:df:bf:48:a3:b6:b0:ce:2c:49:45:2b:7b:
                    d8:61:b8:12:1a:d1:49:f8:3c:59:6f:c2:b5:7e:94:
                    a8:2f:42:bd:fa:b1:af:bd:c9:49:c8:6d:68:ce:99:
                    0f:86:88:97:38:59:ef:5d:ab:18:ea:7b:21:d3:9c:
                    ab:7c:7d:03:90:ed:be:49:7b:bb:e6:82:84:8a:93:
                    60:e8:42:3f:e0:a4:05:0e:c3:1a:e9:52:3d:82:f3:
                    8c:e8:38:1f:5d:de:24:38:a9:83:15:11:8a:28:43:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:15:ED:64:F3:B2:29:6B:97:B5:83:1C:8F:EC:14:46:7D:C8:EF
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:be:e5:3b:f2:b1:31:bf:8e:69:54:b2:b8:88:6a:5c:ad:ba:
         23:62:3f:d8:93:68:32:0b:45:93:4e:08:2b:cd:15:45:f7:b3:
         6c:31:cb:9a:fe:1d:4b:04:0d:29:f6:f9:c5:1c:d3:9a:c3:71:
         d5:5c:56:7f:65:88:95:28:27:4b:84:a3:74:eb:6e:ae:6d:fe:
         7f:b7:98:77:90:26:70:4e:44:12:aa:44:60:fa:d2:b9:5f:ed:
         2f:a4:74:58:ff:76:da:35:1a:56:66:84:12:81:81:0c:32:a4:
         90:08:e8:0e:76:fb:89:79:99:26:ed:ea:8a:48:7d:04:af:54:
         f2:da:e6:58:ab:80:67:5c:02:46:6f:68:dc:62:80:b1:00:10:
         fa:78:99:83:dd:b6:1a:00:62:ba:99:b2:cb:91:3a:25:e4:68:
         c9:81:76:ed:e5:c0:69:46:03:d1:a9:6a:8d:fe:a9:b1:b6:6f:
         0b:c7:d6:13:ac:75:59:40:af:fb:73:c2:80:c2:44:23:85:1a:
         ad:de:1e:da:7b:9c:79:fb:65:79:e0:eb:f8:3a:ee:94:fa:16:
         85:1e:bd:7b:ff:5c:9a:09:d2:3f:aa:f4:cc:2c:44:4a:9d:06:
         76:14:38:6a:15:63:0e:b8:bb:df:65:23:49:00:be:b5:7e:92:
         0b:9e:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client