Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File:                     rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier:          OKFxyRQ0U8dM0jxwVsWvuT4a/GOXHbcPlS1lro31Vrw=
Subject key identifier:   83:06:1E:98:F1:51:0E:8C:2E:4C:75:3A:C5:9F:DB:7D:95:C4:0D:A9
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer:       /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial:       019D386563CB99D94B3579613C60BC0B79FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number:          1098
Signing time:             Sun 29 Mar 2026 07:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:01 +0000
Files and hashes:         1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: RzPVKL9z4g2J+x6ACkoXH9nLNKGMgxge+74jHWEQxuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:63:cb:99:d9:4b:35:79:61:3c:60:bc:0b:79:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
        Validity
            Not Before: Mar 29 07:01:01 2026 GMT
            Not After : Mar 30 07:01:01 2026 GMT
        Subject: CN=83061e98f1510e8c2e4c753ac59fdb7d95c40da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:71:20:84:9b:5f:eb:2d:e8:ba:ee:b0:59:
                    90:4c:34:a7:7e:a7:fa:c8:1a:db:78:83:a4:28:4b:
                    4f:b2:fe:0c:88:59:95:9a:e2:ef:c7:53:e0:c3:87:
                    0d:be:43:18:ae:26:ae:fd:82:86:7c:57:af:d4:5a:
                    5c:9b:e1:59:a2:42:9c:86:8d:89:c6:09:d7:a3:9c:
                    5a:ab:58:f4:ad:6c:04:0e:dd:9e:70:23:4b:c1:35:
                    03:3c:3a:70:31:54:42:09:45:14:a4:39:34:86:5b:
                    21:ec:c4:d9:77:cb:43:8f:38:0e:49:4e:39:b2:ac:
                    bd:4d:96:54:3c:bb:03:1d:25:ba:9a:ac:9c:d9:c6:
                    2a:45:d5:93:dd:b3:58:c8:c4:2f:eb:77:8b:4d:51:
                    fc:dd:09:a6:ed:0c:d8:f1:c4:72:14:91:93:0c:0a:
                    94:43:88:2b:91:39:89:65:cf:90:22:d4:cb:79:8f:
                    a6:65:de:f4:a3:6f:f9:cf:7a:bd:2b:48:a8:b0:2b:
                    18:39:75:85:17:b6:74:88:83:1d:c3:4b:99:c9:e3:
                    6d:7c:8f:31:bd:0c:8c:a0:17:77:0c:c2:4f:dc:4b:
                    ba:55:5b:00:5e:5a:c4:29:67:ed:bf:f1:7c:f6:2f:
                    94:65:f7:0e:aa:21:0e:70:3f:ca:0b:07:16:f9:e5:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:1E:98:F1:51:0E:8C:2E:4C:75:3A:C5:9F:DB:7D:95:C4:0D:A9
            X509v3 Authority Key Identifier:
                keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:6c:93:fd:0a:22:70:ab:e2:94:69:08:37:69:6b:f6:ca:
         77:0b:83:55:a0:10:f6:fd:dc:62:51:8b:5a:c0:7f:e7:57:70:
         95:32:53:1a:72:3a:9b:fe:46:07:dc:d0:0a:19:a6:bb:86:96:
         44:8e:59:60:3a:36:9f:58:08:19:2f:93:b3:3e:ad:95:d0:21:
         59:5a:6c:ef:72:2a:58:f0:d2:ab:32:d9:a7:3a:24:23:c1:65:
         44:9c:82:e1:a1:0f:49:1d:06:46:48:f8:61:63:72:4e:07:2b:
         37:8d:85:73:17:a1:83:aa:b7:b7:6b:a8:aa:28:f9:a7:82:e6:
         31:47:00:5c:69:07:3a:8e:6c:e1:5c:ae:d0:9e:40:0c:62:8c:
         34:d5:20:09:bb:49:26:d9:89:0e:78:64:fb:39:21:c1:e3:a5:
         d0:c4:5f:5c:0c:36:4d:0c:bd:92:5b:ab:6e:00:79:23:bd:e2:
         d1:1f:66:87:f5:93:6b:68:ab:33:cc:59:6b:1c:95:e4:95:5d:
         39:9e:f4:3b:d7:28:c6:aa:a8:09:c5:e1:a7:ec:d5:b8:50:e8:
         5d:c9:30:7c:34:6b:b8:1e:6e:45:bd:ef:0d:37:05:53:29:a6:
         b6:9e:9b:3a:ca:c4:90:ae:5b:b9:c2:ab:c9:09:cf:f0:ce:07:
         06:91:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:18 2026 by rpki-client