Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File:                     ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier:          OlpTRIBUoRpZD1CHVPpXfAFNjRVxkCTatZLuojXyoFw=
Subject key identifier:   59:22:D6:70:40:6D:6C:32:EB:C2:C8:38:71:B4:DD:96:2D:1C:54:07
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer:       /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial:       019D378993B4023D4E3BF2FD43A22608A765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number:          090F
Signing time:             Sun 29 Mar 2026 03:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:56 +0000
Files and hashes:         1: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: CQxbV8ZRsy6mvIXDn1t2MMgwHXubBU2nxo+I8llAnSg=)
                          2: h8307773aGTVcHuejCRSQfYZeP4.roa (hash: 2K29Y+KA5ZX1LE8dgEvQhQ3+PK0Gls5txAa/7wvymRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:93:b4:02:3d:4e:3b:f2:fd:43:a2:26:08:a7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
        Validity
            Not Before: Mar 29 03:00:56 2026 GMT
            Not After : Mar 30 03:00:56 2026 GMT
        Subject: CN=5922d670406d6c32ebc2c83871b4dd962d1c5407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:88:f0:c8:e1:1a:93:22:26:5c:60:21:56:
                    39:a5:93:fc:93:38:41:f9:d8:fc:d9:63:f6:72:57:
                    d0:f2:38:f8:04:0c:c5:0e:bf:04:19:61:51:6a:a6:
                    ca:9c:47:cb:c4:69:f9:38:1d:f7:99:e5:64:62:82:
                    d9:d3:6e:e2:d8:81:6c:fd:48:86:31:60:d4:9d:ae:
                    60:93:6b:92:ab:bd:55:ee:2d:f3:31:dd:80:fb:79:
                    d0:0f:77:dd:a0:1f:b7:49:e1:f2:c2:a0:c5:7e:46:
                    c6:1b:36:9f:28:7d:e8:83:27:48:c7:7b:90:36:e8:
                    5b:dc:b4:0e:0a:70:43:80:71:76:57:e0:c2:da:fd:
                    ff:97:d2:58:47:ed:92:8f:39:1b:28:29:92:22:83:
                    15:81:a1:18:82:0f:6e:51:d2:bb:c0:aa:97:f2:ca:
                    2c:0e:0a:84:4c:d4:14:cc:15:49:80:05:e7:83:e0:
                    9e:46:fa:d9:48:a9:36:dc:f4:a0:77:6f:5b:d1:12:
                    14:3e:65:a8:22:61:cb:f1:b5:d3:7a:b3:94:e9:a6:
                    5c:a3:d7:16:a3:03:ae:2f:4a:36:f0:e2:d3:d4:28:
                    98:7f:53:45:7c:d4:b0:ce:33:30:ae:3c:15:28:4f:
                    66:25:d2:ea:e3:16:61:95:37:a8:23:2a:7a:99:f0:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:D6:70:40:6D:6C:32:EB:C2:C8:38:71:B4:DD:96:2D:1C:54:07
            X509v3 Authority Key Identifier:
                keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:83:25:bb:91:5d:9a:c6:ac:e7:1e:0a:1b:13:5a:04:26:
         02:80:54:cb:48:0f:1f:f4:42:8a:1e:a1:65:bd:59:f7:7f:b2:
         be:da:2f:67:7c:86:e1:96:0f:52:28:18:d2:bf:44:15:64:40:
         c3:10:fe:02:9e:59:13:c3:65:5e:02:04:bb:bb:8b:fd:31:75:
         76:96:e2:08:8a:c6:df:06:f0:5e:25:2b:35:db:5f:99:eb:34:
         ef:5b:77:47:52:7b:3d:55:4e:94:33:36:72:8f:e1:2c:13:9e:
         6d:99:da:bc:76:6e:73:65:b5:bd:b6:02:49:b9:59:7c:02:0a:
         2b:91:24:cb:3d:fa:9f:28:9e:de:36:a8:8e:0d:23:3d:d5:fc:
         4d:0d:a8:52:22:00:a5:d9:99:9d:57:e1:ac:01:0f:a7:04:84:
         d0:bc:15:4a:60:81:5a:33:16:55:52:b7:19:9b:f7:1b:92:d2:
         8b:14:20:a4:90:cd:83:21:c3:c1:65:94:b8:25:a1:4f:8c:69:
         37:63:f1:93:42:5e:e4:41:ac:20:bf:5b:b7:f5:af:56:c3:df:
         94:73:1b:24:4f:c9:35:fc:fe:d4:5a:16:bb:4c:7f:3a:22:38:
         6b:ce:cc:9d:63:53:b4:12:b6:45:ee:e9:c7:1f:ec:81:ab:cb:
         81:27:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:53 2026 by rpki-client