Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File:                     5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier:          3thFHSMLOEB/GWpQ0Nm/hyTyQnGxkKyjD5VIEpgdifk=
Subject key identifier:   56:26:6D:DB:06:71:CB:60:7A:6B:6C:7D:37:83:88:F8:A6:42:90:9E
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer:       /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial:       019D3A8ABBE89208AE9579E9702085A79EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number:          1C
Signing time:             Sun 29 Mar 2026 17:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:03 +0000
Files and hashes:         1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: o49GX338hhpXwRuzFVCfogJTur/eDtlFFrXq9srcMA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:bb:e8:92:08:ae:95:79:e9:70:20:85:a7:9e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
        Validity
            Not Before: Mar 29 17:01:03 2026 GMT
            Not After : Mar 30 17:01:03 2026 GMT
        Subject: CN=56266ddb0671cb607a6b6c7d378388f8a642909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:7d:7f:ae:fb:16:08:cb:cc:79:d7:74:ed:
                    13:db:41:02:d1:c9:f0:b3:d7:ad:b5:d7:98:8f:fd:
                    55:7e:12:76:89:d2:c7:3d:98:d1:a9:5f:35:2d:7f:
                    a4:df:7b:15:83:7b:46:37:40:b9:74:8c:99:94:c1:
                    dc:60:b5:bb:1a:c2:aa:fe:ba:ec:d7:05:63:01:13:
                    3f:e6:fc:67:eb:c7:a1:87:39:fd:df:dd:d4:ed:00:
                    aa:b6:e7:f4:20:a0:46:2d:07:ba:fc:3f:11:2d:a3:
                    3b:59:34:63:70:a2:9c:e4:24:a4:73:90:43:b2:82:
                    08:46:60:ee:d9:9f:81:84:b7:72:7b:8f:3d:f9:b8:
                    8a:2b:49:e1:9e:31:d1:3a:11:f5:2b:54:7a:cc:94:
                    da:8f:b0:07:2e:ad:b9:8a:eb:a3:30:96:69:a0:28:
                    47:66:66:43:75:c6:ad:82:f1:f3:8d:4e:74:b0:b0:
                    4e:41:8e:62:ad:ba:46:33:2b:1a:6d:7e:b6:05:b3:
                    fd:6b:0f:15:03:50:4c:60:63:73:3a:e3:1c:94:40:
                    8a:1d:5c:c6:49:34:c3:f8:68:00:92:29:1c:f9:3c:
                    f0:51:88:02:30:0c:aa:29:8c:8f:f8:a3:fe:95:2b:
                    6c:c1:a1:69:b2:51:ce:cf:ca:ca:19:e4:e2:02:be:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:6D:DB:06:71:CB:60:7A:6B:6C:7D:37:83:88:F8:A6:42:90:9E
            X509v3 Authority Key Identifier:
                keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6b:ab:f3:6b:89:84:1d:6f:6a:5f:cd:ce:b0:bd:c5:2e:73:
         94:96:ae:e8:3a:ba:ba:9e:e7:b2:a6:cb:8b:a0:a0:0d:d7:ab:
         47:a2:92:86:12:80:0c:03:cc:01:a5:16:92:eb:66:79:b7:69:
         d3:4e:f0:37:27:12:74:de:65:45:a0:87:42:35:80:48:19:89:
         01:ea:d3:ba:7e:b3:e2:41:77:af:d7:8d:6e:e9:3f:49:29:37:
         f5:6d:cb:51:3e:82:c2:bb:76:46:43:89:8e:a3:84:3f:4f:44:
         1f:6f:ae:30:d7:d5:c5:f9:2f:6f:e8:8c:eb:74:5b:9d:c4:6b:
         53:34:90:e4:a6:08:0a:f4:da:ef:6e:94:3f:b6:2d:fa:fb:27:
         7a:87:5c:de:93:83:ac:da:5e:2d:fd:2b:ae:79:ca:88:c5:71:
         b6:46:21:2d:66:39:dd:c5:14:bd:bf:88:a0:1d:82:bb:12:b4:
         5c:fc:0c:98:c3:8e:24:dc:7d:7b:c2:21:f4:ce:bb:77:70:f8:
         7e:6c:ea:67:29:22:3c:a0:3c:9d:5d:26:1b:e4:32:da:0b:21:
         2f:67:f0:b0:49:25:6c:88:0d:d4:40:a8:a6:78:c8:58:33:8b:
         4f:21:8e:c1:f7:7a:f0:d3:b2:84:24:2b:0f:cc:78:a9:46:e1:
         c7:8b:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:49 2026 by rpki-client