Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
File:                     ggNj3xH_dJw6wmto69BzI1-sqCM.mft (raw, json)
Hash identifier:          DhG3mcVlbMHNuHVm5L0COFPJINtbGrmc2dao7aFJWSE=
Subject key identifier:   3D:A0:2F:9C:76:E3:BD:14:B0:3A:1A:D2:AA:41:B5:C0:F1:E4:D5:BD
Authority key identifier: 82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23
Certificate issuer:       /CN=820363df11ff749c3ac26b68ebd073235faca823
Certificate serial:       019D38D30D873C2FD2B16255C23C4CA4BC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
Manifest number:          7E
Signing time:             Sun 29 Mar 2026 09:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:48 +0000
Files and hashes:         1: ggNj3xH_dJw6wmto69BzI1-sqCM.crl (hash: q0CWYuoa5Dz2bbACVEHTvDOkQ6M8oy9vwDh9/En3jVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:0d:87:3c:2f:d2:b1:62:55:c2:3c:4c:a4:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820363df11ff749c3ac26b68ebd073235faca823
        Validity
            Not Before: Mar 29 09:00:48 2026 GMT
            Not After : Mar 30 09:00:48 2026 GMT
        Subject: CN=3da02f9c76e3bd14b03a1ad2aa41b5c0f1e4d5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:91:9e:ea:4c:8a:ad:c5:20:67:be:2f:f2:
                    6c:be:c7:f6:70:ec:1e:b2:86:fc:44:0c:65:0b:c7:
                    f3:cc:b5:0c:ce:8d:0a:24:cf:11:e7:15:ce:2e:84:
                    36:16:90:a9:56:6b:05:6f:ed:f5:ef:d5:40:56:5f:
                    28:cc:38:7c:f8:c7:5a:2b:38:85:51:2e:bb:05:68:
                    38:ec:5c:a2:e7:41:e8:a9:8d:41:a4:c7:1e:27:1b:
                    9d:37:71:76:71:9f:ac:99:10:5a:d6:4b:75:d3:1a:
                    55:72:b1:41:53:20:32:cb:f9:d8:b5:dc:c2:62:8b:
                    a1:b9:c6:53:8b:3d:80:83:26:c7:b4:93:d2:f9:d5:
                    78:df:3a:68:44:d3:39:3c:8c:1c:aa:87:11:e1:ee:
                    d7:49:83:e1:79:c1:a8:33:44:08:af:1a:3f:74:73:
                    57:a8:d6:86:75:8b:8c:6d:69:e1:eb:97:39:fb:96:
                    99:15:07:e4:97:b7:37:15:21:ae:d2:d1:c6:3d:25:
                    41:9f:65:c3:5e:f4:56:8b:8c:04:dd:dc:6a:8f:b2:
                    24:78:37:92:93:5e:60:ba:eb:de:2c:0a:73:a0:05:
                    37:64:05:e5:ae:eb:c9:46:b6:ec:67:2f:58:80:e6:
                    ed:16:20:1a:b7:db:ad:13:52:4f:7e:bd:88:b1:a6:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A0:2F:9C:76:E3:BD:14:B0:3A:1A:D2:AA:41:B5:C0:F1:E4:D5:BD
            X509v3 Authority Key Identifier:
                keyid:82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:5d:a6:74:fc:e0:fe:ba:15:fa:d4:a6:4b:a0:4b:2d:5e:36:
         b8:30:29:dd:22:65:7f:37:c4:95:c5:b8:12:44:2d:cf:2b:f3:
         db:b9:d3:59:fd:0c:c4:27:7b:cd:dc:2d:8d:14:21:74:a5:b5:
         04:84:1e:7f:06:48:3e:24:bc:66:d7:ff:eb:3f:fe:49:c2:a6:
         75:06:89:f0:d5:be:bd:d3:0f:cb:ed:3b:05:76:0c:6e:30:6b:
         22:af:68:a3:51:c9:d3:2c:e8:bd:80:9b:c2:3d:9a:98:96:e6:
         f7:09:58:8d:30:1c:0e:44:d8:e2:46:b4:73:d5:04:d6:12:43:
         f8:2e:00:28:4a:e4:ea:70:a8:a8:67:d9:90:b3:da:fd:74:93:
         4f:02:28:dc:f7:8a:25:11:72:d4:e9:48:85:e6:18:43:ca:5b:
         df:ea:91:46:65:d9:40:35:6c:a8:22:ba:c8:ef:50:93:f3:b4:
         00:29:a0:7f:53:2d:66:7e:c3:7a:d0:0e:17:27:84:0d:54:75:
         f2:9c:ce:d4:33:11:35:dd:ba:30:f6:03:b8:7a:92:a0:6d:29:
         83:0b:bd:a2:a8:c0:e9:e7:87:fa:80:a5:ae:67:f1:53:7a:83:
         c3:93:63:c5:a3:0f:e2:4c:bb:8e:13:d2:0c:37:bb:af:d4:d9:
         6d:46:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:08 2026 by rpki-client