Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File:                     Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier:          0YN8QU52hS51/UdXN/OImjm3/QJgKPaHn7hpoXlOEU8=
Subject key identifier:   55:E7:07:D0:AD:90:44:EB:7F:19:EB:A3:FF:11:AE:69:B1:F7:64:BC
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer:       /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial:       019D39E53E2FFC880CEB7E8CFDE5CBFFCF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number:          0CCF
Signing time:             Sun 29 Mar 2026 14:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:18 +0000
Files and hashes:         1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: Xy8KUw33QWDkuNeclwC2cG1e4g6rQjndcL17335+LPE=)
                          2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:3e:2f:fc:88:0c:eb:7e:8c:fd:e5:cb:ff:cf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
        Validity
            Not Before: Mar 29 14:00:18 2026 GMT
            Not After : Mar 30 14:00:18 2026 GMT
        Subject: CN=55e707d0ad9044eb7f19eba3ff11ae69b1f764bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:68:a0:ad:d6:c2:ac:b5:ae:cb:29:6c:89:
                    ea:56:b6:81:47:88:3f:83:9e:8e:29:41:f9:c6:73:
                    d8:ae:e2:e1:f9:c9:33:d2:eb:2d:aa:62:8d:e6:34:
                    8a:e4:87:cf:36:33:8c:d7:1a:d1:86:20:cc:93:c3:
                    42:92:90:41:93:d3:a8:2a:44:44:9e:fe:34:e8:4e:
                    e5:be:10:64:8b:26:2d:cf:3e:58:fb:72:eb:8c:f4:
                    a0:bf:94:cc:74:fd:a2:0a:72:3a:5c:ab:80:20:80:
                    dd:63:2e:93:9b:61:4a:19:ad:bf:2b:9e:8a:94:c2:
                    92:c0:f9:1c:8a:e8:bb:b2:bc:4f:9d:70:68:88:45:
                    cb:8f:52:12:4c:97:b5:21:dd:5f:fd:78:cc:ce:d2:
                    a6:01:9c:88:6c:1e:47:30:db:14:1d:9f:b3:e1:65:
                    bb:15:2a:42:86:c6:df:a0:40:16:8c:17:1f:a9:22:
                    ef:e9:a9:c3:fa:6a:12:f8:36:b9:35:99:c0:a9:4e:
                    78:d0:4f:7a:e8:f7:c6:1b:8a:11:4e:15:cd:23:39:
                    b8:15:80:9f:71:3b:24:38:4e:fc:50:57:95:5a:67:
                    60:26:a1:42:63:89:b3:a7:aa:c8:a1:a4:e3:7f:17:
                    65:2f:9a:74:12:c5:14:4f:62:45:21:10:df:a0:95:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:07:D0:AD:90:44:EB:7F:19:EB:A3:FF:11:AE:69:B1:F7:64:BC
            X509v3 Authority Key Identifier:
                keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:69:f4:93:c7:ff:40:94:68:b7:75:c7:c1:a2:be:cf:5d:
         c7:22:60:63:9f:09:d5:ef:01:34:1f:c8:1b:3b:08:3a:92:71:
         e8:a9:55:4b:5c:ed:46:5f:31:1a:98:00:8a:1e:ed:a0:98:97:
         5b:6e:7f:a2:3c:88:cc:48:a8:df:a8:d1:2b:ca:c4:58:7e:d9:
         35:1c:a6:b4:a4:3e:94:49:01:60:6f:44:c5:a7:aa:48:f3:da:
         15:32:f6:dd:c2:04:63:fe:71:6a:e7:a0:95:db:0e:47:ca:09:
         a4:54:48:8b:77:e1:af:5b:fc:32:5b:95:d9:04:52:0a:35:cc:
         b3:ac:aa:08:03:f4:38:18:37:5d:68:36:75:8e:27:95:e5:cd:
         17:1d:42:0f:4f:4c:1e:87:1b:ec:b7:e3:f1:62:9a:7c:9e:9d:
         74:4b:de:23:77:33:e9:94:11:3c:1b:b1:27:9e:4f:73:63:0e:
         af:a6:ac:b4:41:f3:a6:f2:d5:da:72:86:d0:80:20:bb:18:76:
         fc:63:a9:6b:dc:2a:dd:15:3c:52:03:06:eb:2d:44:d9:72:10:
         75:25:58:c8:e7:d4:b6:69:ae:08:96:42:70:27:36:05:9f:05:
         e8:40:b9:60:82:e0:5a:d7:b2:bd:49:fb:ec:29:83:c4:5b:a2:
         77:86:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:24 2026 by rpki-client