Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          gOfAysQmEKBq1aIWVy2XZzvSck5+ne9lfGZBpPvYdWY=
Subject key identifier:   60:F1:30:EA:87:19:33:EA:1C:EA:B8:DA:F4:D5:F7:00:BB:B2:E9:F3
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       019D389BFE3E248BF7C9D66974EF54CBFDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          0C27
Signing time:             Sun 29 Mar 2026 08:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:40 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: 6Isz3/tnzyFUJ1qxwZNQCo0i41CCiJy9S5Zzs2u2ei0=)
                          2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:fe:3e:24:8b:f7:c9:d6:69:74:ef:54:cb:fd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Mar 29 08:00:40 2026 GMT
            Not After : Mar 30 08:00:40 2026 GMT
        Subject: CN=60f130ea871933ea1ceab8daf4d5f700bbb2e9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:fe:3a:c7:13:91:d1:f8:90:99:a7:41:64:
                    9d:7e:4e:cd:9f:a6:91:c7:50:50:46:45:18:bc:a5:
                    18:45:66:41:1c:77:8c:6f:8d:a6:73:9c:75:78:80:
                    00:8d:51:bd:d9:3b:ae:3f:01:fd:80:54:20:8f:66:
                    19:1a:81:19:e9:9b:26:33:66:18:f4:7b:c6:46:de:
                    77:c8:44:2d:37:04:e8:a7:ed:53:1e:32:87:37:1e:
                    40:15:d2:2b:22:b2:1f:6e:ea:eb:6a:b0:9b:df:33:
                    9b:dd:0a:91:89:e7:ac:58:45:e0:6f:38:39:82:d0:
                    bc:cf:4f:ae:4f:0e:15:82:73:15:c4:36:4c:7e:ae:
                    39:33:a6:ad:9f:4d:00:17:37:5a:01:5e:4c:e4:4a:
                    aa:74:86:98:9d:fb:0d:af:cd:f5:d6:dc:df:f2:a2:
                    e0:61:d6:3a:05:d8:e6:0a:11:ad:ae:bf:56:34:10:
                    7e:45:0d:47:21:41:73:c6:75:c0:89:2d:b1:4d:98:
                    1c:36:b4:64:af:84:5e:85:7e:bd:77:a2:f1:f2:4a:
                    ac:7b:7b:96:75:17:ea:3f:ab:ef:01:73:a0:bd:3f:
                    37:c9:a2:52:4d:13:1b:39:ee:ed:78:11:b4:ab:86:
                    35:d0:74:ef:fa:3f:13:d4:57:f1:4a:21:2b:ef:c8:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:30:EA:87:19:33:EA:1C:EA:B8:DA:F4:D5:F7:00:BB:B2:E9:F3
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:37:74:d7:12:c0:b7:77:51:f6:42:8b:b1:c4:0e:1e:63:a9:
         4a:16:f5:0e:4b:56:9e:79:f0:d8:28:9f:1d:28:0e:13:bd:a7:
         88:31:80:f5:bf:65:1b:4b:9e:a1:4c:9d:92:ba:8e:ef:57:ed:
         00:bd:be:50:82:e7:49:35:71:d6:ec:e5:18:25:43:18:96:f8:
         77:0c:db:f2:9e:fd:2a:9f:88:27:07:3f:a5:f0:5e:b9:09:47:
         a9:c1:50:16:8c:2e:23:84:94:f9:97:31:9e:49:95:8c:1c:a0:
         4a:e1:a3:9a:4e:99:cc:5c:20:cc:cd:4f:19:6f:b7:ec:52:76:
         37:d4:71:2c:a2:98:c5:2c:8e:c2:8e:c9:b7:ab:f8:16:ae:63:
         6f:f9:e1:e3:7a:61:42:38:a6:d1:19:29:22:fd:6e:74:d0:be:
         35:03:38:43:31:67:54:47:75:1b:0e:09:45:82:2f:52:ce:e3:
         4a:fa:35:f1:15:64:b3:75:0e:64:e3:5a:76:13:46:6b:20:aa:
         cc:8e:b9:66:ac:3f:68:16:dc:4d:7e:fa:fe:8b:d7:01:24:85:
         f6:2e:80:9c:97:73:46:93:47:06:f0:ff:93:a0:60:ab:1b:bc:
         0e:de:6a:13:e9:fc:15:2b:89:b4:aa:c2:9c:67:03:03:b6:96:
         0b:23:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:01 2026 by rpki-client