Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
File:                     _mraoZRFOXtBXvSivmTq_PNbcpA.mft (raw, json)
Hash identifier:          BaA9FrwhIHGUOyrfrPUAJ6OJsqbZaIvDP6Igab6aMh0=
Subject key identifier:   B7:8B:A6:5F:77:20:90:76:D9:95:AC:58:8E:23:3D:D6:3B:9D:5A:B8
Authority key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
Certificate issuer:       /CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Certificate serial:       019D3789973A2C6E6EF84830DE164A5AD844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
Manifest number:          018E
Signing time:             Sun 29 Mar 2026 03:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:57 +0000
Files and hashes:         1: _mraoZRFOXtBXvSivmTq_PNbcpA.crl (hash: fY+68+Fwr+Iaiy10Yf0bwZ21oRMCuFLI1gpq2fds72U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:97:3a:2c:6e:6e:f8:48:30:de:16:4a:5a:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
        Validity
            Not Before: Mar 29 03:00:57 2026 GMT
            Not After : Mar 30 03:00:57 2026 GMT
        Subject: CN=b78ba65f77209076d995ac588e233dd63b9d5ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:9f:67:b3:8b:3a:74:01:ae:96:f0:68:49:
                    71:5f:8b:67:50:03:ec:dc:6d:37:19:22:0a:14:8d:
                    75:b7:5a:6b:31:6d:9c:f9:9e:09:ec:04:62:67:50:
                    3a:03:c7:01:a8:5d:72:a9:f9:46:95:36:cb:47:cf:
                    aa:81:0e:0c:52:c8:0f:da:32:c9:0b:0c:e3:09:fd:
                    69:88:76:60:6c:be:aa:ed:20:98:ac:81:e0:61:8b:
                    2d:a4:52:97:e1:05:64:68:6b:97:9c:78:8b:d2:a2:
                    cc:4f:f7:5c:55:40:fc:00:5c:4b:d4:f6:07:7b:dc:
                    ad:09:2e:96:cb:db:53:af:4a:f1:97:5f:b3:ea:67:
                    d6:4f:07:26:69:53:05:17:a4:c4:14:af:b8:7f:a9:
                    6e:f3:ad:e6:f8:76:99:20:b0:e5:54:1d:13:78:50:
                    f0:08:26:60:6d:eb:65:7a:71:70:d8:b4:85:6b:da:
                    9a:29:08:24:da:91:0c:65:f9:7c:2d:7f:92:b5:ef:
                    44:8c:4f:8c:ec:1e:a1:28:78:e9:10:7a:05:86:fa:
                    75:ee:c7:32:e8:bf:fa:c0:6c:34:e7:eb:16:ab:f0:
                    88:2f:c9:16:a6:ce:0f:ce:ae:f7:91:08:78:89:12:
                    27:e3:4e:81:96:39:a2:bf:1f:09:b4:91:8a:26:bf:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:A6:5F:77:20:90:76:D9:95:AC:58:8E:23:3D:D6:3B:9D:5A:B8
            X509v3 Authority Key Identifier:
                keyid:FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:87:d7:88:da:6a:a7:0f:85:bb:c4:9e:a9:8f:4a:6b:d5:
         06:32:17:06:b7:cd:66:2b:61:d0:b0:02:f4:30:64:2e:4b:3f:
         98:a9:1d:bc:5c:98:b3:20:0f:f6:40:62:5b:17:b9:a1:04:33:
         48:13:a3:63:e3:93:54:6d:99:87:8a:bd:e6:b5:54:dc:47:67:
         a5:2a:b5:b1:cf:05:fc:2e:4b:c4:dc:35:38:f0:7c:d9:e6:e3:
         c2:f4:2c:26:f1:21:59:4f:9d:41:f4:8b:bc:a8:72:44:89:da:
         50:8f:9a:be:0f:8a:ba:9d:22:fa:78:8d:ef:dd:d3:98:7a:d2:
         80:7f:f5:90:b9:77:3f:49:14:2a:aa:3b:e5:7b:51:b3:d1:fd:
         85:fc:7b:7d:e7:80:35:92:94:2f:1f:a9:0b:1e:b3:96:db:1b:
         27:c6:ab:9a:22:05:c8:c4:c3:dd:22:b4:fa:c6:40:9d:03:8b:
         9a:42:e8:86:71:02:88:96:7e:d4:cd:02:3c:96:b6:6b:5a:24:
         31:02:5e:9b:58:fc:a7:37:eb:72:19:13:bb:c6:89:57:fd:af:
         a9:87:b3:44:62:7d:eb:3a:bf:f7:40:0a:9c:28:ea:62:55:42:
         85:8e:2a:32:54:e1:9a:52:66:5a:52:54:47:87:5b:36:df:0b:
         3f:29:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:00 2026 by rpki-client