Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File:                     UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier:          cTVKJ3tSeQUeEPPCgpQDHzLddvZpj2SBuha/6oY/xwU=
Subject key identifier:   75:6D:F2:1C:88:EB:10:99:50:E7:03:4F:90:92:2F:C0:99:C6:72:05
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer:       /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial:       019D375231BD78E5ABD665BBFE93D9F83793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number:          0B29
Signing time:             Sun 29 Mar 2026 02:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:26 +0000
Files and hashes:         1: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: 21VllzBFZtLqyIs9pxKow2IQ0NiskkqcJhYCY47kkuE=)
                          2: ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa (hash: cLPzRbnAmpDPM25/ehEAiv6PVrI6yHFxO/FTdnRAlow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:31:bd:78:e5:ab:d6:65:bb:fe:93:d9:f8:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
        Validity
            Not Before: Mar 29 02:00:26 2026 GMT
            Not After : Mar 30 02:00:26 2026 GMT
        Subject: CN=756df21c88eb109950e7034f90922fc099c67205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:9d:46:81:22:f7:3e:ca:46:6b:7f:19:e2:
                    60:6c:98:ed:4e:01:1d:aa:35:61:ed:b0:57:a4:b1:
                    02:08:cc:7b:96:3f:b5:79:e1:1e:7d:be:73:10:df:
                    1e:3c:20:ce:52:c6:f1:85:90:60:68:a3:3d:45:c9:
                    b8:27:28:43:de:bd:db:17:a0:ab:69:44:a7:b1:cf:
                    ad:d6:2c:4a:81:07:8b:a7:b1:46:d2:b7:a2:d7:09:
                    ee:6e:f5:fb:97:7a:0d:4d:5b:1e:0e:c0:e1:d7:73:
                    3e:90:68:2d:c0:86:ea:ba:34:ed:f5:80:0c:67:a4:
                    9f:9c:cb:a9:33:ed:f2:d0:44:5f:45:d1:44:a2:ff:
                    26:66:e7:4d:b0:ae:26:86:f4:56:b1:55:9c:33:d5:
                    d9:15:90:79:b1:e3:bf:70:cd:33:27:19:6d:7c:70:
                    19:16:c5:00:ad:be:ce:27:c3:36:63:95:a5:06:56:
                    8e:85:a6:39:24:18:54:ed:82:1b:ff:59:ff:fc:91:
                    74:f3:40:44:10:a9:14:d7:40:ce:b1:d9:7d:7b:fe:
                    d6:27:af:2f:2e:6e:89:66:12:8f:0b:8d:33:a3:ed:
                    a5:1c:d7:73:38:10:a5:6c:8b:6f:fc:6b:15:84:9d:
                    f4:26:e0:f8:d6:1a:f8:9f:44:63:41:5c:65:9c:83:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:F2:1C:88:EB:10:99:50:E7:03:4F:90:92:2F:C0:99:C6:72:05
            X509v3 Authority Key Identifier:
                keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:59:ad:e3:bb:90:8b:c7:80:0b:f3:a7:14:0b:1e:e4:fc:cd:
         81:9c:cf:84:25:3b:1a:3d:38:a4:9a:c9:2d:b4:d1:e0:fc:09:
         e9:4b:b5:04:7d:db:f1:e8:08:69:fb:77:7f:15:67:6b:f2:d5:
         1c:2a:53:bd:b7:8b:1f:b8:0f:11:b4:55:08:2b:3c:dc:e8:65:
         67:58:e3:f2:bd:28:8f:a1:18:0c:66:c2:1d:1d:94:c7:32:80:
         bb:49:ac:26:cc:3a:bc:19:f7:86:ae:80:02:c4:dd:9b:70:a4:
         26:c3:5f:5a:65:80:84:f6:40:ff:d4:d1:fd:15:78:d7:e7:62:
         9c:e1:3f:fe:6c:75:40:51:31:59:83:31:05:34:c3:ae:4d:f3:
         cb:d3:34:45:dc:c8:96:07:63:0a:d6:a5:90:d2:47:b9:a9:44:
         34:52:34:af:66:50:ab:94:b5:6f:2d:ca:67:c0:04:df:e1:cb:
         ef:d9:ed:2d:a0:2b:80:d9:02:29:16:ca:04:fb:76:70:af:0c:
         51:73:d7:92:2c:fe:81:d7:15:63:d6:f8:d2:8f:d4:61:4e:ec:
         aa:53:94:54:fb:49:69:bd:c6:3c:fe:70:66:7c:5e:85:f9:4d:
         82:c5:55:6d:e8:4f:ce:66:de:f2:ba:7d:46:e9:87:74:ec:74:
         a3:c9:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client