Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File:                     _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier:          wp3KFAzSQkb1N7gt2XBHHTY74Yb8zRum7AEoWZd8xzo=
Subject key identifier:   9F:50:66:7D:0D:3C:BF:DA:57:7A:CD:C1:0C:D4:2B:30:4F:68:53:9E
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer:       /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial:       019D386556834C611BDBF32C456371207EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number:          0343
Signing time:             Sun 29 Mar 2026 07:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 07:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 07:00:58 +0000
Files and hashes:         1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: kZKCyZ1rANPZMx95ldlFcrsmZlK8s5EnkBgeBxpAOls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:56:83:4c:61:1b:db:f3:2c:45:63:71:20:7e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
        Validity
            Not Before: Mar 29 07:00:58 2026 GMT
            Not After : Mar 30 07:00:58 2026 GMT
        Subject: CN=9f50667d0d3cbfda577acdc10cd42b304f68539e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:cc:45:a8:7a:66:e9:7a:08:7c:00:62:10:
                    a9:96:5d:86:ea:86:63:0b:46:32:6a:b7:f7:46:c8:
                    42:5e:c9:f5:a2:bc:1b:33:cf:8c:fe:db:d2:00:04:
                    18:c6:bd:d2:e6:4c:89:a7:d9:87:0d:28:85:52:b8:
                    60:56:ae:fd:39:23:ec:f4:58:80:cf:9c:aa:2b:00:
                    1a:4f:52:7b:bb:0e:69:40:a4:11:75:f1:33:89:46:
                    a5:bc:82:b4:35:8e:5d:ad:ee:cc:c4:dd:7d:45:1d:
                    ce:f5:5b:5b:03:df:0a:65:92:c7:5b:ea:f2:aa:f0:
                    d2:55:6a:46:26:3e:10:3f:35:52:ab:b7:32:89:f5:
                    3b:91:d5:61:f6:e3:ac:00:11:43:fb:aa:4b:5e:6e:
                    f0:1c:65:1c:99:64:fd:9d:02:e6:53:a0:c2:70:50:
                    c2:61:ce:14:fa:28:e2:0d:42:4b:5d:41:50:5b:17:
                    d7:c6:f0:da:19:ba:a4:4e:7b:5b:c8:ca:17:23:09:
                    2a:91:11:0e:a4:93:52:e6:7c:45:34:59:7a:3c:ab:
                    52:77:07:18:41:35:61:dc:b1:3f:01:c5:2e:7c:65:
                    a2:32:e8:40:3c:3f:ff:d3:a9:24:bd:2f:08:b6:8a:
                    aa:b1:74:3f:c4:1c:dd:22:d1:c8:70:fc:c8:5c:48:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:66:7D:0D:3C:BF:DA:57:7A:CD:C1:0C:D4:2B:30:4F:68:53:9E
            X509v3 Authority Key Identifier:
                keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:7a:5d:14:a8:9b:7d:a5:30:0d:42:46:d4:02:db:10:17:
         22:bd:c9:65:fc:1d:70:05:fa:81:68:77:d2:49:e2:26:34:c2:
         29:94:e5:50:99:90:d1:75:22:e5:02:a6:19:86:74:09:a0:91:
         4b:56:1c:1a:fe:81:b0:12:0a:cf:e0:b6:84:f2:2f:3e:0f:2c:
         d8:8a:23:6d:1b:bc:91:35:cb:f5:47:96:3f:0e:f5:40:4c:ac:
         88:81:6d:27:c1:c7:90:a4:fc:9d:a9:8a:4f:a3:94:49:38:21:
         22:e3:9b:c0:54:15:55:99:1a:48:ee:69:06:6b:7d:78:22:36:
         79:4a:a5:2a:0a:08:ad:2e:fb:ea:d9:6a:49:5f:aa:55:f3:42:
         6b:2f:37:a1:15:7a:95:05:da:8c:96:55:c8:89:c1:11:7d:6a:
         3c:43:aa:bb:23:0f:f9:28:75:76:49:6b:f7:e5:16:7f:30:77:
         67:f1:4e:80:33:31:a2:32:d6:05:ef:49:ff:e9:15:41:e8:07:
         c5:c7:51:67:22:2c:f0:02:df:d4:3b:2b:de:72:ca:b5:e2:7e:
         82:82:f2:b5:14:0e:ce:3f:5e:ae:e9:f2:83:ba:fd:05:22:8a:
         a5:02:6b:09:19:05:6b:b3:9b:95:e5:69:42:56:e0:ea:98:1a:
         e0:df:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:37 2026 by rpki-client