Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
File:                     mylnPtSjkR9z1Le94bHnP7l4Nak.mft (raw, json)
Hash identifier:          1I1x6Af439Dp6nQwbimsztOZYCoiAxemmQTtj9+wfAM=
Subject key identifier:   FB:ED:81:FA:FB:D2:53:C2:DE:BC:36:F3:3F:B7:1B:CA:60:EA:59:90
Authority key identifier: 9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9
Certificate issuer:       /CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
Certificate serial:       019D40FA6F846FEFFF9948933B2E16EB386F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
Manifest number:          01BF
Signing time:             Mon 30 Mar 2026 23:00:47 +0000
Manifest this update:     Mon 30 Mar 2026 23:00:47 +0000
Manifest next update:     Tue 31 Mar 2026 23:00:47 +0000
Files and hashes:         1: mylnPtSjkR9z1Le94bHnP7l4Nak.crl (hash: ZiupsTr8zq/Z3d9ZzVhsp30A0Vf/DpwhoJThg7akupc=)
                          2: x6SHp9jb9Y7ursmGdVTA1j4Xzyw.roa (hash: +x3+qwk1rADPGvdSwpgxmTwHooTjFM1mg8Cp4QbMCTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 31 Mar 2026 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:40:fa:6f:84:6f:ef:ff:99:48:93:3b:2e:16:eb:38:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9
        Validity
            Not Before: Mar 30 23:00:47 2026 GMT
            Not After : Mar 31 23:00:47 2026 GMT
        Subject: CN=fbed81fafbd253c2debc36f33fb71bca60ea5990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:7d:6b:16:28:78:6f:84:30:3b:02:4b:8d:
                    84:3c:78:fc:c4:9e:6f:64:0c:e0:7c:ee:b6:c8:9f:
                    d5:a0:cb:83:37:60:e4:a0:ba:f0:79:5b:7a:1b:bf:
                    83:a8:28:d3:ba:2b:2c:1c:91:ba:d4:99:dc:e4:b2:
                    b6:b9:9c:bf:dc:f7:e6:73:a4:42:03:ea:8d:fc:a7:
                    a1:59:c5:2c:24:12:2f:c1:d5:64:59:1c:0a:86:f9:
                    2d:8d:f8:c1:93:2a:ae:88:3c:8c:d1:42:a8:63:a5:
                    98:ae:71:5c:22:4c:1b:50:98:0e:9c:dc:cb:f0:e2:
                    5f:73:01:7a:84:a1:09:fb:8e:bb:7d:5e:37:bc:ec:
                    af:40:fb:47:5f:5e:de:5c:1a:5d:30:15:61:ef:8b:
                    f9:3f:d6:8c:f5:2c:32:56:4c:86:2b:14:6a:70:25:
                    97:08:7d:0e:dd:77:65:e2:8f:ed:64:67:9e:cf:5c:
                    38:23:60:66:8f:77:8b:ab:53:ee:e9:4d:20:d9:c9:
                    8c:eb:76:19:d1:9e:76:c5:2f:ba:bd:c4:f8:42:0c:
                    c6:8c:7b:ba:91:a4:c9:3f:43:2a:30:ab:ee:4d:41:
                    5f:f1:c0:5b:bc:d1:67:08:88:29:d1:26:7a:7d:d6:
                    90:6a:21:27:9d:34:14:04:fa:28:3f:7e:54:74:51:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:81:FA:FB:D2:53:C2:DE:BC:36:F3:3F:B7:1B:CA:60:EA:59:90
            X509v3 Authority Key Identifier:
                keyid:9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:67:0c:3d:79:c9:81:7e:2f:a9:7f:67:de:30:94:04:3a:
         01:7e:8d:01:e0:e5:15:64:d0:20:b2:6c:51:b5:4b:ef:1a:7d:
         ba:4f:fa:59:22:71:b7:b0:42:23:e8:5b:9f:ba:6c:57:66:98:
         17:ea:22:e4:a9:8d:ff:b4:68:b3:5b:86:a4:15:04:32:21:f3:
         24:4d:21:8f:ec:78:64:38:43:e8:3b:9d:24:3f:32:92:bc:63:
         c1:99:84:cc:ae:37:36:7d:d7:fc:25:e4:dd:e6:14:d4:9d:0c:
         1b:84:6d:f2:c3:6d:e8:bf:ca:cc:c4:fc:04:40:b3:13:1c:ca:
         e9:d3:2b:4c:6f:4e:fa:ef:b2:9a:62:39:f2:e7:df:68:4a:28:
         f8:ed:9c:dc:83:2c:05:0d:8b:9c:49:f3:94:52:24:a4:ed:20:
         47:cf:28:24:bb:7f:00:f8:52:65:db:ad:37:44:f7:ac:99:bb:
         f0:73:a8:ed:b6:e0:f5:4b:94:4a:37:4a:fa:74:1e:02:a8:b5:
         27:c6:b4:01:dd:c0:95:5f:d0:f0:1b:de:45:9a:80:3a:30:19:
         88:ac:36:2f:cc:20:9c:d8:6f:45:f9:94:9c:71:47:4b:ee:0d:
         01:db:eb:39:ae:45:7d:22:4e:88:a1:72:af:b3:f8:71:a4:4f:
         ff:7c:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:28:00 2026 by rpki-client