Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File:                     l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier:          f6WakkQHjmr2ZlXR3kxke+0PdvBRmozhsTgj1y78gyo=
Subject key identifier:   81:E1:77:60:09:9D:2C:7C:E8:F8:E0:09:57:52:81:AE:8E:A5:12:DD
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer:       /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial:       019D3AF83CACF4529745A13CF91AE40D4AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number:          077F
Signing time:             Sun 29 Mar 2026 19:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 19:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 19:00:40 +0000
Files and hashes:         1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: z/m7H33PWuPlVOlVXuUekgHYTFv/NmNyfYwa5n9fVks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:f8:3c:ac:f4:52:97:45:a1:3c:f9:1a:e4:0d:4a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
        Validity
            Not Before: Mar 29 19:00:40 2026 GMT
            Not After : Mar 30 19:00:40 2026 GMT
        Subject: CN=81e17760099d2c7ce8f8e009575281ae8ea512dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:7c:5c:74:36:51:0f:16:8b:2d:b1:dd:5a:
                    b8:62:07:10:b4:1c:f7:58:1e:5a:63:3a:af:f1:7e:
                    1e:4f:0a:24:78:77:47:ba:55:96:15:f7:15:ae:13:
                    d3:a9:18:65:95:16:25:5c:3f:f7:8d:f0:c1:cd:c7:
                    44:37:76:68:ec:9b:77:73:92:84:bc:63:82:ec:e3:
                    c4:1e:47:b5:30:cd:37:f2:76:96:63:b5:3d:cd:11:
                    8b:b1:4f:f2:f5:73:76:82:4f:0a:6c:07:69:6a:88:
                    4a:cb:2a:36:4d:58:8c:48:c6:60:33:31:25:81:7a:
                    ca:bd:f5:fa:94:6d:f4:b6:c1:22:cc:e4:79:df:7e:
                    3b:e2:e9:30:3d:22:e5:a2:e5:5d:e5:b1:72:6b:53:
                    e1:80:ee:0e:0a:d4:30:00:62:41:36:21:4c:62:cf:
                    6c:1d:e3:aa:c2:c3:5f:ed:f7:80:24:ea:f7:84:08:
                    93:2e:11:84:5f:36:46:7c:33:e6:b4:d2:90:2f:45:
                    56:96:8d:68:68:ff:cd:cc:82:c8:22:1e:c1:1d:d2:
                    64:5f:0a:88:62:59:76:db:8e:7f:4c:f5:05:6a:ca:
                    1d:bc:64:7d:73:5d:36:36:71:6e:48:e9:0b:31:12:
                    e5:e3:79:be:51:b4:76:ed:44:42:c6:c2:49:f9:e4:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E1:77:60:09:9D:2C:7C:E8:F8:E0:09:57:52:81:AE:8E:A5:12:DD
            X509v3 Authority Key Identifier:
                keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:e7:49:f6:0a:9e:d5:b0:77:f5:1f:33:41:4b:de:a3:11:
         8a:ad:d6:c8:06:b8:8d:5b:2e:5e:64:35:70:bd:d7:89:3d:b4:
         98:55:b2:dc:21:2f:86:3e:0a:38:20:0b:a7:54:3e:67:35:60:
         ac:9f:a2:24:ce:8f:09:13:24:d4:55:16:0b:ad:d8:95:56:8c:
         6a:84:c7:be:4b:3f:4c:43:0a:b6:fb:f0:3e:86:7d:d4:59:6c:
         6f:3d:15:c8:c9:3d:db:de:8c:5f:7a:13:ce:a5:65:68:da:91:
         af:ff:e8:fd:12:bb:74:35:2b:fb:56:fd:ec:fb:f5:d6:62:db:
         f2:7d:0c:66:f0:dc:2b:2b:61:b6:1b:9a:b4:b3:11:88:30:b1:
         46:a7:5e:1e:49:2b:b2:d5:57:19:3c:5a:28:1c:76:d0:f7:13:
         7f:17:8c:fa:e3:60:a7:f9:f8:49:39:54:cd:b0:07:01:b4:7a:
         6e:d6:b8:07:2f:72:e2:a9:df:99:78:1a:9a:28:2c:d8:27:1b:
         e9:fc:22:db:a6:07:60:95:77:8e:9f:25:87:ce:cc:89:f1:dc:
         e3:ca:dc:d9:c6:58:c8:54:60:b6:ee:91:6c:c1:9a:87:48:c1:
         73:ed:1e:29:6d:57:83:85:39:ef:3a:e1:31:af:d3:58:cc:c1:
         b4:0a:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:36 2026 by rpki-client