Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
File:                     cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft (raw, json)
Hash identifier:          Rx1KBatLBPod+HBFN55ur/DSsWs86JFm5tFH9Bzbq8g=
Subject key identifier:   27:23:50:8C:6C:91:08:70:05:74:EC:40:EE:6D:99:15:4E:71:84:2C
Authority key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
Certificate issuer:       /CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Certificate serial:       019D39AE9041B5D6A9E357F96691EED2B480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
Manifest number:          01F0
Signing time:             Sun 29 Mar 2026 13:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:34 +0000
Files and hashes:         1: MavU-BpK71I0RuG6BWQyo5A4rwE.roa (hash: DgwXevlFtsD41Y9+x94lj6YCu7nKmCUlDawGbPcfkb4=)
                          2: cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl (hash: v3k5O2mcuvstL1mXNeBEZvH9MN/KTfauToTd6LLkyB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:90:41:b5:d6:a9:e3:57:f9:66:91:ee:d2:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
        Validity
            Not Before: Mar 29 13:00:34 2026 GMT
            Not After : Mar 30 13:00:34 2026 GMT
        Subject: CN=2723508c6c9108700574ec40ee6d99154e71842c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:87:af:98:fa:93:d1:c2:ad:aa:07:a1:71:
                    5c:ff:5e:ee:a9:27:b6:96:b7:3e:cf:0c:98:fc:4f:
                    c8:e7:40:95:e0:21:75:61:4b:ff:50:50:a0:87:e2:
                    9f:93:74:14:9b:53:8a:df:f4:13:11:a3:83:01:c9:
                    55:57:01:9c:ae:0f:96:c7:35:16:fa:ab:f3:d8:88:
                    68:bc:9e:45:36:8b:28:ee:0a:b4:66:ab:8e:ef:b8:
                    ff:9c:c2:73:b1:1b:56:c1:81:cc:7c:5b:b6:6b:b9:
                    24:df:36:d0:37:01:c7:4e:f8:87:f1:6a:2a:1f:e0:
                    d0:e5:24:3f:28:64:55:e9:a8:3f:94:0f:11:d0:b9:
                    50:f1:8e:40:46:4e:dd:32:1f:70:bf:5f:29:95:fa:
                    89:30:6f:b6:5f:c3:11:6a:36:31:ea:b6:61:40:f1:
                    50:8b:8e:5d:3f:50:aa:43:67:5b:6e:43:ac:ef:ff:
                    28:91:f3:e2:03:6e:bf:f7:17:22:0f:e6:62:01:30:
                    4d:9d:3a:7f:3f:88:83:0e:54:6a:41:31:0c:8b:f8:
                    e9:7f:b0:35:e4:26:d5:46:af:e0:5b:78:3d:04:86:
                    2b:87:2d:89:03:c0:40:ef:8d:a3:33:ce:a1:a8:0b:
                    fc:23:5e:b7:8b:fc:94:9c:98:f9:f4:81:82:5a:06:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:50:8C:6C:91:08:70:05:74:EC:40:EE:6D:99:15:4E:71:84:2C
            X509v3 Authority Key Identifier:
                keyid:70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:bf:a0:bf:77:6a:a6:e7:7c:95:a3:67:a0:fe:56:e2:b7:
         fb:73:b4:98:6a:ff:61:11:16:06:38:04:0c:be:99:e9:46:a8:
         93:e3:26:e2:db:33:ba:3c:b4:90:3f:a5:5a:e3:49:76:04:54:
         ce:72:8a:22:b2:e4:8a:5b:1c:20:e2:4d:04:ea:46:54:ff:ba:
         c8:a4:dd:3c:cd:7d:7f:09:91:5b:c6:58:a6:cc:36:13:b1:3f:
         53:d3:42:24:6e:82:f8:15:51:be:73:64:35:b4:55:62:69:2b:
         52:d8:00:d4:db:40:4f:de:e7:db:9c:ae:12:1d:bd:7d:ac:c2:
         dc:97:b6:bc:f0:c6:06:a1:db:36:7a:3f:18:88:59:79:1f:f7:
         fd:51:1d:d1:d7:02:6f:ae:28:d9:6c:37:46:46:d7:47:7d:04:
         ed:87:1a:b5:9e:26:84:b7:ea:a9:1b:29:ac:cd:4b:84:47:6f:
         36:3c:3a:f1:5b:c8:c5:37:20:15:d8:cb:8e:d5:e7:7a:ce:f0:
         9a:3a:00:2b:20:13:28:40:a0:5a:87:ea:cc:9b:eb:b2:40:39:
         68:b2:3b:dc:af:67:6a:15:63:81:e1:be:a6:6e:5c:a1:b4:e2:
         21:56:76:e5:fa:33:84:51:1c:0d:f1:28:62:5c:09:d0:1a:cc:
         1c:40:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:51 2026 by rpki-client