Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          qXyG1ScglxKUUdShhKiwrj1rwmu1aLJ+yB9fDpaUbJc=
Subject key identifier:   E8:D4:9D:60:DE:4F:36:82:15:9B:7C:F4:5D:7F:E2:0F:18:18:9B:03
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019D3752ABFAEC9A87B1454B5BB8D709EEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          08F8
Signing time:             Sun 29 Mar 2026 02:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:58 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: W20/b2aB9OOC2Ao/T3vLLrrRFnTzYX2dLu/JvZkV78w=)
                          2: IY4Ud8FalvQX-HNlMYS_A9LK2SA.roa (hash: HbJnUoe0Yv6rvkXwg55slfYNJG8JrNBrpoCMGVfMWXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:ab:fa:ec:9a:87:b1:45:4b:5b:b8:d7:09:ee:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Mar 29 02:00:58 2026 GMT
            Not After : Mar 30 02:00:58 2026 GMT
        Subject: CN=e8d49d60de4f3682159b7cf45d7fe20f18189b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:fe:c7:f8:a9:7b:47:33:40:b0:91:59:c4:
                    80:20:71:7a:f9:e3:f0:7e:5d:c6:cf:01:63:6a:07:
                    06:e0:ae:e7:0d:4e:77:37:1a:07:05:31:e1:24:60:
                    dd:74:fd:6c:3d:8b:1b:0c:fa:d7:56:d2:05:69:2a:
                    90:9a:16:59:9f:a8:da:62:df:92:ff:f4:e4:e3:d8:
                    5b:32:01:19:47:5a:76:10:e7:30:82:39:25:87:cf:
                    10:98:a7:eb:06:8a:71:88:ab:21:4a:a4:cb:c7:fd:
                    d1:12:78:b5:19:12:b4:0e:e7:6e:14:40:31:a1:09:
                    b6:68:ba:4d:76:8a:d8:33:3d:bb:11:9b:d4:93:d7:
                    0d:2b:73:b3:a1:12:32:3d:c5:1a:51:06:aa:90:75:
                    4d:27:cd:12:13:9a:10:ae:8e:a7:c2:3d:7f:61:5f:
                    1a:0c:f6:22:1d:12:cb:84:63:a9:83:50:f8:08:5b:
                    34:7a:d1:a3:70:4d:63:b4:4c:37:82:72:61:99:e3:
                    ac:9d:7e:fe:2e:46:77:a7:96:36:89:ad:3f:a4:d6:
                    ee:03:0c:4f:c3:2f:23:7a:a7:22:9d:18:72:b9:2c:
                    85:e5:e3:3a:a4:64:95:f1:4c:f5:33:9c:8d:ae:d0:
                    3f:af:08:8b:b9:52:d5:00:34:b4:de:b4:23:9c:b2:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:9D:60:DE:4F:36:82:15:9B:7C:F4:5D:7F:E2:0F:18:18:9B:03
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:59:2a:1e:bf:e0:cf:10:aa:b8:b7:fa:01:0b:dd:0b:90:
         a0:e5:10:a5:0e:4e:ae:40:ec:db:13:d3:c0:3b:23:b5:29:77:
         b0:55:0c:7b:6a:0d:c2:69:4f:1b:ef:84:aa:49:84:8b:63:10:
         fa:dc:76:ef:af:b5:e2:4f:c3:02:53:bf:59:ec:2f:83:c0:2c:
         8f:15:9a:db:51:58:22:58:83:07:e6:6f:e7:69:b1:a9:96:e3:
         fe:43:72:65:33:60:43:e4:bc:36:25:f4:39:ba:58:ef:68:c9:
         06:b9:17:de:64:30:53:a0:e9:03:e1:b2:7a:bc:be:74:2b:ce:
         1b:06:b8:23:9f:6e:cb:cc:50:f2:3f:01:d4:ee:83:cf:a8:5c:
         a3:1c:55:96:ea:8c:ab:1f:60:06:67:ee:7c:33:b2:d4:d2:2a:
         e7:84:71:65:b0:9e:c6:42:06:32:14:9f:95:02:83:cf:99:eb:
         c2:70:ec:81:d7:ec:87:ca:2f:22:af:ac:0d:e3:bf:39:d3:bc:
         79:7a:48:76:c5:9b:44:d2:cc:e2:ac:f7:af:54:0a:c4:8b:33:
         97:f7:88:01:c5:c7:a5:54:7a:90:9c:a8:e4:ec:b5:7f:98:48:
         d2:a0:0b:9c:b9:5d:97:9b:9c:9b:50:b6:45:f0:b3:3c:45:a1:
         17:41:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client