Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          ZntOwNAOdM7wQuWXzZdxoB2aj+M43BmBTzdG3rONxRo=
Subject key identifier:   8A:30:16:A7:4C:09:CA:BD:8D:A3:F7:36:76:B0:9C:7E:B1:F9:73:65
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       019D38D309B1CAD7DD09DB2B9D2D5F31A97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          0F22
Signing time:             Sun 29 Mar 2026 09:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:47 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: Q/MnmY9xiAFyjvE1E9RfGnQnBV1wV+3ZKhCZVk4kkA0=)
                          2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:09:b1:ca:d7:dd:09:db:2b:9d:2d:5f:31:a9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Mar 29 09:00:47 2026 GMT
            Not After : Mar 30 09:00:47 2026 GMT
        Subject: CN=8a3016a74c09cabd8da3f73676b09c7eb1f97365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:23:1a:0e:13:76:6b:15:89:89:a6:42:ba:
                    bf:0d:9f:1f:e8:9f:8a:95:8f:53:5e:f4:0f:ec:4f:
                    d3:a2:73:84:23:f3:26:2a:7e:ea:d7:7c:91:be:ff:
                    14:dc:b4:12:f9:42:0f:db:c1:cb:67:1b:94:31:bd:
                    22:c3:36:60:22:49:63:83:56:36:85:5d:7c:f8:e6:
                    25:df:3d:d8:39:26:71:6d:b7:e6:25:ce:aa:5d:80:
                    a8:49:d7:68:df:bd:c7:1b:85:c6:eb:5f:8e:38:41:
                    b5:a1:7c:69:3e:f2:7e:f8:fe:6c:ba:c2:e1:a6:3e:
                    83:94:e2:78:ca:11:a0:ad:8a:91:8f:7c:35:9c:bb:
                    e6:9d:22:49:2f:6e:12:64:82:3d:28:f3:3d:b8:b6:
                    52:38:a7:60:3e:06:16:4f:99:a2:05:02:c3:82:c8:
                    36:19:31:12:6c:d1:8f:c6:dc:f5:90:c7:f7:46:e7:
                    45:78:27:56:90:8e:dc:95:2b:4b:55:7d:c7:d8:70:
                    54:ea:46:3a:ef:53:2a:38:ab:a9:59:ad:99:fd:54:
                    f4:3b:ad:00:21:8e:a1:6d:13:76:cc:b8:c7:3d:24:
                    78:c0:86:0c:75:08:d1:fc:fd:3b:c1:05:3f:47:30:
                    37:f2:5d:0b:a1:d0:5f:27:24:76:23:00:d6:1f:1b:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:30:16:A7:4C:09:CA:BD:8D:A3:F7:36:76:B0:9C:7E:B1:F9:73:65
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:35:be:9d:9a:2a:8f:2e:50:b7:ba:79:7e:f5:b9:65:ab:54:
         0c:3a:a1:77:39:e0:fc:e5:73:e2:88:31:dc:fb:03:cb:ef:1a:
         30:c5:99:fe:29:a4:48:d7:92:29:4e:ce:0e:44:03:86:50:3c:
         ef:ec:18:01:e3:f9:15:21:9a:c3:56:e8:2a:35:b4:18:f2:df:
         29:cc:c1:8c:1a:3a:cb:f2:90:37:a7:08:65:d6:70:c7:92:57:
         a4:92:03:69:2a:e9:11:98:c5:44:04:61:18:bc:4a:2e:e9:b7:
         73:aa:86:8b:9b:36:5c:86:77:4f:7e:3d:38:bf:3a:26:50:cc:
         77:32:8d:6b:52:2b:55:ad:72:53:d9:2e:49:cc:eb:c5:e8:a2:
         72:78:77:23:9a:ea:c3:c5:18:76:aa:b6:11:20:d0:d8:bb:66:
         47:be:88:90:ba:0f:ff:e8:d7:a2:14:05:3f:3d:36:1f:9b:4a:
         53:20:57:be:4c:ff:ee:aa:f4:88:5f:c3:80:a8:cd:52:c1:0e:
         4a:ea:45:86:a3:8d:2b:9b:c7:82:14:a9:10:90:bf:06:94:26:
         9c:0a:65:2d:2a:8c:db:09:e9:a5:b4:81:b1:53:12:be:ae:00:
         04:59:1d:60:28:9d:43:8f:05:68:78:4a:d9:dc:cf:db:a1:17:
         bd:5e:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client