Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          orLIPhIuJR1fE3vOzFeII/IYztAPoWbZxg6M3Bd4Z0w=
Subject key identifier:   9B:68:A2:1A:B2:DD:65:7D:53:4B:C7:2A:42:03:47:E7:19:42:57:17
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       019D371BE48D79701B5501D213BEAFDB2569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          095B
Signing time:             Sun 29 Mar 2026 01:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:07 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: rn8skI0FXfKmkQsN4jssi67rrrOE05FWf6FL3khl1Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:e4:8d:79:70:1b:55:01:d2:13:be:af:db:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Mar 29 01:01:07 2026 GMT
            Not After : Mar 30 01:01:07 2026 GMT
        Subject: CN=9b68a21ab2dd657d534bc72a420347e719425717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:ef:fb:85:ac:94:0b:45:8f:f3:c8:d5:42:
                    83:21:81:f0:72:d3:ef:b2:b0:37:6a:f8:f5:d5:94:
                    74:d1:ff:db:aa:f7:a7:e7:24:41:83:5c:12:54:b2:
                    1c:5f:e4:e2:06:89:96:51:27:f7:5d:33:d0:65:bf:
                    af:57:d3:c7:e9:8d:cb:46:72:ea:03:08:1e:c3:d4:
                    73:15:40:09:c3:20:ef:8b:ac:4a:47:b4:21:3f:c5:
                    96:b4:c8:a1:bd:4f:01:83:e8:db:92:dd:e4:38:ab:
                    95:84:ec:98:4c:9b:17:af:e8:30:38:57:e5:ef:6e:
                    fe:45:4d:26:f3:39:ea:dd:16:30:0d:ab:4e:85:44:
                    da:db:3f:fd:2c:89:79:47:8f:38:59:b1:86:a2:f3:
                    81:89:d6:da:14:58:da:a0:49:de:60:19:11:b4:7e:
                    cb:6b:73:5d:82:25:9d:8b:25:6a:30:80:a3:e1:e4:
                    c4:59:e9:ff:aa:46:93:0f:3f:17:c0:47:7c:7c:5b:
                    71:32:9d:78:89:ab:df:a1:54:56:d9:02:72:5b:e7:
                    1e:de:2a:bb:9f:76:25:4b:c8:7c:05:64:b9:9f:d5:
                    98:3f:48:d9:15:a1:91:73:6b:de:47:2e:5c:10:89:
                    69:5c:29:50:e8:ee:67:0b:8e:a2:ee:b5:a0:23:14:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:A2:1A:B2:DD:65:7D:53:4B:C7:2A:42:03:47:E7:19:42:57:17
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:39:98:5a:c7:ea:58:b8:44:06:18:59:3b:8d:85:46:c8:55:
         f3:12:a4:bf:54:c4:3c:f7:7f:d2:ad:95:78:1c:b9:36:ee:8f:
         23:e4:99:6c:ea:eb:77:63:80:8b:5f:1f:61:25:23:2a:1a:1d:
         83:7c:9c:6d:bf:f8:17:b2:ab:d1:24:51:83:11:ac:82:3c:83:
         90:fd:2f:4e:f9:40:33:87:d0:a5:e6:64:61:e7:81:5f:25:9c:
         2c:fe:55:40:88:bf:4a:10:bd:05:f9:70:d1:1a:52:3e:eb:a7:
         26:12:8f:b0:bb:d9:e7:c2:49:9e:8b:c6:0b:c4:78:a2:70:bc:
         ed:87:9e:0a:4c:bd:f2:1e:c4:5b:cb:fa:86:f3:10:69:97:5b:
         50:44:a7:aa:6d:c9:26:fc:f9:b9:8b:fa:2a:51:a4:6d:da:f9:
         ae:02:ff:fa:41:c1:b3:96:5a:3b:24:4e:ba:b7:c6:f8:0e:0a:
         0e:56:5d:40:ae:99:9e:f5:e0:a9:b0:79:d9:12:0d:c2:8c:15:
         95:88:4a:62:b0:88:25:89:b8:ed:1c:03:b7:35:c4:71:de:69:
         a8:2c:78:03:70:52:56:83:7b:91:f1:57:f1:5c:80:c5:a5:27:
         d9:be:a8:d3:5b:4e:33:cb:a2:a8:62:3f:84:7a:f7:7b:bf:6a:
         c1:1c:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client