Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File:                     aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier:          MbOntionrJkC9J8lR5/20qJDZPJ4UurICSuM3TpeW6A=
Subject key identifier:   63:7C:52:C0:71:A9:15:E4:7C:4B:EB:42:EA:2C:C3:07:D6:BD:76:58
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer:       /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial:       019D3752A3B41FEEEF36F27922E5A76B2A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number:          0469
Signing time:             Sun 29 Mar 2026 02:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:55 +0000
Files and hashes:         1: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: wRXwTavhKD9iHUtuM5+j/Y7n8U0YT2O9RzROkKbv/LA=)
                          2: zm22SYQDssPVyPUHKsbO-cFBVo8.roa (hash: e95IhW6weWHIteUAYq4kEbRjvuNFmWrzWP7IgPh5MEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:a3:b4:1f:ee:ef:36:f2:79:22:e5:a7:6b:2a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
        Validity
            Not Before: Mar 29 02:00:55 2026 GMT
            Not After : Mar 30 02:00:55 2026 GMT
        Subject: CN=637c52c071a915e47c4beb42ea2cc307d6bd7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:dc:22:71:4e:e9:a6:c8:08:4c:f7:76:d7:
                    05:01:b9:5b:92:c0:46:1d:fd:2c:96:2b:2a:4c:19:
                    2e:5f:ec:a1:7b:e6:23:25:30:c7:94:9b:85:6a:d2:
                    ad:fb:61:81:f5:a0:b2:f4:b0:02:e5:9f:78:05:9f:
                    92:cb:54:11:21:e0:65:9f:1d:44:e9:15:f7:64:cb:
                    c8:a3:d2:52:af:3d:3c:b6:ab:ef:bc:72:28:1b:cd:
                    62:e4:0b:12:48:b6:92:38:74:cb:0e:33:13:c7:f3:
                    8b:ff:9a:a1:cf:4b:c3:20:00:e2:d6:7f:3c:cf:29:
                    88:bf:ba:25:df:7e:fc:e6:46:58:94:a9:86:b1:63:
                    34:4a:37:ef:ac:dc:c7:f3:c1:5e:fa:bb:ae:9f:0f:
                    5e:87:c8:a5:de:8d:b8:d7:e8:21:0b:87:c9:b2:97:
                    fc:17:71:1a:a3:61:5f:d1:4e:67:24:5f:3b:27:b7:
                    88:92:76:e7:bd:60:34:93:6a:8f:7d:7c:85:92:95:
                    a6:38:e4:69:f8:67:94:a2:c2:78:78:ef:d2:68:ac:
                    81:15:c5:75:cb:b4:5c:97:b9:c1:6f:74:b7:42:83:
                    a3:f5:83:8a:f7:98:c7:eb:f8:32:a6:2d:12:07:26:
                    88:c9:fe:3b:fc:29:8b:54:0d:84:9c:87:ff:b7:ab:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7C:52:C0:71:A9:15:E4:7C:4B:EB:42:EA:2C:C3:07:D6:BD:76:58
            X509v3 Authority Key Identifier:
                keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:07:69:be:c1:8f:5c:18:95:18:e0:7f:e4:38:6b:2a:b8:cd:
         15:ef:e8:89:d7:b4:93:4c:d5:05:35:51:bb:76:5e:f0:b8:78:
         c6:bd:41:5c:9b:09:da:83:01:10:86:8f:36:ff:7f:d0:db:85:
         e0:73:dc:3c:7c:66:0a:da:46:bb:0f:fe:66:bf:70:0c:8c:58:
         97:34:df:b1:6b:cf:2a:a2:22:8e:55:22:83:57:59:55:40:bf:
         69:33:c5:54:0a:68:cb:b2:94:57:47:3e:5b:98:f3:70:dd:42:
         c7:74:14:1f:aa:8a:69:5a:30:65:22:4f:12:fb:0f:95:68:58:
         b6:bf:b1:b0:97:00:d5:f0:63:7c:e7:3f:5d:31:46:4e:a4:b1:
         ca:b8:3a:e8:70:99:f5:5a:fd:7d:9e:3c:65:ef:b4:75:89:26:
         ab:b7:45:27:15:ee:cd:69:bd:64:1b:77:07:5c:d6:8d:35:6b:
         66:84:48:b7:5d:45:6f:1a:f9:b6:98:ac:83:23:b4:79:c0:09:
         fd:a9:17:3d:64:e2:1c:4e:d3:c2:ba:14:ed:a4:bf:ff:7d:9a:
         18:6f:31:46:52:47:6a:ce:f5:b8:8e:33:64:91:23:ec:f8:7e:
         81:fb:f0:47:18:83:3d:e2:69:46:3e:59:48:8c:1f:00:1e:af:
         1c:ff:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:14 2026 by rpki-client