Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File:                     ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier:          yxJKnRmG2YX53PrLIpTN1R8LOJ9Ks2zCOWIGcgN5e78=
Subject key identifier:   8D:90:5D:7D:28:BD:46:EE:80:03:FC:A7:71:24:C7:BB:B3:33:7A:BA
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer:       /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial:       019D38666679316DE21942E0E2A4EE097C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number:          15E6
Signing time:             Sun 29 Mar 2026 07:02:08 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:08 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:08 +0000
Files and hashes:         1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: dtKEkI2UkqCSegsTmO1Qxvd3ekhrZ4nKdOSzLIdc+tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:66:79:31:6d:e2:19:42:e0:e2:a4:ee:09:7c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
        Validity
            Not Before: Mar 29 07:02:08 2026 GMT
            Not After : Mar 30 07:02:08 2026 GMT
        Subject: CN=8d905d7d28bd46ee8003fca77124c7bbb3337aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:5e:38:ba:cc:27:6f:15:5b:4f:51:ff:7a:
                    18:e8:5d:b2:1b:7d:43:e6:69:a5:81:8f:42:43:9d:
                    1e:e1:0d:42:36:c4:c6:de:12:92:0e:c4:ec:26:d1:
                    7f:84:7d:91:1d:9c:62:5c:5f:a8:9d:f7:4b:6c:4a:
                    3d:f7:c6:f7:88:af:81:13:39:d6:41:29:3a:3f:a2:
                    e7:e5:2c:ef:07:f7:5b:e5:40:d4:24:ab:30:f9:63:
                    28:33:0f:fa:fd:45:7f:82:07:ff:6e:27:29:cf:db:
                    25:28:24:e8:88:69:f6:17:6f:e9:ef:f2:47:0d:8d:
                    c4:a8:f1:5b:1c:2d:24:8a:87:3e:7e:ab:e9:25:b2:
                    58:f4:d6:24:97:15:a9:6b:00:c1:07:12:8b:5b:00:
                    cd:05:31:fa:3a:94:7f:cb:f5:cf:e4:c5:e6:8a:ea:
                    3f:40:28:57:34:65:dc:e2:24:03:8d:13:c0:2c:b3:
                    71:d7:db:4d:bb:cc:fe:73:4f:3e:f6:0c:d5:1b:92:
                    05:36:f9:a1:dd:fa:15:89:a9:98:96:90:c5:37:e4:
                    a5:14:4b:5a:a6:6a:f5:71:5e:5d:2b:e4:a1:05:bd:
                    b0:ce:57:f5:3e:de:f2:32:67:28:6b:da:30:d1:e6:
                    82:a8:c0:fe:c5:2e:f0:dc:b4:06:25:50:c1:f4:1d:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:5D:7D:28:BD:46:EE:80:03:FC:A7:71:24:C7:BB:B3:33:7A:BA
            X509v3 Authority Key Identifier:
                keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:01:72:09:36:40:e1:e3:c4:a4:92:66:9f:46:56:d1:b9:74:
         9b:26:4a:77:a6:2e:a2:6c:c2:fd:9b:b0:68:8b:f0:f2:72:d3:
         ac:4e:6f:4a:91:7c:08:04:ae:36:cd:bd:64:f3:2a:73:7d:06:
         1b:40:92:38:d8:c3:54:a3:48:52:d1:de:68:1e:53:07:18:60:
         10:6f:bf:04:47:fa:4b:db:7f:4a:dc:5d:9f:66:be:91:fb:1c:
         0a:85:a6:ea:c0:a2:1a:99:9e:41:63:f1:57:86:5f:3e:75:54:
         66:e9:82:75:ef:f4:b4:64:33:df:b6:2c:99:63:49:92:a9:d3:
         e5:23:8c:ab:74:59:0d:1c:2d:c4:ca:22:5e:3d:64:99:7e:d1:
         4c:fa:c5:92:71:b6:da:e1:e4:cb:07:0a:dc:ad:97:d1:57:c5:
         24:a5:a2:40:7d:a5:99:60:dd:13:30:9e:13:88:d7:65:68:53:
         fb:d4:1e:22:21:23:24:6a:7d:e5:14:a9:fa:88:28:eb:e3:cb:
         0e:e8:6a:d4:3a:6b:d8:29:c0:a6:27:7f:33:8d:50:ee:47:00:
         61:6b:57:a3:12:c9:a6:bc:20:99:27:fb:72:93:6c:ac:c4:92:
         b7:5c:7a:ec:82:3c:3b:3d:20:0f:36:c1:40:af:81:2e:5d:61:
         92:d7:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:51 2026 by rpki-client