Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
File:                     1TWbs5OO2MpV324QAT-f9hAcG_c.mft (raw, json)
Hash identifier:          f96zdO3JXlke2oLoSzLdy0Fxptx3hKSPaoHzk7NKTog=
Subject key identifier:   7C:F0:E1:F3:22:55:A5:43:20:36:74:6F:18:90:F1:50:4A:3D:43:F9
Authority key identifier: D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
Certificate issuer:       /CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
Certificate serial:       019D38D3D84B83B004160DE30D0EF2785555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
Manifest number:          56
Signing time:             Sun 29 Mar 2026 09:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:40 +0000
Files and hashes:         1: 1TWbs5OO2MpV324QAT-f9hAcG_c.crl (hash: /hiNX2+5Xg7v7q55790RXuomcFpEwrruPwgQtJ0gLo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:d8:4b:83:b0:04:16:0d:e3:0d:0e:f2:78:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
        Validity
            Not Before: Mar 29 09:01:40 2026 GMT
            Not After : Mar 30 09:01:40 2026 GMT
        Subject: CN=7cf0e1f32255a5432036746f1890f1504a3d43f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:f1:42:dc:79:86:cc:98:49:62:49:3e:b6:
                    36:7d:41:f8:97:23:4f:60:ca:a7:fc:43:e9:ac:e7:
                    d7:43:76:55:55:4e:c5:3f:a2:cb:6e:2b:64:14:69:
                    54:bf:0d:3c:0a:8f:c2:a4:b8:e4:e3:50:d3:5f:cd:
                    e0:9c:3f:1d:86:54:31:36:5d:bb:37:94:1d:df:93:
                    c5:a8:87:7b:5c:a1:c8:24:a1:dc:ac:d0:82:56:ee:
                    9d:e0:a6:9e:c4:7c:22:14:85:ac:a7:34:dd:44:75:
                    7e:17:63:8b:d3:a8:92:8b:43:df:11:25:e4:98:d4:
                    12:7e:c7:08:b3:0a:32:14:cb:03:72:2b:42:05:3b:
                    c8:d1:47:aa:b2:73:f1:07:e6:79:1c:f5:e6:d9:56:
                    bb:80:30:13:60:9d:5b:ee:b0:8f:78:7e:b0:43:24:
                    53:85:82:83:6d:7d:85:00:61:9d:82:72:46:5b:06:
                    46:de:8e:4d:c3:4e:fd:84:f2:39:6f:20:4c:87:0a:
                    0e:ce:7a:f0:ac:08:d0:b9:18:f8:4e:06:00:af:8e:
                    5f:20:c7:dc:cd:73:bf:2d:f4:1e:32:ab:cb:15:0e:
                    b3:a0:7c:6c:a9:b0:53:3a:6f:cf:82:90:2a:cf:ba:
                    ff:38:b8:b4:74:06:5e:b0:f7:7a:a3:ab:e9:9c:02:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:E1:F3:22:55:A5:43:20:36:74:6F:18:90:F1:50:4A:3D:43:F9
            X509v3 Authority Key Identifier:
                keyid:D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:14:be:ea:10:1d:63:66:f6:b5:da:17:59:1c:7a:90:30:
         b3:04:48:c4:4d:3a:5b:95:66:ad:61:b8:bf:27:46:ec:59:05:
         cd:68:54:f0:32:d5:25:67:06:21:20:37:e8:28:f2:a0:da:9e:
         23:05:4e:70:4b:7a:71:4d:ea:86:1f:ff:59:69:20:5f:d4:ed:
         fb:3f:57:9f:b3:02:7b:c9:4a:86:f3:7c:9f:62:8d:21:97:d1:
         e9:35:3d:b5:80:bb:4a:fd:bf:ba:5b:52:3b:eb:ae:c5:8c:bf:
         1d:18:e1:3d:f3:4c:6d:5b:03:7c:e5:04:e0:5b:70:ea:48:b6:
         16:da:80:21:eb:4d:f4:5f:cd:14:94:6b:7e:4e:49:fd:aa:ed:
         28:96:31:10:77:36:17:b6:e8:02:c6:9e:5f:d7:12:d0:cd:d3:
         87:33:eb:e3:ca:d7:a7:ef:cb:2e:50:1c:5e:54:53:be:b5:39:
         77:c7:28:07:46:df:e1:0b:37:74:12:f1:9d:0d:11:c4:ea:89:
         52:ce:62:a1:3d:9e:68:6f:8e:ff:2f:22:cc:24:50:50:da:b1:
         9c:29:77:86:ec:6d:41:18:c2:41:11:d3:eb:8c:b9:38:f9:11:
         ad:ab:3e:ec:cf:9b:89:15:87:50:86:b5:d4:4e:db:33:69:7c:
         e8:d0:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:32 2026 by rpki-client