Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          13UNK+Rn9Alm/mVAAXOtV3zEqeOmlPn33uCNmTMBNBA=
Subject key identifier:   48:81:D9:71:34:56:D0:43:1F:A4:6D:29:DA:34:38:13:7A:78:7B:78
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       019D38660DE1303F5B309D82A85489D2112A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 07:01:45 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:45 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:45 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: +HR5X6kntUEQg8fNJXhSrPMaxBigTN6I0FqtxrDotNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:0d:e1:30:3f:5b:30:9d:82:a8:54:89:d2:11:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Mar 29 07:01:45 2026 GMT
            Not After : Mar 30 07:01:45 2026 GMT
        Subject: CN=4881d9713456d0431fa46d29da3438137a787b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:1c:0f:d2:d4:3c:7c:8a:cc:e6:71:3b:8b:
                    1f:a7:74:00:7a:b7:3c:7d:90:87:6d:26:53:98:f0:
                    61:5f:bf:b9:cb:84:99:db:8e:7c:26:f0:a4:79:1a:
                    ef:db:d1:96:d6:04:df:cb:6f:20:a5:79:6e:8d:5d:
                    bf:56:99:a3:fa:55:b6:22:5e:65:0c:89:12:4a:4c:
                    ae:a5:ef:d9:84:75:3c:f2:f6:28:08:6e:d5:a7:bc:
                    c7:f0:37:86:c7:70:50:f1:1c:55:89:4c:2d:b0:aa:
                    3f:85:be:c3:f9:2d:1a:b3:7a:29:5c:2a:ac:fc:27:
                    6c:ea:36:bb:92:9d:04:82:ec:a1:78:1b:81:d6:d4:
                    fd:f1:90:a1:dc:74:69:b6:c5:c9:21:1c:2c:5d:80:
                    ad:b9:88:58:e0:fe:14:13:52:5a:2b:82:b4:04:8d:
                    56:0b:13:45:56:61:a1:48:40:b4:9e:f3:e3:1a:08:
                    ed:d4:83:13:6d:cd:e5:a7:c3:13:71:ed:91:c4:76:
                    55:66:81:e4:b6:87:2c:5a:d7:8c:ba:cd:97:94:ab:
                    e5:5a:95:27:98:ab:7d:49:9c:78:bd:7f:00:63:75:
                    dd:2f:3c:cb:d6:44:39:62:b6:5c:58:73:ee:00:d7:
                    ee:48:70:28:6a:01:2d:1e:6a:26:45:60:0d:7a:8b:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:D9:71:34:56:D0:43:1F:A4:6D:29:DA:34:38:13:7A:78:7B:78
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:b7:67:81:ed:da:68:b4:6e:bc:a8:09:ac:6b:d3:43:13:
         c3:95:49:d0:3f:07:04:e9:50:b1:9b:f7:d3:d9:fa:c8:e6:1c:
         ba:55:b3:c8:28:e5:b9:4d:75:4b:0b:e2:23:ba:e0:19:b5:7f:
         71:a7:0d:33:34:5d:36:fb:67:b8:09:18:00:8e:62:dd:ed:a6:
         e0:e3:e1:01:a7:ff:bd:f5:af:9d:c9:d1:01:f8:66:ec:9d:94:
         1d:55:50:cd:3f:4a:11:80:ad:ac:a4:13:78:4f:4e:11:e2:63:
         84:f9:54:79:92:91:9a:ec:25:f8:a3:08:88:03:11:b6:ff:52:
         5b:06:a7:19:01:ab:e8:95:10:84:e3:14:54:f9:4d:e9:50:07:
         1d:61:9b:96:85:4f:26:6e:1f:64:7e:f9:0b:4b:b3:fc:66:69:
         7d:ee:e4:03:1f:5b:4f:14:23:23:6b:fa:a4:5a:e7:1a:26:6a:
         7d:5e:35:9e:22:c3:bb:73:70:f4:fa:fb:44:5a:fe:fc:cd:8c:
         f1:27:24:6a:7a:bb:06:40:c3:95:9c:3e:6f:b2:15:8d:c4:d9:
         95:00:5f:61:7d:5b:b4:8b:fa:78:84:7d:ec:a1:76:9e:0d:61:
         24:bd:65:37:8f:57:3b:c9:b9:54:f7:51:a7:2c:5c:1f:4b:00:
         3c:89:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:07 2026 by rpki-client