Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
File:                     V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json)
Hash identifier:          UlEq/p3irBAsxnsumtKvuJ/E35qg8U6Cx+nB8N3EcTs=
Subject key identifier:   5E:34:63:0F:03:99:FF:62:D3:EC:B6:CF:BB:B8:DA:D4:68:D7:8B:7D
Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
Certificate issuer:       /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Certificate serial:       019D37C10B296582D1F0776DF532FDEB2A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
Manifest number:          0735
Signing time:             Sun 29 Mar 2026 04:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:31 +0000
Files and hashes:         1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: zSP10QacpOoRKwNNRNg8Nu7liHEj7HLcyGIlC1Epd2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:0b:29:65:82:d1:f0:77:6d:f5:32:fd:eb:2a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
        Validity
            Not Before: Mar 29 04:01:31 2026 GMT
            Not After : Mar 30 04:01:31 2026 GMT
        Subject: CN=5e34630f0399ff62d3ecb6cfbbb8dad468d78b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:06:8d:fb:8c:4a:d7:38:1c:29:ca:89:cd:
                    40:fe:39:d9:14:7c:b6:a6:1a:91:35:2f:0a:78:a4:
                    9d:2e:29:2b:ed:20:41:d0:f1:15:68:af:3b:60:c4:
                    d3:ce:86:77:e7:63:1a:14:c8:1f:cb:2f:56:d9:4e:
                    71:ac:1b:84:d9:1f:47:de:9c:8a:99:1c:d5:10:10:
                    c8:38:a5:ea:e1:e3:93:87:7b:78:79:be:7b:60:3f:
                    e7:10:1b:60:e8:af:59:18:92:f0:3f:1d:42:91:3f:
                    3b:fb:b9:52:d9:f3:e0:8c:5d:f6:55:a7:80:08:62:
                    2a:8a:c0:f4:12:4e:47:7c:a9:fa:a0:be:b9:e7:3c:
                    a5:7f:01:b6:44:a9:e7:cd:22:78:94:18:96:15:72:
                    2e:fe:2d:74:7e:b4:36:4d:ad:f2:cd:f0:74:5f:6f:
                    06:a2:e2:9d:b2:d8:f9:c6:94:88:cb:4e:0b:13:b9:
                    cf:8c:9c:fd:46:28:98:c3:fd:ee:71:57:da:5e:aa:
                    22:b9:6f:8b:9a:a4:f2:0d:dd:d4:df:82:eb:ad:8f:
                    9f:92:64:ff:20:3e:21:a6:ba:b1:70:5a:36:80:66:
                    f8:4c:5a:23:3a:49:54:eb:c8:b0:aa:28:b1:a4:a8:
                    e1:bc:85:58:e1:ba:33:b4:02:9b:62:af:14:d9:fc:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:63:0F:03:99:FF:62:D3:EC:B6:CF:BB:B8:DA:D4:68:D7:8B:7D
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:41:f5:46:01:f1:9a:42:d2:f4:6c:21:45:65:60:c3:5b:70:
         76:e0:44:07:54:e5:e3:84:df:ce:15:97:d7:7a:a3:76:a1:19:
         c9:1d:0f:7e:27:d8:49:b3:24:85:7b:24:ca:d5:c5:57:fe:43:
         6c:8e:34:2a:56:c9:e0:2b:cf:cb:bf:77:0e:67:43:07:0a:27:
         e9:95:80:88:1c:54:83:74:fa:72:8d:ff:07:b3:ce:84:75:10:
         11:13:c7:1f:f5:97:73:ae:fa:1a:ba:3a:7d:e3:bd:c6:8c:d6:
         f0:00:67:d6:1b:1f:ca:bb:d2:de:a0:31:e0:f8:c7:bb:82:c5:
         6c:c1:dd:7a:04:8f:30:81:a0:36:bb:02:24:15:e6:4d:94:c2:
         02:b6:87:17:22:5c:ae:62:ed:f1:fa:42:a7:bd:8e:39:76:72:
         79:30:45:49:cf:6e:09:c7:86:49:ac:26:4d:eb:31:cf:26:8b:
         e2:f8:36:35:13:6e:0d:89:55:04:a3:ee:e7:34:81:78:39:9f:
         ef:49:b7:22:81:56:bf:c1:46:87:9d:72:88:ec:96:15:2c:e5:
         15:84:5c:d8:a9:1d:6a:cc:9e:44:f5:46:b8:d3:0b:07:aa:69:
         2e:fd:f2:b3:b5:02:ba:e9:6b:8a:fe:64:da:ee:a8:ab:28:4f:
         b1:52:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client