Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          QZsgDwCbLeY4EUr5cY1Jc04vAPEG25Mwa/qYuGhklKo=
Subject key identifier:   24:92:36:46:EF:2A:51:E9:1F:5E:2F:C1:7D:47:5A:A0:F6:A1:00:E8
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019CF1CD08158A01D6F598A96C3BADF3D430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0C94
Signing time:             Sun 15 Mar 2026 14:01:11 +0000
Manifest this update:     Sun 15 Mar 2026 14:01:11 +0000
Manifest next update:     Mon 16 Mar 2026 14:01:11 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: g21nfTFVzN0u0ilvRbAjd46n9bdinhV3aIiBrWIZFP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f1:cd:08:15:8a:01:d6:f5:98:a9:6c:3b:ad:f3:d4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Mar 15 14:01:11 2026 GMT
            Not After : Mar 16 14:01:11 2026 GMT
        Subject: CN=24923646ef2a51e91f5e2fc17d475aa0f6a100e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:10:72:f6:d2:1f:6d:41:43:2e:4f:78:5b:
                    72:89:4a:14:41:1a:ae:14:7f:52:84:6b:32:9b:4a:
                    94:2e:ab:27:07:41:35:db:42:a7:35:81:3b:02:e3:
                    7a:01:14:37:17:76:67:c5:96:7e:b0:06:f4:02:c9:
                    2c:71:31:98:b0:02:0d:13:52:2f:b0:60:4c:1a:d2:
                    67:8a:8d:1d:55:c3:6e:8e:c0:89:fb:73:2a:ec:3e:
                    aa:5b:f9:b4:ef:2f:65:1e:86:20:6b:f2:66:f4:a3:
                    15:2a:c7:6d:ea:b4:0c:8f:a8:5f:8e:3f:a5:63:b4:
                    4e:da:7d:8e:49:59:15:11:a8:dc:0f:a5:d1:ed:36:
                    77:81:fd:74:6f:f6:e3:89:f2:4c:a6:74:f5:25:cf:
                    85:f5:83:77:91:7b:72:05:09:cb:1e:61:d1:bc:ee:
                    63:d5:ae:05:a4:48:fe:f1:a3:80:54:76:cf:d1:24:
                    9b:95:d2:7e:2a:28:6a:c3:ae:7b:e1:f0:17:e1:74:
                    4a:1a:7d:17:4d:cd:61:10:9f:8e:32:c2:b0:4a:c2:
                    83:3a:ef:7c:20:88:02:b8:9f:63:59:9f:25:ec:72:
                    f5:2e:75:3f:7d:6f:fa:8a:41:de:b4:3c:b5:bc:43:
                    76:58:55:a5:92:b3:28:4e:51:e4:36:ff:ab:0b:b7:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:92:36:46:EF:2A:51:E9:1F:5E:2F:C1:7D:47:5A:A0:F6:A1:00:E8
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:7e:9f:7d:59:b5:af:65:11:01:a3:2c:8f:5a:f2:cb:8a:
         1f:0b:10:76:0f:53:de:80:33:7f:00:3f:55:22:ff:8d:76:60:
         f5:98:95:8b:d2:b4:34:45:2c:3a:1c:0b:ba:49:5b:24:4a:76:
         b8:ee:9d:ea:fc:31:3b:f1:e7:88:b2:de:1a:b3:91:54:44:f2:
         c1:12:77:4f:b5:ba:6c:37:9f:a2:46:77:97:0f:83:92:34:7d:
         ec:e8:ab:6b:68:e5:8e:02:ea:3f:af:94:58:dc:99:db:cb:7c:
         7c:69:c5:25:30:6b:cc:c1:ca:d8:05:ec:6b:8e:59:ab:3a:b9:
         8e:8f:47:a5:da:56:a1:e2:88:7b:49:34:b7:5f:a5:04:36:70:
         de:75:89:43:a3:02:19:be:d9:e0:c1:07:93:16:46:30:2f:db:
         d1:e6:17:10:00:67:30:39:12:00:1f:bd:5e:4a:6a:d0:9e:79:
         6d:77:5b:13:d4:6e:29:f8:3f:f8:25:ed:e4:dc:f9:0b:80:54:
         ed:50:b0:92:d8:77:5b:16:92:78:c1:63:ef:21:76:c9:ad:3b:
         cd:88:a2:8a:d6:0c:d6:aa:eb:90:73:53:e6:78:f3:bf:9d:63:
         d2:89:cb:11:80:d9:5e:7a:41:66:cb:95:9a:f5:50:95:b5:4f:
         b5:49:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 19:22:43 2026 by rpki-client