Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          JGSP5DjdBBa4WVJEdEzgujdwvkis77QORULj87AHUPE=
Subject key identifier:   04:63:5D:86:24:03:3C:27:FF:D3:7A:EA:17:0F:3A:34:21:DC:54:80
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       019D378933C6D89E282FB656B6B028484AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          05AF
Signing time:             Sun 29 Mar 2026 03:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:31 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: 9i0x4G+UGqf+kN63Dx09bsmUX9+nNYPyYVY+maljXKk=)
                          2: PuYckfTPaEQN4beiQXX7upuOr3I.roa (hash: sBCyR1KSqyGnMo+n9mb4woR1xziuhqzF6ro+c/USxkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:33:c6:d8:9e:28:2f:b6:56:b6:b0:28:48:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Mar 29 03:00:31 2026 GMT
            Not After : Mar 30 03:00:31 2026 GMT
        Subject: CN=04635d8624033c27ffd37aea170f3a3421dc5480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:2f:59:32:8f:95:8d:d4:57:c8:0a:7e:27:
                    27:5b:5e:74:91:64:3e:d9:77:6d:8d:3d:b4:ed:62:
                    1c:aa:fe:d4:dc:30:38:71:39:a0:14:e8:b1:24:f5:
                    7f:61:a9:eb:13:00:8b:4f:89:21:ce:1c:bb:f8:41:
                    2c:02:bc:12:01:a4:09:ce:34:37:d6:75:67:2b:58:
                    78:ef:3a:99:b5:25:38:f3:07:40:6b:c9:f1:d9:90:
                    e5:c7:83:7b:18:07:88:5d:66:4d:df:2e:21:b2:e4:
                    7f:1b:08:a0:ea:2c:cc:78:84:fc:43:fe:00:f2:bf:
                    59:cf:e1:cf:d0:85:2e:6f:cc:0f:82:bc:cd:ad:3d:
                    e7:48:b7:05:66:4a:2c:01:b0:77:75:42:e2:59:30:
                    3a:26:d4:73:82:74:7a:c3:f4:d1:c8:81:eb:aa:87:
                    b8:65:da:d6:87:50:50:63:23:49:a9:59:0f:51:3c:
                    2b:1c:17:83:55:5e:c3:a0:f8:6d:15:09:ef:7d:2a:
                    87:c0:1f:3b:7b:73:82:67:e3:cc:f7:fe:96:24:e2:
                    b3:a5:8f:a6:86:2c:71:b5:f6:af:a8:a4:7c:84:3a:
                    7e:e9:1d:8c:46:a6:6d:f0:22:29:dc:aa:04:20:4b:
                    30:4b:dd:ef:84:cc:f4:fb:b1:f5:21:4d:91:4f:57:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:5D:86:24:03:3C:27:FF:D3:7A:EA:17:0F:3A:34:21:DC:54:80
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:91:e5:e3:b3:0c:eb:35:ec:c1:a5:96:69:32:e3:00:f0:
         bb:54:d4:cc:96:ae:cc:2b:78:78:b5:6c:05:20:42:73:be:36:
         aa:cb:29:79:8b:33:60:81:bc:f3:0b:35:81:c7:28:1b:31:71:
         ec:fd:03:6b:fb:cc:57:b2:f7:e4:f4:5f:12:f8:4c:0c:30:e3:
         a6:f4:34:0f:5c:ad:b4:19:ff:18:f3:d4:1a:b9:84:7a:0a:e3:
         b1:70:70:7a:b8:89:60:0e:bd:6f:df:fb:dd:25:d5:ad:7c:55:
         bc:8c:8e:b6:e8:ae:3f:18:90:29:4c:76:e6:38:49:89:99:ae:
         b8:13:ce:42:c8:98:10:4f:71:4e:3d:2b:9a:08:b9:4f:24:20:
         21:8b:34:f8:91:56:87:e9:cc:ff:7a:ad:34:a8:b9:75:90:3c:
         e3:f6:ae:68:ac:10:22:6e:ce:b7:7b:27:4c:3f:9d:77:22:6b:
         f6:1e:f2:1c:5f:43:9f:70:7d:34:9d:b5:4e:52:a3:8a:dc:e1:
         7b:73:a9:88:4b:93:ee:f9:c0:7d:64:f6:e0:20:86:ad:b3:43:
         01:51:3b:2c:f2:b2:cb:f2:94:8d:dc:5c:da:c1:f4:90:00:56:
         66:9c:4e:8b:37:79:40:9a:ee:4a:f6:35:2e:9a:f8:9d:5a:d8:
         43:95:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client