Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File:                     a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier:          zfnuAf2HckkROobmDVC/4ugerALYUKP9VTPjyhUicuY=
Subject key identifier:   DF:D7:FF:57:4A:73:F5:D1:6F:C2:5F:B3:54:3B:51:93:81:A2:21:F5
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer:       /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial:       019D3866593DFDF873C2F9F5D8C9AA6CAE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 07:02:04 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:04 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:04 +0000
Files and hashes:         1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: r1jt19RedqbVxEFnujDaJopIoPut41hGYFdKfW41h3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:59:3d:fd:f8:73:c2:f9:f5:d8:c9:aa:6c:ae:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
        Validity
            Not Before: Mar 29 07:02:04 2026 GMT
            Not After : Mar 30 07:02:04 2026 GMT
        Subject: CN=dfd7ff574a73f5d16fc25fb3543b519381a221f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:79:1c:b4:5b:76:91:e0:47:01:3f:14:4d:
                    0c:24:8f:00:2c:ba:cf:9e:47:dc:61:c3:bf:87:e4:
                    3f:e7:a5:e1:90:3b:c3:1f:9a:ae:9a:90:03:d0:ba:
                    40:cd:93:71:b0:b6:10:fa:9a:e5:5b:c7:40:cc:ac:
                    c9:bc:c7:42:3e:5f:6a:57:b9:2b:c4:96:6c:72:c5:
                    93:cb:97:49:08:e0:08:17:17:04:b1:5c:71:0f:98:
                    a6:5d:a4:19:ac:e2:59:e6:d8:60:cd:9b:8d:d6:ca:
                    51:2e:db:1a:23:29:52:cb:16:98:f0:f9:c6:08:55:
                    ca:d1:19:dc:d8:1b:dc:e1:74:9f:05:d3:95:81:b4:
                    0e:09:06:a7:b1:e1:5d:41:86:4e:17:b5:09:04:17:
                    17:5e:ea:a7:28:c6:b3:b4:89:9d:c7:ec:cb:9b:ee:
                    14:bb:b3:6f:65:7b:28:74:10:89:8c:01:10:0a:f8:
                    9e:9f:69:1b:b8:77:d5:ae:25:98:15:9c:87:59:9b:
                    c8:6a:3f:80:39:73:89:48:1a:e1:7a:1d:1f:a2:5e:
                    be:86:bb:e4:19:ff:c4:27:e6:37:1c:9f:cb:c0:e3:
                    15:53:da:ac:69:1b:80:e2:7b:6f:ab:b1:67:a1:e4:
                    72:87:b7:e8:77:0a:9d:97:6f:9c:de:4b:bd:4e:10:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:FF:57:4A:73:F5:D1:6F:C2:5F:B3:54:3B:51:93:81:A2:21:F5
            X509v3 Authority Key Identifier:
                keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d0:8c:7a:50:06:fb:3c:4d:74:48:95:28:e6:77:f8:b2:ff:
         78:92:da:ae:6f:b7:95:1c:7b:d9:cd:b7:11:f1:af:15:0f:8e:
         43:87:36:d1:60:e3:ce:4b:d0:62:e5:87:38:1f:40:2b:b1:aa:
         33:fc:e7:ca:eb:af:6c:ba:3f:f2:88:66:f7:1e:5e:a6:d1:c7:
         a0:60:69:75:7b:26:7c:9b:99:02:b9:a3:8b:58:81:53:b1:87:
         2f:8e:5c:87:a9:2c:ba:fd:27:34:31:ea:e6:41:7e:9a:5e:3a:
         36:c6:cb:e0:29:8c:7d:03:3b:bd:9a:14:3a:15:01:5a:00:28:
         84:e1:f9:1c:97:ec:e8:68:6f:cc:b6:48:4b:68:61:9b:64:c7:
         95:9b:ac:e4:3a:2e:8f:51:c7:32:1b:44:33:e5:b6:f8:b9:c4:
         d8:13:72:84:dc:01:f5:0e:a9:11:10:84:be:a7:bd:b3:54:77:
         b0:de:bf:fa:d1:2f:73:f0:c3:34:14:12:cd:84:f8:39:ee:3f:
         10:9e:03:1a:de:ad:b6:c3:5e:6b:40:ee:fe:82:ed:a3:35:38:
         91:5d:85:95:f4:61:13:47:ed:c3:e0:e3:f0:46:26:52:1b:5c:
         5e:3e:a1:00:34:4d:bf:79:90:c3:d3:84:d9:61:8f:0c:60:1a:
         e5:55:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client