Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          CJsOLNqaR0ZkMJOKqMtuEd8wPVB/pWuCq5btnZVoaHQ=
Subject key identifier:   EF:E5:C6:EE:E0:EB:4E:D4:FD:C2:C9:F8:F4:33:D2:EB:26:AB:E9:0B
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       019D3977AE11E58E9B06197DAE2E5FCACCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0E8E
Signing time:             Sun 29 Mar 2026 12:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:37 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: Ti2iVMPp51T8/dWu8EMlOnKypmrR3sKdLK/XOckIFUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:ae:11:e5:8e:9b:06:19:7d:ae:2e:5f:ca:cc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Mar 29 12:00:37 2026 GMT
            Not After : Mar 30 12:00:37 2026 GMT
        Subject: CN=efe5c6eee0eb4ed4fdc2c9f8f433d2eb26abe90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:23:8c:97:12:d5:22:20:76:dc:58:eb:e6:32:
                    d8:ec:92:c3:7b:a1:4e:60:b2:5d:da:0c:c1:f1:89:
                    dd:05:41:2e:da:cd:71:e7:ef:53:e3:57:87:20:23:
                    bf:bf:34:0d:fa:ec:a3:3f:9a:39:e1:13:75:72:81:
                    35:eb:17:6a:c4:e2:79:32:95:aa:52:f5:93:ce:26:
                    3a:7f:92:a6:b8:d9:85:0d:5b:ed:fb:16:c8:9b:7d:
                    da:5e:e7:27:fe:68:7a:98:dc:f6:bd:e9:71:a3:4a:
                    4e:b1:61:1f:8a:8f:e2:29:fc:a5:11:37:98:45:36:
                    b4:34:26:38:04:66:ca:69:65:5f:d2:cf:c6:19:46:
                    32:f7:4a:d5:e2:6b:62:52:a5:11:d5:7c:01:96:39:
                    82:00:b9:bc:4b:39:aa:cf:10:38:a9:32:82:43:f4:
                    d1:80:31:c3:ab:7f:07:59:b2:8d:78:30:10:0e:cd:
                    44:d6:81:bf:fc:5f:9b:ff:fd:e1:18:ee:82:e6:43:
                    80:a1:b6:fd:d8:a6:52:e8:cc:5c:9d:8e:34:1d:49:
                    c1:3b:0b:40:b4:15:be:49:30:78:3d:8e:e4:78:62:
                    19:78:94:76:9e:8d:aa:d0:ec:6f:1d:f8:7c:8d:d1:
                    0a:f3:5f:84:9b:a6:68:a6:73:8a:39:1b:fb:5c:1b:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:C6:EE:E0:EB:4E:D4:FD:C2:C9:F8:F4:33:D2:EB:26:AB:E9:0B
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:1a:a7:ea:2b:f1:0b:a2:df:3d:4e:b6:5d:5a:37:18:f3:
         e6:5c:be:51:64:f4:5a:3e:57:8a:1c:26:f1:ef:3e:ac:4e:9f:
         5b:22:44:04:b4:a1:67:86:be:e8:50:c6:cd:32:59:25:c9:10:
         9d:ce:e4:33:99:6d:98:2f:c2:83:8f:59:5f:a4:4d:20:15:0b:
         42:ea:4b:1f:95:65:e8:63:10:82:26:fd:1a:59:a1:16:ea:fd:
         9c:84:28:91:61:4f:ad:a2:da:60:4f:ab:71:29:9b:32:98:59:
         fb:6e:60:05:c5:8b:0e:8c:77:89:7d:5d:59:33:19:3d:61:35:
         00:ec:5a:89:d2:28:a8:2b:54:e1:72:34:fa:57:ea:12:b5:82:
         b8:4a:a1:03:9a:d1:88:5f:2f:6d:66:98:83:ac:4c:b2:b5:30:
         79:88:39:82:40:13:b9:d0:a5:6d:a1:5b:68:57:e8:4b:d9:2e:
         1b:0c:cf:3c:18:99:6d:93:27:43:3a:91:4e:c0:02:5a:43:68:
         6f:47:18:14:0b:4c:87:8e:f6:56:3e:9d:c8:4f:07:37:51:28:
         7c:e5:84:17:e6:ca:52:f9:d5:be:78:ed:cf:d5:6d:4a:57:ff:
         e6:b2:ae:a2:0f:a4:b3:49:ce:b5:67:cb:a3:a1:50:1f:f0:9f:
         dc:7c:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:19 2026 by rpki-client