Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File:                     eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier:          +REisLDz0fq/SdZIpTiRiXNzOBBV6YWovz8Y5awshtg=
Subject key identifier:   85:C9:CC:3C:E9:B4:10:51:76:F2:20:36:D2:2F:7D:0D:B9:10:68:C9
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer:       /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial:       019D386553246E84B27BE349064F4F603A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number:          0F60
Signing time:             Sun 29 Mar 2026 07:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 07:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 07:00:57 +0000
Files and hashes:         1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: lQfLxqLXtVUeYkLkoSJ6aWRETYq5GSPe8g9T6sSsE4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:53:24:6e:84:b2:7b:e3:49:06:4f:4f:60:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
        Validity
            Not Before: Mar 29 07:00:57 2026 GMT
            Not After : Mar 30 07:00:57 2026 GMT
        Subject: CN=85c9cc3ce9b4105176f22036d22f7d0db91068c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:cb:40:b4:39:35:08:4b:bc:7e:1b:9e:17:
                    ad:80:4b:70:e8:a5:15:21:77:c6:6a:84:c0:04:2b:
                    11:36:dc:eb:aa:e1:f8:ea:ea:b8:cb:5a:b6:85:41:
                    15:be:4d:87:f8:48:dc:0d:4e:66:59:e5:48:4b:5d:
                    7a:62:6c:4c:9b:06:60:8f:93:ff:4b:31:90:f9:de:
                    05:33:1b:a8:ef:b4:60:ef:e1:36:56:01:a5:7a:33:
                    bf:9f:56:de:1f:67:34:dd:d1:3d:e1:a5:30:d6:d4:
                    9c:23:9a:a8:05:f6:dc:ee:a0:d1:86:10:af:bb:2e:
                    4c:29:44:ef:87:86:00:77:b6:91:e2:77:f8:2e:b5:
                    87:ca:39:85:83:e3:94:69:06:92:24:20:d7:c8:6d:
                    1a:f0:6c:8f:bc:ee:ce:c4:63:26:b0:5e:83:9a:0a:
                    28:ea:5e:e8:6d:9c:34:af:87:56:9d:86:e5:94:76:
                    da:16:aa:70:3e:5f:df:a8:23:df:f0:d2:b8:db:15:
                    e6:23:71:bb:87:ae:87:1b:2c:ba:8e:3e:15:b0:0e:
                    79:a6:bf:b2:77:48:07:81:c1:6a:12:bb:21:86:77:
                    5a:43:ad:56:e4:fa:b4:22:27:76:73:f0:fd:56:ce:
                    6b:32:b9:e4:a6:a6:36:69:ce:e8:0a:b1:44:8b:ee:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:CC:3C:E9:B4:10:51:76:F2:20:36:D2:2F:7D:0D:B9:10:68:C9
            X509v3 Authority Key Identifier:
                keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:0a:0e:bb:77:50:92:fd:94:00:d6:6b:ea:0b:34:ca:4e:
         0e:3f:b8:67:ee:05:37:ea:40:aa:15:b2:ab:4d:4d:44:77:a9:
         88:aa:fd:1d:ce:18:2a:eb:9d:a9:ed:f5:32:16:85:af:87:ca:
         4e:a5:5b:20:a8:68:47:13:b6:6e:e6:19:04:a0:f2:4d:e2:2e:
         74:ac:92:e6:12:b2:fb:31:c5:68:55:73:c1:d3:86:ec:4f:cb:
         68:bb:5a:ec:bb:25:33:91:45:ad:87:87:58:ce:9b:3b:6b:81:
         07:f1:3c:5d:10:76:03:5c:3f:77:51:d6:55:51:57:a0:68:21:
         4d:2c:eb:4b:55:ae:85:c6:b0:ba:b6:dd:c3:de:64:bf:6d:d4:
         16:9f:90:d3:45:9f:93:e2:b1:56:bb:10:ef:9b:5c:36:1b:04:
         11:3f:d3:c5:55:c1:d3:94:ad:b9:1b:54:d2:e2:ea:62:ae:a7:
         72:fc:b7:47:93:2c:9d:51:3b:c0:0e:a0:3d:bc:cb:70:ed:bd:
         2b:b2:79:17:5c:95:a1:c7:67:c9:47:42:c9:c2:6f:41:cb:5c:
         96:44:d2:69:97:14:12:9f:d0:73:d5:7e:36:65:9a:17:79:bf:
         50:ac:2c:d9:73:2c:6d:1b:7e:71:e1:c9:f9:d4:50:09:59:97:
         24:ec:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client