Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File:                     sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier:          0p0L8gmQ/iAIWgUzh3sDyY3/LLbIfaQuACLqk7ZK3C0=
Subject key identifier:   73:9F:7D:D9:02:96:30:4F:19:43:69:E1:18:F8:71:B1:3A:39:8D:6B
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer:       /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial:       019D38658D3655016BAF6CC3DBF6482A6A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number:          051B
Signing time:             Sun 29 Mar 2026 07:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:12 +0000
Files and hashes:         1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: 9YOxmd6WrUtg/GYNCilpMehYaaFTnE3j8lsYnF8ddZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:8d:36:55:01:6b:af:6c:c3:db:f6:48:2a:6a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
        Validity
            Not Before: Mar 29 07:01:12 2026 GMT
            Not After : Mar 30 07:01:12 2026 GMT
        Subject: CN=739f7dd90296304f194369e118f871b13a398d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:e8:47:c8:2d:56:75:5c:d5:c4:d0:4b:35:
                    27:ab:a3:4d:b1:7e:39:2c:c2:0d:ac:b2:a7:c9:9a:
                    68:4a:5f:6b:0f:a3:db:57:ec:d0:e5:28:48:46:3a:
                    9b:38:5e:2b:67:c8:53:db:92:41:91:92:18:c5:41:
                    35:19:63:12:e2:20:17:80:57:26:88:a8:ec:1f:94:
                    5e:aa:96:aa:97:e7:03:cb:da:6c:c8:14:95:8e:be:
                    a0:52:5f:61:fc:0d:96:ed:b2:3b:3e:d3:2c:af:af:
                    bc:16:dd:c6:a7:0c:7f:68:0f:c6:0d:bb:f9:10:e5:
                    fc:bb:44:ff:87:25:5b:83:90:76:26:6e:e9:c8:16:
                    28:ee:74:ea:af:81:52:1e:6d:30:98:42:55:11:42:
                    a9:2e:c8:6e:08:7e:21:8b:8b:79:9e:cd:df:28:e1:
                    74:73:f9:04:d7:c0:5a:75:f3:d1:b2:05:fb:be:0f:
                    13:07:bb:dd:ca:ff:3b:cc:2f:5e:b4:ca:af:c7:77:
                    59:48:2a:fc:c0:07:6b:ec:e0:43:f2:f8:71:ba:97:
                    d3:3d:18:f3:66:5f:d5:b1:6e:c3:56:b6:c8:12:b6:
                    43:8a:4a:25:bc:c6:d1:08:ad:03:4b:ec:fc:5a:66:
                    f8:2f:79:37:e5:98:71:2b:07:92:6a:e7:93:71:78:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:7D:D9:02:96:30:4F:19:43:69:E1:18:F8:71:B1:3A:39:8D:6B
            X509v3 Authority Key Identifier:
                keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e2:c7:4f:54:bc:61:f1:8c:03:b0:52:22:a1:49:f8:ac:30:
         92:43:97:a7:1e:f6:37:9f:5c:41:a1:94:1d:bc:ba:26:33:fc:
         1a:7a:9c:50:8b:61:60:f8:7d:dd:02:a3:e8:65:2a:8b:0b:29:
         8f:26:c5:a4:25:85:6d:e1:5a:3c:e6:6e:ad:a8:83:4b:94:b1:
         db:41:ec:2b:2c:d4:76:9a:8d:47:e6:ea:29:b5:d5:4e:bd:23:
         4b:88:26:d4:ba:83:d0:b9:1f:81:64:40:cd:3b:d0:3c:48:80:
         ef:38:d0:6b:f9:c5:59:c3:3f:c2:2b:2b:50:22:e4:30:91:df:
         35:88:49:64:e4:72:0d:5d:80:1f:7a:8b:6d:e3:50:38:a9:c4:
         9f:ea:fc:62:1c:3e:b8:52:2b:59:b1:3c:2f:0f:9a:55:db:66:
         61:f9:6f:87:55:fa:95:5e:6a:b3:36:b9:3e:1e:59:90:02:c2:
         34:5b:fc:51:8e:a3:20:ac:dd:95:98:7f:03:01:91:72:e9:0b:
         b1:1a:1e:bc:48:7e:79:6b:00:8b:80:bb:f2:40:b1:56:52:7c:
         04:dc:04:9e:a8:fd:e2:8c:a3:af:d2:33:e0:53:3f:1f:56:62:
         2e:f2:7d:d3:e7:7e:99:8d:25:05:c4:20:3b:c0:49:ba:26:58:
         99:f9:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:47 2026 by rpki-client