Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File:                     C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier:          P3PjeB3NxJs/z0YErA4UmwoYE1R65aRaVITKuUQaNgc=
Subject key identifier:   60:CC:89:69:CC:CB:A5:07:55:5E:05:A6:34:A6:40:0D:E9:B2:90:5C
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer:       /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial:       019D3789BB1339A91D66A8B67DCACAB10AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number:          02BD
Signing time:             Sun 29 Mar 2026 03:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:06 +0000
Files and hashes:         1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: 3CZd91pBmt2L6KI0Zaf93+QH/rLYEnv69+BeRybngK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:bb:13:39:a9:1d:66:a8:b6:7d:ca:ca:b1:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
        Validity
            Not Before: Mar 29 03:01:06 2026 GMT
            Not After : Mar 30 03:01:06 2026 GMT
        Subject: CN=60cc8969cccba507555e05a634a6400de9b2905c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:fe:4c:74:64:e2:d6:a8:3e:2c:8d:ac:7b:
                    76:ce:70:60:00:ee:3f:49:33:db:5b:3b:c2:96:20:
                    f5:2e:04:83:9a:89:c2:6e:83:d4:db:8b:dc:8d:7a:
                    58:ac:b3:1a:63:ef:e3:03:49:67:d5:97:db:2b:6c:
                    80:6c:5f:81:c2:13:86:11:0f:99:4c:50:f9:82:18:
                    31:41:74:62:6b:17:c4:b8:16:28:86:4a:9c:9b:ac:
                    f8:92:7a:99:3f:bf:11:a3:1b:99:c9:bd:17:d1:28:
                    39:fc:2e:cf:5c:e5:fe:e4:d2:ec:68:60:1b:3c:4f:
                    76:bf:ac:39:0c:b5:6c:6b:cd:6c:99:24:1b:a2:de:
                    47:56:bc:ff:aa:ac:01:26:d4:78:65:98:c5:1c:41:
                    bc:97:c1:c0:14:53:18:d7:6a:a2:11:9c:fd:2f:40:
                    b9:4d:9c:5f:1b:f5:ee:ad:38:b1:76:79:8f:3f:bb:
                    0e:e5:1d:1a:ec:06:0b:1e:e9:d1:0d:26:7a:a2:b5:
                    c7:93:8d:1b:9d:7a:ef:9d:f1:00:59:65:1f:9a:ec:
                    79:a9:ce:9d:82:3c:16:29:4f:35:0b:41:9c:a5:f1:
                    a3:1f:d1:d5:72:12:b2:36:08:b9:55:a2:44:67:c7:
                    41:57:5f:55:2f:70:85:07:1d:b6:68:ce:ee:fd:c5:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:89:69:CC:CB:A5:07:55:5E:05:A6:34:A6:40:0D:E9:B2:90:5C
            X509v3 Authority Key Identifier:
                keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:e0:d3:66:a4:89:d7:10:45:e2:21:76:35:62:e4:52:e0:
         b4:6e:69:3c:0d:b1:9e:1b:82:21:aa:37:cd:de:40:15:83:ff:
         16:6f:64:68:b7:b4:05:9d:05:21:df:b9:5d:89:cd:9a:dc:b8:
         e8:41:80:99:1a:9f:3e:1b:d4:63:27:1f:32:17:e6:76:ca:06:
         c1:8d:53:e9:7a:14:34:29:1a:17:4c:d3:eb:80:08:8a:10:3b:
         d2:50:a9:ce:93:49:d7:65:9f:37:f8:2c:d9:4e:4e:65:ba:4d:
         c7:69:10:9c:8a:87:35:5e:ab:8b:45:f9:ff:d9:61:34:6e:25:
         c1:bc:32:b7:73:9f:21:42:e5:0d:5c:17:f1:5d:d3:6f:86:5a:
         ed:fc:9d:2e:ca:37:60:67:f2:88:b0:4f:e4:6c:0a:82:48:53:
         c1:8d:f6:ab:7c:12:2f:3a:89:78:fc:19:72:36:aa:de:c9:3e:
         fb:16:f3:ee:02:0e:de:76:70:16:26:94:bd:42:5b:21:4e:10:
         95:29:ac:a2:81:8e:e8:ad:90:0a:7f:51:57:61:9e:f4:6c:1d:
         61:b6:3a:b8:ae:8a:1c:3e:02:5d:a1:9e:b9:3a:45:f0:7d:09:
         15:aa:df:48:15:86:78:13:b3:2b:d3:aa:96:f0:47:b3:f2:fa:
         f3:95:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:27 2026 by rpki-client