Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
File:                     63ZBEa7_qGvR7DyohbY95_VlD24.mft (raw, json)
Hash identifier:          mWDfVsF225lv7NiCUzpwDteZfnDzs4BwaDC+eLnVmDU=
Subject key identifier:   28:AA:95:4D:CF:99:C6:06:B6:93:A7:D7:64:AF:CB:79:F4:1B:F5:D1
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Certificate issuer:       /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial:       019D26966F69AC1D455FA515BA70A4364465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
Manifest number:          0D12
Signing time:             Wed 25 Mar 2026 20:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:26 +0000
Files and hashes:         1: 63ZBEa7_qGvR7DyohbY95_VlD24.crl (hash: /SYaVMZHOfkBfDtMAZBBe7v7e9yAmAeSIQcIJ99zjcU=)
                          2: A8jOACTrxZvbWlAo7qYtsXeIojI.roa (hash: WdYCbFkKRyFd2Vge2Su+8nzhSIHEZ7CtYFk4u6w6X2s=)
                          3: TVBO-lJKWmTEkVLXsGwSSk-jKo8.roa (hash: AXXvKEKrezYez/eJWad4+cg0zDr/M6222BjCfKR3WSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:6f:69:ac:1d:45:5f:a5:15:ba:70:a4:36:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
        Validity
            Not Before: Mar 25 20:01:26 2026 GMT
            Not After : Mar 26 20:01:26 2026 GMT
        Subject: CN=28aa954dcf99c606b693a7d764afcb79f41bf5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:c9:9e:e2:cb:bd:ef:20:7b:d0:92:da:13:
                    cc:3f:3b:e1:9f:77:32:1b:26:b0:13:84:db:72:04:
                    c6:9f:a0:90:51:75:5f:f2:98:ad:1c:ce:ea:10:75:
                    02:a0:31:2f:e2:80:4e:3a:f2:e7:e3:c0:0b:47:9c:
                    83:1a:89:5a:32:4f:07:58:57:32:d0:95:43:11:15:
                    06:4d:06:8c:5b:22:a9:e6:a1:51:58:cd:cc:f6:44:
                    d4:1e:c7:8d:01:06:63:b3:df:e8:cf:be:1d:aa:e1:
                    35:d2:d8:84:ed:d9:90:da:8d:60:f5:b9:82:ba:5a:
                    6f:43:25:74:65:4f:ae:35:9c:ef:e5:57:7c:bf:91:
                    15:90:0c:b6:70:7f:01:51:be:50:f7:09:91:be:00:
                    67:7b:b3:0e:fd:55:b7:98:68:0d:c2:9a:d9:1b:38:
                    f9:69:8d:2b:1f:74:73:69:5f:b7:73:78:39:94:25:
                    c6:12:fb:78:76:7d:00:b6:d6:99:42:c7:a7:78:22:
                    87:40:34:d8:c6:b0:32:fa:51:3d:21:51:82:bd:b3:
                    b6:0e:3a:65:c2:a5:12:fd:39:66:3c:ce:86:4c:aa:
                    6f:d9:3e:18:73:e0:72:8e:80:dd:bd:4c:8b:fd:49:
                    06:c2:b2:8c:41:f4:3c:cf:1b:8f:fb:1b:9a:e0:7c:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AA:95:4D:CF:99:C6:06:B6:93:A7:D7:64:AF:CB:79:F4:1B:F5:D1
            X509v3 Authority Key Identifier:
                keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:40:48:00:d6:b4:e6:34:76:ab:2e:b6:00:a7:63:59:09:
         e7:49:1a:d5:5c:43:ef:05:3b:06:b2:1c:29:d5:59:9d:dc:e1:
         4a:15:61:21:26:cf:15:dd:08:19:14:17:94:a6:62:89:01:d5:
         08:ff:24:49:33:45:a4:11:69:60:37:3b:70:7e:9f:22:8c:c7:
         2a:a9:be:02:59:ff:d2:d6:91:6c:ab:83:08:40:b3:00:fb:f3:
         2e:c9:37:55:53:b8:aa:7e:c6:33:4c:ed:52:0c:3e:52:d2:89:
         91:7c:80:2a:6a:bf:a0:07:bf:08:8f:22:13:fc:28:00:fc:95:
         9b:1a:57:f8:39:0f:2b:92:b6:f8:e9:31:7e:de:5e:12:c4:5f:
         a3:db:13:2a:69:ad:b0:d6:66:63:94:a1:6b:5b:e7:f2:fa:27:
         71:4f:7e:16:47:fd:55:a6:c4:59:85:fc:16:0a:25:1f:58:86:
         65:b9:1c:ce:bc:c4:b5:01:27:e9:e3:79:3f:05:e6:a5:84:a5:
         1a:fc:3c:da:12:fb:7c:5e:cc:77:2e:09:93:1b:a3:21:29:d9:
         51:e8:bf:5d:22:06:ee:bb:6b:78:3d:e9:95:d7:b9:fb:5a:1f:
         56:6f:ac:34:33:2b:51:8d:72:de:3f:fc:22:3d:1b:73:ba:5d:
         34:97:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:40 2026 by rpki-client