Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          rJQolAZId7XTVicGNDEXFL1gbCFBjbb3TUJuEM/VstU=
Subject key identifier:   81:C6:13:D4:8C:71:01:CB:5B:44:6B:C5:01:65:88:07:5B:30:D9:33
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019D45451F6DF66B0817A1E69CA031223D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1829
Signing time:             Tue 31 Mar 2026 19:00:51 +0000
Manifest this update:     Tue 31 Mar 2026 19:00:51 +0000
Manifest next update:     Wed 01 Apr 2026 19:00:51 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: 0k9ypuuQXW5JWJlQNpBKe3ysUWpMse0BS3ZFTE/IDrE=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Apr 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:45:45:1f:6d:f6:6b:08:17:a1:e6:9c:a0:31:22:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Mar 31 19:00:51 2026 GMT
            Not After : Apr  1 19:00:51 2026 GMT
        Subject: CN=81c613d48c7101cb5b446bc5016588075b30d933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:55:c8:d1:23:ee:1c:aa:9f:1c:49:7a:f4:
                    c7:61:18:84:b1:fb:2d:44:2a:af:b5:bf:d6:49:d8:
                    13:14:f3:5d:2c:7e:ce:5b:1e:a5:08:e1:cd:d4:3a:
                    9d:e3:f2:4f:1b:0a:a3:2b:83:7b:f1:05:0c:df:1b:
                    56:a0:75:7f:ec:44:33:ce:f5:89:9d:e8:90:c1:71:
                    b8:6d:c6:35:67:c3:3f:0f:03:86:b8:a2:e5:d4:e4:
                    80:ea:64:c1:c2:8b:f2:cc:0a:26:57:e7:73:e6:93:
                    05:98:12:1e:3f:01:fe:81:b7:1b:9f:a8:fb:87:c0:
                    54:6a:b1:0f:89:a6:85:fa:9e:76:2b:04:f5:ab:49:
                    fc:17:1f:46:aa:c7:26:d4:75:6f:7f:cc:94:41:67:
                    3f:9e:a5:de:78:cb:75:3f:5b:03:45:86:24:7a:1b:
                    28:46:a2:dc:45:39:f7:28:29:e4:4d:10:ae:40:b5:
                    5c:e7:dc:c2:2e:8a:9d:48:75:ac:a0:65:e6:7a:cc:
                    f7:56:39:95:da:ef:7c:79:f4:d3:42:43:7d:10:a2:
                    e4:d2:50:5b:e3:30:6a:71:cb:05:88:d6:07:88:ad:
                    01:ee:fb:27:30:fe:55:b1:cc:6f:7a:21:96:d2:7b:
                    e2:ec:d8:87:db:63:87:d6:c3:1f:98:d4:25:02:ba:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:13:D4:8C:71:01:CB:5B:44:6B:C5:01:65:88:07:5B:30:D9:33
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:c4:0c:73:af:94:39:c6:0f:2b:97:97:1a:2d:e5:c1:28:
         a8:29:67:0d:88:cc:5b:53:9b:09:27:32:a8:5c:a0:74:a8:f4:
         70:5d:e5:95:6c:11:1d:e2:8c:cf:84:d5:a0:8e:2f:9a:c4:f7:
         6e:0b:fd:9c:31:f6:10:b1:26:2c:a2:76:8d:5f:39:21:57:2e:
         11:be:68:7a:83:d7:31:ea:9d:b9:a9:7b:c6:cf:9b:2a:61:1d:
         58:f3:73:07:e5:b3:c6:f3:91:6f:4d:7a:e9:41:2b:e4:fd:ae:
         f9:34:ee:b6:09:3b:0b:3c:7b:d6:4f:7e:72:1d:13:e7:16:c1:
         60:8e:5a:82:cc:3f:76:c7:db:19:8f:48:1a:8f:9e:bf:a9:c8:
         d0:07:54:bd:7f:00:88:a0:fe:61:17:15:27:73:f7:3f:83:fd:
         55:fe:68:a2:e1:46:71:f3:45:0a:7e:c7:44:a4:67:a0:47:95:
         b7:5d:c5:60:52:43:e4:ba:d5:c2:cc:fb:d2:0b:63:c5:61:d5:
         5f:3f:32:a2:31:df:90:7e:fb:d5:d0:22:03:79:6a:d2:96:b6:
         21:dc:23:ff:50:64:9e:2f:02:b8:36:24:46:28:82:d0:96:50:
         98:18:b4:20:4b:3d:b9:65:36:ce:21:ae:48:04:31:71:eb:2a:
         a1:36:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 03:48:45 2026 by rpki-client