Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          AJE+1tdi4YFAK4n76ui2yfQD+UYtKW6Y1t9Dj7l8sgQ=
Subject key identifier:   88:49:82:EA:E8:B3:67:92:BA:D7:F7:AD:CF:6E:41:D8:12:A3:E8:C9
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       019D371B795A1DC461EDD377EF9CBA9598E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          0ED0
Signing time:             Sun 29 Mar 2026 01:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:40 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: DKEpcCf6slpwpXl0qN4cyzEwvhipKUHyed6ZBHlAwgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:79:5a:1d:c4:61:ed:d3:77:ef:9c:ba:95:98:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Mar 29 01:00:40 2026 GMT
            Not After : Mar 30 01:00:40 2026 GMT
        Subject: CN=884982eae8b36792bad7f7adcf6e41d812a3e8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:20:67:06:45:51:a4:bf:fa:bf:4e:2a:fe:
                    ff:0a:b5:da:f0:81:94:44:13:2d:8e:eb:e1:08:fb:
                    2d:1b:69:de:65:17:89:18:61:43:3b:92:6b:69:b3:
                    43:7c:41:43:78:f1:37:89:9f:34:df:17:4e:69:d6:
                    fa:3d:85:9d:81:0d:28:dd:c7:f1:17:16:8d:cf:e0:
                    74:c5:7b:fa:b8:0b:b4:10:a0:44:43:e3:9f:20:f6:
                    bc:af:b3:f0:20:2b:ff:c8:0e:cb:f2:12:7e:8f:68:
                    24:2e:92:a1:55:91:60:35:c3:bc:80:44:c8:be:76:
                    e1:8b:2d:61:66:83:09:a0:bd:ac:a4:84:2f:a6:25:
                    65:d5:d9:7b:64:da:d1:9e:6b:88:7f:8c:16:18:82:
                    17:39:a3:ff:e9:85:8a:6d:4e:ba:cf:da:11:66:70:
                    c1:3b:5a:e6:e2:5b:d2:1b:77:4b:3d:e3:2a:e6:7a:
                    76:8b:95:11:09:43:92:53:e3:5a:39:c0:c4:37:69:
                    a6:e1:32:a9:47:22:75:6a:cc:cc:94:e4:8b:48:a3:
                    91:17:a0:9a:4a:dc:01:6c:e8:18:59:b6:f6:80:52:
                    55:d8:d6:f3:ae:35:11:40:65:d7:ed:ff:ab:2f:20:
                    65:94:db:05:a6:68:12:43:e5:d6:53:a4:fb:ba:e5:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:82:EA:E8:B3:67:92:BA:D7:F7:AD:CF:6E:41:D8:12:A3:E8:C9
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:19:e2:63:a3:4a:cf:3d:a0:8d:89:00:5f:03:ed:bf:e2:
         d3:51:c1:16:55:9c:a7:da:de:42:f3:aa:30:3e:d2:99:b1:a2:
         4d:2e:ca:1a:26:f2:e8:03:12:f3:e0:1d:e3:89:06:b9:fd:69:
         bb:ee:c8:56:fe:f8:c2:2d:e8:20:9a:2b:4d:43:bc:9d:67:66:
         58:18:fb:a9:5c:e3:f2:12:8e:69:06:d6:a8:ce:34:c1:05:55:
         be:8f:53:a5:ab:0b:11:7e:b8:27:83:09:57:11:4b:47:63:b9:
         34:94:0b:1f:05:e4:0b:2c:b3:17:f3:8e:95:58:98:57:6d:00:
         14:38:60:c2:a3:36:cc:c8:17:04:2e:d0:1d:5c:a7:b6:d8:ee:
         e9:cd:c0:fc:b1:0e:75:79:d6:e6:e4:27:8e:2e:38:0a:b5:0a:
         30:3c:b7:84:9a:0e:19:64:9d:bc:3d:a6:70:14:07:3d:63:e9:
         f3:19:24:e1:13:4f:ab:b8:1f:a0:0c:15:ba:fc:04:32:f3:3f:
         26:e0:21:7d:68:19:db:78:22:1c:6f:59:70:cb:61:18:70:2a:
         1f:90:17:1a:ef:1c:de:1c:8e:fe:e4:1b:98:a4:9a:0f:3e:66:
         27:80:bb:51:46:20:e8:ee:48:94:cb:cb:0e:75:ca:3c:07:3e:
         a0:28:ba:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3laHcRh7dN375y6lZjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk
NWIzZTMwHhcNMjYwMzI5MDEwMDQwWhcNMjYwMzMwMDEwMDQwWjAzMTEwLwYDVQQD
Eyg4ODQ5ODJlYWU4YjM2NzkyYmFkN2Y3YWRjZjZlNDFkODEyYTNlOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXcgZwZFUaS/+r9OKv7/CrXa8IGU
RBMtjuvhCPstG2neZReJGGFDO5JrabNDfEFDePE3iZ803xdOadb6PYWdgQ0o3cfx
FxaNz+B0xXv6uAu0EKBEQ+OfIPa8r7PwICv/yA7L8hJ+j2gkLpKhVZFgNcO8gETI
vnbhiy1hZoMJoL2spIQvpiVl1dl7ZNrRnmuIf4wWGIIXOaP/6YWKbU66z9oRZnDB
O1rm4lvSG3dLPeMq5np2i5URCUOSU+NaOcDEN2mm4TKpRyJ1aszMlOSLSKORF6Ca
StwBbOgYWbb2gFJV2NbzrjURQGXX7f+rLyBllNsFpmgSQ+XWU6T7uuUhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhJguros2eSutf3rc9uQdgSo+jJMB8GA1UdIwQY
MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt
MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0
LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEusZ4mOj
Ss89oI2JAF8D7b/i01HBFlWcp9reQvOqMD7SmbGiTS7KGiby6AMS8+Ad44kGuf1p
u+7IVv74wi3oIJorTUO8nWdmWBj7qVzj8hKOaQbWqM40wQVVvo9TpasLEX64J4MJ
VxFLR2O5NJQLHwXkCyyzF/OOlViYV20AFDhgwqM2zMgXBC7QHVynttju6c3A/LEO
dXnW5uQnji44CrUKMDy3hJoOGWSdvD2mcBQHPWPp8xkk4RNPq7gfoAwVuvwEMvM/
JuAhfWgZ23giHG9ZcMthGHAqH5AXGu8c3hyO/uQbmKSaDz5mJ4C7UUYg6O5IlMvL
DnXKPAc+oCi6zw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client