Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          t3kmHdoXGF6Vc1E4ziX8QG4fceB9n13SzcttrE0mc2Q=
Subject key identifier:   4E:D8:6D:55:CD:07:8C:94:A2:DC:2C:6E:0D:85:05:2A:F7:BB:6B:A7
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       019D3865FA24838603C67880C004C8DF4CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 07:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:40 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: ljI8LICeC0iIdIHfcvK6WCyUw7JZ/wNCFNr1ZIIJIO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:fa:24:83:86:03:c6:78:80:c0:04:c8:df:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Mar 29 07:01:40 2026 GMT
            Not After : Mar 30 07:01:40 2026 GMT
        Subject: CN=4ed86d55cd078c94a2dc2c6e0d85052af7bb6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:52:db:ad:0f:e8:d5:7a:ab:be:8c:f0:11:
                    17:26:ba:60:77:16:41:8b:20:76:02:d1:a2:9f:df:
                    e4:bc:47:cc:95:45:b2:8b:04:75:e0:32:21:2e:53:
                    63:41:80:b4:ea:50:9a:9c:41:c2:35:09:a1:1f:4a:
                    58:92:5f:f3:69:d7:bb:34:6f:d3:c2:87:ee:fb:a0:
                    90:a3:5f:9e:3d:c9:e2:a4:0a:6e:84:fc:fc:0a:38:
                    b8:66:73:13:a4:9d:74:cf:8c:de:e8:60:a7:8e:68:
                    6b:47:b0:61:8e:fe:7e:a5:20:40:44:49:99:86:3e:
                    b4:e6:0f:90:83:4d:58:86:ec:7d:a7:71:8e:a7:61:
                    52:d2:95:7b:56:70:14:40:c9:16:e6:e1:83:05:8e:
                    e9:28:61:22:cc:65:67:ce:1d:1a:ff:6a:e4:d9:82:
                    c9:4d:d6:1d:7d:a5:51:99:ba:8b:01:ec:f9:fe:e1:
                    e1:1a:44:01:1f:07:2a:72:df:a3:ef:00:35:78:b5:
                    e1:2b:ae:b4:84:89:2d:da:67:1e:69:b5:f1:84:20:
                    bd:01:d9:4a:e6:b5:93:b1:f7:4b:6f:5f:31:95:a8:
                    01:07:1c:3d:35:83:97:0a:b2:d3:31:ce:ca:66:f6:
                    83:51:53:56:c8:80:bb:7e:2c:91:0a:1c:67:d5:25:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D8:6D:55:CD:07:8C:94:A2:DC:2C:6E:0D:85:05:2A:F7:BB:6B:A7
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:2a:3d:de:41:73:6a:02:11:49:7b:55:58:f4:66:16:0b:
         14:6a:ac:79:a6:f8:b2:9d:39:91:ad:a6:06:de:53:eb:10:5c:
         48:63:45:7b:05:e4:e7:3c:d6:73:18:18:b9:63:1e:4c:5c:72:
         84:9a:ab:7d:e6:31:19:b8:59:1e:bd:7f:35:fe:f4:27:be:4e:
         7d:8d:4a:0c:e8:b3:00:f1:eb:b7:ed:59:d9:37:89:6d:d2:fd:
         b9:3c:58:9f:ef:de:f8:39:fc:fa:1d:14:91:cd:30:a2:9e:e5:
         5f:79:5d:ff:bd:50:b5:28:1c:0f:f8:ea:1b:1a:23:27:79:5b:
         27:c2:40:e3:89:9d:7a:3b:7a:f7:76:51:e0:a6:c9:9c:57:31:
         f2:99:b1:7f:77:a6:fa:2c:8b:e7:74:08:e6:3c:d9:53:8e:8b:
         4a:2a:97:5b:f4:eb:73:2c:b7:48:ef:b9:dc:94:13:1b:39:2a:
         aa:00:cb:40:45:56:53:96:69:25:d2:02:83:11:6e:34:a4:40:
         fb:4d:2d:3f:11:08:88:e9:dd:72:ac:42:66:cb:ee:b8:78:7e:
         49:b5:ee:4e:ac:59:56:05:b1:aa:01:13:0e:35:00:14:86:1b:
         4e:fc:93:9b:4f:61:1c:af:7a:96:65:c3:0d:56:61:1a:88:77:
         87:ec:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:43 2026 by rpki-client