Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File:                     fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier:          khuSRPKC3Uf3G6mc21n5T12Pyqspi0wTvrJoJTmFPjw=
Subject key identifier:   80:B1:EE:08:FD:34:27:DE:83:D4:4D:96:72:4E:46:8D:45:2A:24:EC
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer:       /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial:       019D389C01C327B67495E88C104BA5BF443D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number:          0D9D
Signing time:             Sun 29 Mar 2026 08:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:41 +0000
Files and hashes:         1: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: mfBXw1yxwGc3LodybaOiOtS6dOnMGOCu/n+ZzO5T+Ks=)
                          2: oQqfeDIpQqTY2qXddv-RmkOsSBw.roa (hash: hZoJxnHQE17dg7NNgeLOUvJ0Ph/Ff3w++3G8l+eeaLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:01:c3:27:b6:74:95:e8:8c:10:4b:a5:bf:44:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
        Validity
            Not Before: Mar 29 08:00:41 2026 GMT
            Not After : Mar 30 08:00:41 2026 GMT
        Subject: CN=80b1ee08fd3427de83d44d96724e468d452a24ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:a1:63:1c:78:aa:f0:b9:eb:4a:1d:ba:30:
                    a5:85:88:14:03:f3:63:9b:66:9d:92:41:a4:bd:da:
                    42:1a:ba:c6:1e:3c:81:95:e9:b6:c7:f0:43:54:82:
                    65:0f:ac:30:cf:07:a5:f7:18:b3:06:08:b9:40:81:
                    7e:56:81:a0:28:3d:ad:4b:bb:19:fa:d9:55:77:c3:
                    e7:8e:74:79:67:cb:01:02:6d:92:39:ee:61:54:fe:
                    4f:7f:f2:86:12:e3:1e:59:01:54:32:c7:5c:c6:01:
                    32:ae:4a:58:68:36:76:55:27:89:c8:31:4a:50:cd:
                    03:7e:f8:35:b2:41:b2:71:92:c2:bc:3a:ce:ac:b8:
                    cd:97:b5:0b:7a:45:ab:d9:23:d5:cd:25:1e:18:62:
                    d2:83:06:50:86:a1:c0:cd:48:fe:38:4c:a6:f5:6a:
                    33:6b:71:a3:d2:08:20:f7:d7:a9:7e:66:09:f9:3c:
                    c1:00:7d:93:67:ce:cf:7c:74:25:1f:63:d7:e7:93:
                    83:30:91:7f:3d:cf:c4:14:15:ad:ee:31:50:06:2d:
                    1f:5d:eb:7b:76:d7:0b:f0:2c:fb:93:72:03:1a:3f:
                    1a:68:4d:54:c3:45:9f:94:88:d5:c9:dc:f6:3f:2a:
                    76:c4:e4:b1:1c:16:74:c7:11:aa:03:13:ff:94:08:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B1:EE:08:FD:34:27:DE:83:D4:4D:96:72:4E:46:8D:45:2A:24:EC
            X509v3 Authority Key Identifier:
                keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:63:67:1b:7c:93:06:68:08:a2:06:5a:61:fd:e8:6d:39:
         fa:c5:89:b3:cc:53:9b:28:32:f8:83:c4:c9:31:32:a2:3f:87:
         61:8a:ce:a0:12:73:b2:b5:c9:6f:a2:c1:5f:b3:af:98:ee:00:
         58:45:e4:9e:78:22:c4:a1:17:f7:c8:f5:2e:37:4b:a4:ba:97:
         01:bd:c6:c0:3f:a4:fa:da:4a:89:78:05:05:0f:0a:fa:de:ba:
         5c:95:56:d8:2f:ad:05:d1:20:98:11:f1:83:b2:cf:63:dd:cd:
         72:c6:cf:fe:2b:47:f6:fe:13:7c:7f:7c:d0:29:9a:7b:38:f4:
         e7:ed:c7:93:7a:57:8a:28:2c:ce:e0:96:a2:86:17:79:81:9b:
         c5:89:2d:71:40:da:a5:27:1f:39:80:5a:c1:57:c5:1a:c5:11:
         f3:65:dc:e3:00:5f:0c:e1:d8:ac:be:a3:0f:d8:a7:0b:bb:40:
         83:b0:3b:b8:43:46:f4:a0:8e:c5:87:55:6c:83:31:5e:31:e7:
         5e:7e:b5:fd:b4:3a:88:91:19:90:b6:fd:fa:f4:32:f6:a5:a3:
         bf:49:31:5e:5d:53:ee:8e:95:03:37:68:d3:fa:f1:f3:cd:fc:
         0b:c7:7e:89:8a:36:46:3c:c9:0e:a5:56:3c:1c:ad:62:ad:e3:
         b6:d1:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:02 2026 by rpki-client