Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          L758ZhEh3c7eTBKyqZfYXQyvL21IDHhyVJQzgEfjDQk=
Subject key identifier:   F7:3C:73:E1:3C:6F:F4:DE:AD:81:A3:59:9C:FF:AA:D3:DB:31:41:AA
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       019DCED0CF9D269358A4265FBB1A0813AA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          03B8
Signing time:             Mon 27 Apr 2026 12:01:24 +0000
Manifest this update:     Mon 27 Apr 2026 12:01:24 +0000
Manifest next update:     Tue 28 Apr 2026 12:01:24 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: M5bElDeiqW7acm88pboQVOcdAF1uKFWlwhmF3WiMEic=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:cf:9d:26:93:58:a4:26:5f:bb:1a:08:13:aa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Apr 27 12:01:24 2026 GMT
            Not After : Apr 28 12:01:24 2026 GMT
        Subject: CN=f73c73e13c6ff4dead81a3599cffaad3db3141aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:6c:49:1f:83:52:83:b4:2e:87:91:31:db:
                    ef:44:61:2c:e4:64:46:a4:69:00:04:16:cd:1c:4a:
                    2a:a0:a0:1e:7d:2d:13:19:6f:97:53:49:84:4e:2c:
                    fb:ea:91:0d:d4:61:7d:61:d7:4d:0b:40:ae:62:8b:
                    af:99:7a:55:36:01:e6:20:09:9d:ae:71:3f:89:84:
                    83:9f:77:5c:8b:e0:f2:4b:59:f3:8d:89:a6:6f:1e:
                    fb:98:7c:1d:ce:13:9a:da:69:17:35:9a:ed:8c:24:
                    88:31:54:39:89:f3:0e:d1:68:21:d4:02:5c:51:9f:
                    28:2a:ff:5a:52:29:af:6d:7b:19:c2:8e:ec:3b:8d:
                    b3:4b:4a:3f:6a:91:1f:32:29:93:d9:37:02:c6:05:
                    d5:c7:73:2e:ab:fe:48:94:d2:93:b9:75:87:32:6b:
                    60:7c:ac:a4:96:86:63:98:e1:bd:d6:ca:8e:6f:6f:
                    f6:ab:45:9c:51:92:e9:8c:f6:4d:7b:d1:74:dc:c4:
                    38:87:64:9f:4c:28:f8:9a:be:5b:e3:b4:36:fe:2d:
                    83:0e:19:af:c9:d5:f0:1a:17:de:22:10:63:04:95:
                    bd:4a:71:ff:52:6e:94:c5:cb:61:6d:e9:02:96:09:
                    40:fe:8b:04:81:dc:4a:1d:ca:c2:c2:a7:70:7a:6b:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:73:E1:3C:6F:F4:DE:AD:81:A3:59:9C:FF:AA:D3:DB:31:41:AA
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:62:a2:da:3b:bf:90:05:51:26:0d:57:49:c4:76:bd:ee:f2:
         17:e7:87:66:a1:8f:1f:b2:cb:e9:99:06:e8:04:ca:3a:ef:46:
         ba:00:e4:e6:11:e3:61:3b:78:f6:16:24:45:22:bb:c9:57:82:
         ea:f4:78:24:a3:19:05:80:77:d6:cd:fc:d6:ee:2b:d5:e3:fb:
         63:a8:c0:57:a1:9c:07:66:19:fa:f1:b0:75:58:a6:36:f7:1e:
         5b:b0:a4:aa:f5:47:3e:4f:bc:c7:47:58:04:52:6c:53:1c:a4:
         77:f6:0e:f3:ce:ed:6f:19:89:47:67:0c:95:20:c4:73:5d:7f:
         de:e6:51:5b:70:13:10:c6:16:42:0c:0a:6a:9f:3b:cd:f5:87:
         66:9c:cf:c6:43:95:c2:96:14:f4:d2:fb:e6:12:34:90:2d:88:
         cd:3b:1f:68:51:84:00:43:6c:3b:68:53:e2:56:2f:28:b4:b7:
         5e:52:92:06:5b:7d:66:79:11:35:af:77:7b:27:6f:d9:3b:29:
         a5:74:49:5c:17:10:21:8b:c3:ab:16:7c:7c:26:2d:50:73:67:
         a6:e0:61:6d:4b:56:36:c1:f8:73:1e:1a:64:2e:f6:33:ec:4d:
         b5:b9:38:dd:cf:39:b3:e6:90:02:17:bd:6a:0c:a9:c5:df:5a:
         e6:42:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:30 2026 by rpki-client