Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          Ce/0X78OPtXya1+GU6QbghWEB92lBX9qSbpL/qOsPV4=
Subject key identifier:   90:54:D6:68:C5:06:77:92:53:03:1C:C9:4D:26:44:1F:3B:3F:0C:79
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       019D386563010AE6656657AD1BE4F9D242E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          09E1
Signing time:             Sun 29 Mar 2026 07:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:01 +0000
Files and hashes:         1: 3X6-pzNPY3tzlgBDaVNATe6mMS0.roa (hash: Lu/BQkt+ELdvhSoT4WKAwNXeot2X/O3feObGQc4WzTU=)
                          2: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: G32489pbtzqNGpubbKvjbc/eL5ZET+sd6Y4aKRDPrWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:63:01:0a:e6:65:66:57:ad:1b:e4:f9:d2:42:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Mar 29 07:01:01 2026 GMT
            Not After : Mar 30 07:01:01 2026 GMT
        Subject: CN=9054d668c506779253031cc94d26441f3b3f0c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:05:88:3f:53:cd:55:88:e8:a2:2f:48:ab:
                    3a:67:78:37:28:da:ae:e3:f6:f5:23:17:d4:76:3d:
                    18:cd:01:99:75:67:22:16:b2:b1:9e:48:33:1f:69:
                    e2:6b:95:1e:57:1b:f1:e5:4e:6f:16:b2:08:50:8e:
                    ca:74:69:27:1d:a6:38:2b:f3:17:96:ec:11:20:72:
                    36:cb:b1:3d:cf:82:2c:41:3a:86:ad:02:9d:fb:65:
                    ba:81:92:ae:c3:d0:72:ba:86:a7:cd:b1:10:02:37:
                    d0:9b:f2:21:09:9e:90:c2:bc:8f:84:40:c0:12:88:
                    51:0c:44:8e:e7:c3:f3:77:d1:a9:a1:7d:ad:05:41:
                    87:f8:cb:03:53:15:40:d4:b3:97:d3:f1:e4:d9:eb:
                    00:35:51:30:0d:ab:fa:1d:e8:5e:b8:38:c1:17:94:
                    7a:57:7c:40:42:f8:47:b7:dd:1b:28:6f:06:4c:38:
                    80:93:1a:aa:09:2f:66:7e:5b:98:ef:71:6c:7a:2c:
                    b8:9c:4e:46:00:7b:54:ff:b6:0e:13:95:08:3c:0d:
                    83:e2:3c:8e:73:d1:2c:4a:a1:c8:07:5e:38:5d:e8:
                    c4:b0:60:ac:9d:c5:b7:55:63:c7:de:0d:a3:a5:22:
                    ad:3a:f6:df:dc:ed:77:40:c2:1c:78:ad:c8:4b:c5:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:54:D6:68:C5:06:77:92:53:03:1C:C9:4D:26:44:1F:3B:3F:0C:79
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:7b:a7:1e:89:8f:ac:5c:6d:e8:65:e5:3a:1e:4e:15:d8:
         46:35:0c:4f:7c:5c:aa:31:9e:53:12:76:6f:42:31:f7:a6:f5:
         77:c5:0f:58:05:c9:d2:59:46:c8:23:37:3f:a3:67:a4:e1:f4:
         82:59:91:36:f3:29:af:4e:2d:62:e0:98:7e:19:e1:5c:63:c1:
         b0:85:f3:b5:56:34:83:06:d3:48:04:d7:47:24:cc:7d:95:55:
         41:ec:c7:90:42:a7:e9:d5:dc:39:4d:69:e3:7d:d3:4e:ef:2b:
         3a:f4:bc:07:08:95:a5:fb:bf:07:bb:07:0a:14:a0:c7:b4:77:
         2a:7f:c3:5f:5c:eb:d0:93:60:19:85:13:f2:ba:e3:ee:40:e1:
         9c:5b:eb:4c:31:60:e7:2c:42:cb:16:80:c5:63:36:33:b7:f9:
         f5:06:6c:dc:5c:bd:8a:85:78:bb:32:3e:3f:b1:66:cd:73:bf:
         95:7a:07:cc:6c:07:40:83:0b:63:91:49:b7:7c:d2:78:c3:94:
         5c:37:c7:c4:4e:b7:ad:6f:be:d2:16:c9:da:bc:bc:14:cc:74:
         e8:d8:46:6e:42:cf:ea:69:ca:15:88:c8:e5:ff:97:25:42:b3:
         c9:9e:77:4b:ce:a5:d1:93:b0:15:c2:5f:1f:97:b3:0c:b7:7c:
         17:60:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:07 2026 by rpki-client