Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File:                     1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier:          NoiQTRoJpe/sC2smKkBILiZF2JjdRhsNoJi1d5OPDJ4=
Subject key identifier:   6F:C6:BB:E8:ED:CB:FC:6C:FF:25:F5:62:C1:87:0F:54:8E:5E:3E:85
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       019D37F74E573741A4608E9AFC233781B229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number:          102B
Signing time:             Sun 29 Mar 2026 05:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:47 +0000
Files and hashes:         1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: JAU+wOumVPW5MJNeniR5TjueKdbJJLotNNTKRuy+Aik=)
                          2: 2qEJf-3plphGQsWl8SQW6YyPVOo.asa (hash: 4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=)
                          3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:4e:57:37:41:a4:60:8e:9a:fc:23:37:81:b2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: Mar 29 05:00:47 2026 GMT
            Not After : Mar 30 05:00:47 2026 GMT
        Subject: CN=6fc6bbe8edcbfc6cff25f562c1870f548e5e3e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:03:34:c8:ab:20:8a:3e:68:1d:c7:0b:f7:
                    8c:a8:2c:5d:81:63:a5:2f:6b:c1:15:57:5d:05:4e:
                    88:94:0a:86:a5:6f:5f:84:a6:81:b8:16:25:10:b9:
                    ca:ff:35:41:d4:1c:1c:09:52:ad:e2:ce:68:11:dd:
                    40:62:05:4e:1b:14:d4:15:f6:78:29:f9:3a:53:f8:
                    c3:ef:41:22:a4:8a:ce:c7:c4:16:c5:22:08:d0:40:
                    3d:ea:64:3e:ea:88:83:12:2e:64:ea:e8:87:26:24:
                    a8:90:e1:0b:6f:3f:98:e7:65:04:c7:70:1d:70:60:
                    4f:d6:40:45:7d:36:ce:9c:67:f3:3d:5e:9e:a2:60:
                    d0:96:38:a4:60:2b:ae:12:34:7e:e3:ef:57:cb:1b:
                    7e:68:05:db:c4:bc:09:8d:af:ab:75:59:6f:aa:27:
                    43:19:d2:70:5b:02:a8:77:2e:d3:f1:48:0c:36:76:
                    81:ac:d8:a6:32:41:ad:dd:94:ae:75:d5:12:91:65:
                    c4:59:4b:dd:70:a1:4b:c3:e7:5a:46:76:a7:8d:73:
                    fa:f7:d2:74:e5:c0:85:b5:1b:8d:be:e1:8f:0f:05:
                    38:08:1a:16:12:40:99:e3:97:2f:7e:e4:05:08:4b:
                    bd:21:b5:14:87:27:d9:d3:36:4c:a4:34:8e:44:84:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C6:BB:E8:ED:CB:FC:6C:FF:25:F5:62:C1:87:0F:54:8E:5E:3E:85
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:83:43:67:1e:9a:cb:b5:9a:68:f8:0a:63:37:4b:f8:95:
         6e:53:20:9e:54:e3:ed:f9:ec:42:3f:56:71:2c:20:5a:0f:cd:
         ca:9c:69:9e:e9:8f:76:2e:22:a9:69:66:4c:c5:c9:5e:dd:4d:
         77:56:3b:37:4f:61:0b:6f:39:4b:d8:52:5b:3c:4b:ed:78:91:
         f6:75:fd:97:1d:de:6e:1b:00:9d:9f:c9:c1:00:1e:fd:1c:23:
         05:74:60:5a:17:4f:9b:ae:37:47:ea:91:35:8d:1d:62:fb:24:
         f8:da:d6:a2:8c:77:ea:f7:a8:d9:d0:06:bb:c6:a9:a5:dd:4e:
         cc:c7:56:df:e3:0a:65:19:2d:c6:29:e7:07:b2:cd:17:ae:e9:
         31:f3:6a:69:65:f5:c6:7e:30:22:b2:ac:3b:29:07:e9:d7:78:
         ee:e7:18:5e:dc:aa:d3:a7:b7:f0:c6:bd:63:b5:3e:22:f6:d8:
         de:50:38:77:1e:7f:87:b2:7a:0c:7f:ed:2f:44:f9:cd:51:74:
         44:11:0b:38:f3:fc:8e:5b:42:64:0d:26:f6:03:89:2f:21:c2:
         05:84:bb:43:bd:bb:e8:ae:00:3d:8c:a8:24:45:26:1c:d4:e4:
         62:31:ce:d6:56:4e:6a:f2:fe:1e:b4:26:27:ee:5c:6b:fa:6c:
         b7:42:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:07 2026 by rpki-client