Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
File:                     byhVbwoxXBallRWO0VmiXqpkOEg.mft (raw, json)
Hash identifier:          Y1RON69oP2i1Cxn210Lmew7LUeOcuHp4DArkWELFoKM=
Subject key identifier:   EE:8D:1E:35:C6:1A:DD:A6:C6:4E:B4:1B:01:BA:0A:31:49:F2:D0:62
Authority key identifier: 6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48
Certificate issuer:       /CN=6f28556f0a315c16a595158ed159a25eaa643848
Certificate serial:       019D3940D25BFB8145C80349FB6BAC89D81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
Manifest number:          F9
Signing time:             Sun 29 Mar 2026 11:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:42 +0000
Files and hashes:         1: byhVbwoxXBallRWO0VmiXqpkOEg.crl (hash: OKVUzrMgJDo5cb7XwAfw3OdMDuE5g9hJsDmNwt7BH2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:d2:5b:fb:81:45:c8:03:49:fb:6b:ac:89:d8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f28556f0a315c16a595158ed159a25eaa643848
        Validity
            Not Before: Mar 29 11:00:42 2026 GMT
            Not After : Mar 30 11:00:42 2026 GMT
        Subject: CN=ee8d1e35c61adda6c64eb41b01ba0a3149f2d062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:3e:f3:69:11:29:da:8d:7b:0f:ea:8e:d6:
                    85:69:86:0a:27:11:e4:c8:1b:14:75:f8:0f:7a:b8:
                    dc:9b:05:b4:7a:9d:8d:73:4b:a2:fe:8c:f2:43:c3:
                    eb:c4:0d:0c:f9:a6:b2:d9:a6:51:8c:75:82:67:06:
                    f3:b0:90:05:12:f4:da:6c:6d:a6:3e:49:3b:a9:27:
                    31:8d:6e:ad:90:84:86:6c:39:32:67:65:a5:2f:39:
                    2a:7c:43:3e:1a:d2:28:85:6a:78:42:58:98:3b:f1:
                    5e:de:4c:36:03:32:d5:4b:af:6c:06:76:1f:52:1d:
                    a2:3e:b2:ca:e2:8e:a0:62:fc:67:5f:42:1b:c8:4b:
                    11:8f:cf:27:9e:cf:25:39:eb:ca:07:49:76:7d:d1:
                    92:13:ef:7b:e3:f3:62:99:25:d2:7e:02:50:2a:b4:
                    7a:b8:60:a8:85:9e:ca:37:a5:2d:04:ee:47:2f:4d:
                    cd:1e:eb:db:68:8b:6e:8d:2b:59:df:ff:42:62:a9:
                    76:94:23:91:bf:6e:2b:02:7a:35:c8:52:45:a9:20:
                    23:2f:32:6c:4c:18:43:e7:3b:a3:45:e4:be:04:c7:
                    82:d7:0c:1d:b2:7c:57:12:5e:cb:6a:6c:43:10:71:
                    4d:df:e7:70:7f:2a:ec:01:af:06:cb:cd:5e:e2:bf:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:1E:35:C6:1A:DD:A6:C6:4E:B4:1B:01:BA:0A:31:49:F2:D0:62
            X509v3 Authority Key Identifier:
                keyid:6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:88:7f:c5:de:3f:49:39:af:14:dc:fe:56:ac:32:66:72:a8:
         fc:22:c9:5f:e4:d5:5e:ba:79:46:18:68:c7:c5:d8:bf:28:af:
         1b:c0:4f:17:76:c3:37:52:ad:e6:d0:75:89:fe:58:60:20:3c:
         8c:65:a1:74:4e:5a:4f:1c:6e:55:c1:14:56:83:1a:8d:27:9d:
         5e:d1:72:cf:71:48:cb:ae:f4:be:30:63:9e:f8:7d:40:d8:b1:
         66:66:da:ec:2a:e4:45:f6:97:10:ae:02:30:e2:f7:96:62:38:
         70:f7:65:87:f6:ca:00:80:03:af:e0:e0:89:04:67:37:8d:a7:
         e9:66:86:23:97:84:a3:5d:00:2f:bd:76:bb:2f:c1:a1:dd:1d:
         ba:fd:4d:87:4d:5b:e2:e6:45:80:9f:54:e1:c6:06:bc:03:08:
         2f:52:85:8e:eb:04:9f:2f:62:e4:ab:2a:12:de:53:25:74:a4:
         6c:f5:61:ee:99:1b:07:56:f9:37:61:8e:57:cf:99:ea:d8:f8:
         95:f6:89:e5:98:ce:b7:2c:41:18:f7:6a:37:cb:cc:41:6d:6c:
         57:d2:17:94:49:b1:1b:9f:78:ca:f0:16:91:10:4c:16:eb:de:
         4b:7c:99:88:6b:70:e2:12:88:48:a6:40:10:66:0b:93:b5:98:
         34:65:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:22 2026 by rpki-client