Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          4qloal6tYPW7m3K7R0dGRoIBsJ/af+rD6qZR0SrLDyQ=
Subject key identifier:   B7:A5:48:85:0D:34:70:C4:B5:CC:07:B8:13:11:B3:3B:8F:2E:AA:BC
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       019D39419F053F1928101212888D52285FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          1520
Signing time:             Sun 29 Mar 2026 11:01:34 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:34 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:34 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: 5l3Kr5eGrOCyzfA/y28wUB7ObaKCC/et9rkQowaaBUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:9f:05:3f:19:28:10:12:12:88:8d:52:28:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Mar 29 11:01:34 2026 GMT
            Not After : Mar 30 11:01:34 2026 GMT
        Subject: CN=b7a548850d3470c4b5cc07b81311b33b8f2eaabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:d4:2e:24:02:a4:af:06:97:ed:13:1b:91:
                    cb:25:66:0d:c7:f1:1e:cb:ac:96:21:51:ec:0a:01:
                    fb:3d:4e:43:89:ad:72:34:90:d3:03:59:2c:fb:de:
                    d5:d7:07:2e:18:82:61:89:ab:dd:e0:19:5c:76:ef:
                    6a:7f:41:e4:78:a3:6e:ee:fa:e8:bd:31:4b:c0:46:
                    65:65:37:77:24:d7:20:9c:f6:4f:33:62:02:4c:98:
                    e5:ba:8c:22:f8:bb:46:a3:e3:23:d1:9e:6c:dc:dc:
                    6b:64:8b:61:5d:e0:fe:8d:47:bc:c7:6f:80:12:76:
                    f0:a7:22:cc:7a:c1:3e:6d:2f:e8:49:86:ed:fc:fc:
                    9c:d8:9a:5d:82:12:ca:54:32:b9:16:ce:d9:2c:25:
                    d7:9a:3b:57:e1:0e:a5:b0:23:f3:a0:ff:26:e1:67:
                    34:9e:b6:f9:d8:30:cc:ae:7d:bb:e4:44:39:c2:1c:
                    0b:9f:8c:7a:75:40:14:13:11:7f:85:ee:e5:87:ef:
                    7c:1d:62:2d:69:d9:93:23:f7:d3:eb:c3:5e:05:cd:
                    96:f3:5b:61:2c:62:5b:f2:97:2f:26:fb:0e:d3:a2:
                    b4:f7:82:73:a9:0d:e3:07:22:32:34:79:ea:cb:c1:
                    91:d5:e7:ae:c3:0d:a6:df:89:22:61:e2:37:9d:16:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A5:48:85:0D:34:70:C4:B5:CC:07:B8:13:11:B3:3B:8F:2E:AA:BC
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:50:7d:7c:e2:d3:1e:44:49:eb:ab:93:c1:d7:a6:c1:41:
         f0:a1:66:d5:b0:ae:0d:1a:fc:d9:3b:91:97:16:f5:d5:ba:15:
         f1:78:41:51:9d:6d:c0:5d:25:f8:ff:39:04:e7:5f:af:ec:e9:
         78:94:78:63:b9:08:d8:fc:ff:ae:21:5f:5e:94:f9:26:e3:2d:
         fe:df:a0:9f:12:b2:a3:20:e3:35:e0:30:da:58:a4:46:20:7c:
         f4:6f:73:43:09:25:b9:a5:cc:f6:4b:98:25:ee:98:1d:68:45:
         10:f9:fe:8a:60:21:28:f6:c3:9d:b6:d4:63:d2:94:8c:8b:33:
         f7:5c:0b:18:cc:51:ac:88:eb:49:0b:08:74:09:62:cc:9e:2e:
         f1:15:ae:5d:d0:ef:18:8a:72:a5:16:d0:bc:1a:4d:15:7b:84:
         d9:d4:84:f1:68:ed:a3:60:1a:3b:cf:bd:83:9c:7c:38:2e:50:
         a6:cd:4e:83:6d:21:18:2b:17:01:fb:24:0f:68:48:8f:f0:a1:
         e7:dd:f8:12:34:74:3c:86:1e:e9:9a:c6:81:e0:3f:ce:b7:4d:
         59:e3:35:a1:48:00:1c:29:74:4a:bf:c0:f8:84:bd:44:fb:29:
         cf:86:51:ef:47:92:1e:8b:3b:4a:d1:92:09:4f:ca:cd:c1:5a:
         ac:ed:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:21 2026 by rpki-client