Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          AlvtWV9tv+7X+06tiBOcoce/MKJQZP5ubqI+TAA7XJY=
Subject key identifier:   89:61:92:C7:C0:32:E4:85:F2:D4:4E:0F:66:B9:11:F6:DB:99:80:D0
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       019D39AE78A42966C7898F562505FDB0D9D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0EBC
Signing time:             Sun 29 Mar 2026 13:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:28 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: 1JJcWQPgCCulKBegM3HbKFlKLxn7ItOO5PIVtjBTbq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:78:a4:29:66:c7:89:8f:56:25:05:fd:b0:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Mar 29 13:00:28 2026 GMT
            Not After : Mar 30 13:00:28 2026 GMT
        Subject: CN=896192c7c032e485f2d44e0f66b911f6db9980d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:8a:52:93:ce:93:4c:a4:a3:70:f5:6d:e3:
                    cf:2f:4d:20:df:f7:4a:07:77:72:1e:0c:67:5d:11:
                    7b:fe:92:0c:61:85:ba:28:77:6f:cf:f9:ca:79:a6:
                    1d:c5:9d:10:55:a6:aa:0a:67:47:20:c4:cc:94:fc:
                    9c:46:4b:4f:b8:5d:1c:be:71:31:f1:34:b8:dc:61:
                    f6:01:e7:e3:de:f2:ef:1e:52:ba:da:cd:12:12:34:
                    ab:5d:b0:ff:38:99:c8:a8:1b:fe:c8:a9:35:96:ba:
                    d8:91:25:97:09:34:09:c6:a3:10:34:ca:4e:68:33:
                    55:79:43:91:99:7a:d1:c9:de:87:6c:c0:da:92:c5:
                    a6:74:b3:cf:50:c6:1f:de:a6:d4:33:b9:01:d8:c7:
                    bb:17:3d:1c:ca:fc:10:08:fa:ac:1b:11:c7:8c:bb:
                    3e:ed:94:34:12:34:d9:f8:0c:7a:2a:c4:92:20:ef:
                    fa:aa:a9:87:09:58:d5:c3:ed:4c:ab:6b:d1:2b:7d:
                    34:af:21:69:0d:e7:37:c0:bf:4f:fd:ee:9c:1d:ad:
                    df:12:db:3b:c1:0a:89:8e:12:6f:ff:5c:ab:77:83:
                    7c:d9:b8:73:6a:79:b7:c9:2a:84:88:5c:7f:1d:91:
                    9a:9d:4d:0a:bf:97:3c:02:44:9c:f5:c7:14:71:c2:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:92:C7:C0:32:E4:85:F2:D4:4E:0F:66:B9:11:F6:DB:99:80:D0
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:3d:ba:2b:f1:c0:eb:78:32:6c:56:ed:2b:ef:4d:47:66:
         0b:8b:8d:d3:a7:2d:b3:f1:58:cd:29:71:cd:1a:e5:23:08:71:
         9d:c5:b9:74:77:00:f2:04:1c:aa:c6:25:c7:d7:2e:63:f7:b6:
         ec:13:60:9a:17:aa:a2:3e:e1:27:c3:1c:e9:ec:ea:d6:54:33:
         21:99:b2:dc:d2:6e:c8:3e:3a:ba:74:1f:54:ff:2c:44:d2:ad:
         96:14:c8:73:db:ee:b9:de:17:8b:71:7c:bf:8d:19:5e:99:e5:
         ea:7a:f1:b6:b1:5f:34:cf:98:c4:f2:5c:f8:ff:a4:16:e1:57:
         50:f3:dd:31:21:7a:97:cd:61:a9:70:7d:ac:5f:28:17:e7:a2:
         56:60:45:5f:95:1c:14:f8:a8:f5:75:c6:bf:a1:9d:10:ef:97:
         29:67:a7:9c:0d:c4:7f:2b:66:ba:de:a5:1f:ba:21:41:af:77:
         f7:c9:18:d0:d9:87:02:4f:40:2c:cc:a9:8f:4a:76:b0:84:18:
         07:cd:74:03:58:16:77:d2:16:43:0f:f7:95:f3:93:7d:05:59:
         8f:98:3d:32:ed:07:c2:fc:fc:9c:2c:5f:14:48:2c:80:8b:89:
         b0:c8:e8:80:34:99:7d:e8:d1:75:31:46:6c:05:15:07:d1:91:
         dc:99:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:05 2026 by rpki-client