Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          /nTfrr37PzYglloAyFTapV2Gbl7+KQl//lCGfJE8OPA=
Subject key identifier:   DA:C8:4A:30:7A:EF:3F:04:F0:2A:4E:3D:8F:25:92:BC:6A:04:CC:48
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       019D3A53C4FECCC46791E1F189CA8CEFA0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          0847
Signing time:             Sun 29 Mar 2026 16:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:01 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: vJCApSug93YKkuR3ZR02zDES8jVroAZoK8RgV8rKpT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:c4:fe:cc:c4:67:91:e1:f1:89:ca:8c:ef:a0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Mar 29 16:01:01 2026 GMT
            Not After : Mar 30 16:01:01 2026 GMT
        Subject: CN=dac84a307aef3f04f02a4e3d8f2592bc6a04cc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:52:cd:6f:a1:37:31:04:a7:6d:d3:61:89:
                    f8:db:c5:b4:36:f0:d2:91:ec:1f:7d:ba:e7:95:2a:
                    72:85:f9:c4:e7:46:89:68:33:20:0e:80:2b:8b:4b:
                    72:11:3e:0f:39:26:13:81:4d:84:cd:0c:99:e3:a9:
                    0b:32:7e:63:ff:bb:34:7f:62:e9:04:2c:b3:b3:ae:
                    8d:41:77:a8:16:1c:0d:06:98:e0:9d:d1:6d:b5:a3:
                    9d:cb:b3:7c:3e:f2:84:1f:0c:b0:ab:b6:0f:9b:55:
                    41:b8:bc:3e:9f:73:9c:e0:5b:48:7f:1e:21:6a:f6:
                    7b:13:b4:41:a9:33:7f:80:b8:94:3b:47:eb:90:a2:
                    4d:6c:e4:b5:20:22:59:3b:fb:44:07:23:96:1e:a9:
                    3a:50:a4:1e:41:82:32:4f:70:c9:7b:d2:f9:35:18:
                    ae:5b:58:72:43:1e:41:c3:0b:c5:13:f6:6a:28:71:
                    dc:8b:f7:e3:40:02:ff:3f:52:66:33:8d:bb:83:37:
                    13:d4:7b:07:08:2f:7d:4d:80:8e:e9:7b:e7:b3:7c:
                    6a:49:3a:e5:31:af:d4:c7:d5:e4:d7:62:22:99:d6:
                    2d:f9:0d:5e:09:ab:b0:17:31:39:61:bd:f6:7b:c2:
                    c8:a8:af:08:f2:5d:2b:ce:1a:20:a6:53:52:32:97:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:4A:30:7A:EF:3F:04:F0:2A:4E:3D:8F:25:92:BC:6A:04:CC:48
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:bc:62:1d:2e:ff:bb:cf:8b:ec:ba:24:2e:be:9e:b4:ae:
         85:8a:8d:c2:ba:18:51:9b:41:40:f4:f6:bf:33:21:9e:53:99:
         b5:1c:37:00:43:1f:ed:b7:e9:d1:6a:95:31:53:5a:66:e4:6e:
         9f:35:29:44:46:cd:1c:e8:d6:74:89:7b:8d:82:1a:d6:e5:e1:
         ee:49:84:f8:4b:ac:66:37:fc:da:4e:4c:e9:eb:30:10:ee:8c:
         a1:fc:1c:63:80:6b:d6:28:ed:f5:6d:7b:83:89:7f:76:4f:c5:
         21:04:7c:ce:ed:11:5a:f1:67:89:cc:ce:68:9d:24:95:61:97:
         29:a2:f0:5f:b3:5a:3d:77:96:6f:73:a0:b7:08:89:63:39:e3:
         ba:99:54:e9:03:c1:95:0e:6b:97:04:2b:f2:ba:77:25:05:cb:
         14:0f:89:35:3c:82:23:50:fd:da:85:7d:74:af:c9:2f:91:72:
         86:21:58:f8:a0:19:14:b0:f2:de:d1:fd:5b:38:86:b9:a9:d9:
         b6:8d:a8:74:2a:24:56:8f:c1:52:95:bd:87:8a:85:77:e0:a4:
         d5:59:70:eb:1b:86:be:7b:dc:37:f4:ce:54:3c:be:91:b8:4e:
         8b:95:e2:7c:c8:6f:82:49:30:d2:0c:bc:17:8d:b8:37:11:b9:
         f9:08:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:37 2026 by rpki-client