Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier:          J0JURs86gTVP5MCrBOaeNRp/fgtGSGEDenr2dZpfGIs=
Subject key identifier:   AD:F4:12:11:4E:EC:41:66:E9:DC:B2:7A:5D:FF:08:04:81:B2:21:A4
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer:       /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial:       019D386554B2B2050CF79860BEC355E608B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number:          188A
Signing time:             Sun 29 Mar 2026 07:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 07:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 07:00:58 +0000
Files and hashes:         1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: 03Sk14VQSh6B86abZpdBjLe9LIx20A7AMHoBROvsckc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:54:b2:b2:05:0c:f7:98:60:be:c3:55:e6:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Validity
            Not Before: Mar 29 07:00:58 2026 GMT
            Not After : Mar 30 07:00:58 2026 GMT
        Subject: CN=adf412114eec4166e9dcb27a5dff080481b221a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:a3:8f:4d:a4:b3:e0:15:1b:96:c7:27:5f:
                    76:5f:e7:b6:9e:f8:ee:0f:f7:f7:02:76:4e:6b:ca:
                    12:a4:83:29:ce:6a:76:4e:80:a7:6e:86:ad:13:47:
                    ef:a9:d6:38:97:e6:35:8f:e2:da:ed:fc:99:ee:c4:
                    be:0e:4a:b5:8e:e5:6a:2f:0e:20:5b:a9:81:04:1f:
                    ee:f5:87:fd:81:ae:4c:0f:23:b0:fb:77:47:2e:7d:
                    a8:c0:08:35:52:81:d0:55:de:af:74:a0:14:7a:4a:
                    69:d9:90:41:3c:30:3f:23:31:7e:82:13:7c:0c:fc:
                    f0:fb:18:f6:61:c5:64:b6:3a:69:63:ec:4b:c3:8a:
                    db:47:66:c0:0e:09:31:6a:eb:72:fd:cf:4d:2a:67:
                    3a:23:56:42:20:34:d7:93:b1:c2:db:d6:a4:c9:91:
                    f5:03:42:36:73:e6:bb:86:5f:95:97:90:5e:ca:3a:
                    fb:0a:49:29:89:9d:24:61:d5:42:86:3d:0a:0e:c4:
                    bb:3f:da:da:31:e7:1a:8b:6e:02:eb:12:20:a8:2d:
                    f0:a1:cd:b2:1c:6d:17:08:f2:1e:7d:63:5b:3f:49:
                    e3:a9:73:86:6a:a6:4e:6a:28:00:3f:3d:eb:4e:39:
                    90:d0:7a:4e:98:f9:af:a0:aa:c4:3b:1c:cd:29:bc:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F4:12:11:4E:EC:41:66:E9:DC:B2:7A:5D:FF:08:04:81:B2:21:A4
            X509v3 Authority Key Identifier:
                keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:de:3b:95:86:3f:7b:55:50:4e:91:fc:36:a8:43:58:f0:
         ea:a8:63:0b:41:38:06:d4:54:fb:68:a3:36:3b:2d:5b:34:e9:
         05:b9:ce:e7:6f:22:2b:11:05:5f:bf:de:89:eb:8e:b7:3a:fa:
         23:d7:da:30:1a:eb:eb:47:d8:b2:ee:2c:5c:6f:c6:3c:59:d3:
         18:98:0d:44:ef:69:63:58:66:1e:89:ce:ad:c2:38:02:c0:f3:
         f9:74:6f:e2:15:7c:51:85:ca:39:0f:95:66:81:92:0f:bb:aa:
         78:5f:c0:9a:87:d8:05:23:96:a2:dc:f1:0b:1f:84:27:9e:20:
         7e:0d:cf:56:ec:58:6a:2b:dc:36:2a:6e:95:fa:5f:2d:0b:ba:
         26:a7:08:cf:08:6c:db:56:97:fd:d3:8f:11:2d:36:c1:da:79:
         39:03:40:2a:cd:5a:84:32:4f:c3:2e:a5:36:f7:2f:a0:16:d1:
         8b:cd:72:af:8a:45:a2:c6:46:95:a1:88:50:a3:b9:a3:1a:3f:
         36:43:c6:71:cc:44:e6:19:0c:b8:55:6b:1a:ff:2f:f9:ce:53:
         0e:06:e0:03:13:1b:f1:ae:29:e9:56:25:2a:2a:3e:e4:df:e8:
         d4:f2:7c:c9:75:0c:d2:c1:66:dd:d5:48:b0:64:98:08:dc:c1:
         10:e1:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:55 2026 by rpki-client