Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File:                     IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier:          0eWdBfWSQH4fKAfXzPKFqIxO8J9Rs6GPaAzm+r9EiSk=
Subject key identifier:   CB:46:9A:4D:7C:7F:38:E9:3D:6B:E3:D1:D0:99:B8:ED:0E:D5:B0:6F
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       019D29976273DCF121FA8BFD6E87E9A7CD9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number:          0F0A
Signing time:             Thu 26 Mar 2026 10:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:20 +0000
Files and hashes:         1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: 19SvQWX6i9lr8/bPhGCosPp9fEQX/ZOOQR9SmFEpugo=)
                          2: _NSr0h0Kt0SbJsZS8dEj8fAEATE.roa (hash: gHQWo6MfDdcWF8qTZNVOf3frooR2b9p4qIOyB4d8FFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:62:73:dc:f1:21:fa:8b:fd:6e:87:e9:a7:cd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: Mar 26 10:01:20 2026 GMT
            Not After : Mar 27 10:01:20 2026 GMT
        Subject: CN=cb469a4d7c7f38e93d6be3d1d099b8ed0ed5b06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:67:0a:43:b6:a4:f4:4f:a7:74:9d:ef:c0:
                    45:9f:a8:88:26:2b:b9:b8:69:21:01:46:0c:48:67:
                    87:5e:2f:62:24:d7:0d:6b:3d:6a:af:ed:5f:0e:1d:
                    1d:a6:d0:a9:62:87:17:e1:b1:66:81:60:b0:49:7e:
                    2e:5d:0b:f5:28:7c:18:6e:b1:16:15:25:e1:ba:f1:
                    7e:a3:23:ec:87:d0:9c:76:16:7a:e2:df:61:ae:96:
                    90:e5:ee:55:48:bf:1f:5d:e6:03:57:e3:47:23:74:
                    34:60:a4:09:38:d9:b0:ea:24:c6:f7:44:7d:a8:8c:
                    02:29:c6:b4:45:b4:25:51:90:4e:4a:c8:3b:f5:b6:
                    9b:53:2b:d3:87:60:a8:c4:c8:ef:76:93:c1:7d:7e:
                    b8:57:27:ae:4d:cc:1e:46:b5:8e:43:80:d1:21:e1:
                    88:2a:95:13:96:d8:14:5c:e3:38:c1:f5:ec:dd:c0:
                    6e:18:45:93:bc:0a:29:77:f6:c0:b4:79:01:0e:a4:
                    c7:8c:a7:e0:a4:57:cb:56:cc:cc:8e:3f:3e:75:5d:
                    b6:6d:c8:a1:4e:57:7f:72:9a:30:20:23:93:60:09:
                    f5:17:d4:77:3b:4b:39:ce:c0:f0:2c:02:a7:b1:81:
                    3d:4a:80:a8:3b:d1:93:8f:12:fb:bd:11:30:e7:82:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:9A:4D:7C:7F:38:E9:3D:6B:E3:D1:D0:99:B8:ED:0E:D5:B0:6F
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e5:39:da:91:a2:40:62:b2:c8:98:63:ef:24:fc:00:36:62:
         37:ea:5a:02:da:cb:ae:76:91:4c:46:00:fa:59:18:2e:2c:d1:
         92:95:04:b6:bd:52:fb:fa:f7:25:12:8b:da:4b:8b:a1:ad:1d:
         ba:fd:35:3c:7f:77:c7:b7:97:ef:cf:a3:dd:bf:4f:f8:5d:98:
         d9:a7:55:ce:24:25:95:3d:dd:f0:63:4f:4d:6f:58:6d:1f:64:
         dd:79:84:f8:5d:78:cf:e0:5c:ef:55:05:4d:34:c4:37:88:8a:
         06:59:35:7c:96:0b:01:42:9e:c2:94:ea:54:66:d7:26:b9:83:
         aa:05:8a:bc:0e:9b:2a:d2:b7:34:a8:29:aa:88:11:ca:8d:37:
         3a:41:83:be:4f:e4:ee:fc:23:03:eb:6b:f2:68:3a:0a:83:fa:
         c7:55:42:8f:a2:4b:90:7b:04:05:95:2c:35:46:ee:b7:d1:bd:
         97:88:a9:8c:de:5d:40:20:6f:74:07:3b:7c:d1:3e:6e:2c:ef:
         77:cf:fe:9e:07:c0:a0:f6:ec:89:01:10:a4:31:4f:37:4c:b6:
         c0:88:86:42:5e:58:8f:21:bc:30:70:af:9e:9f:1d:aa:6a:a2:
         b7:14:13:35:b3:2d:db:fd:fe:89:b8:29:8c:90:ee:b3:e2:a8:
         19:11:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:46:58 2026 by rpki-client