Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          xw4hOXam5iYZd50eRHlMPMM1S6MC43vql3G6gEM6DS8=
Subject key identifier:   08:12:14:AF:E7:7C:AE:07:4F:E2:9D:6E:5A:93:81:69:31:EA:47:E3
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019D2627E91E27C9D9E503C504B20090AABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          10A3
Signing time:             Wed 25 Mar 2026 18:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:42 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: +DmKsUHJzZ/Td3xez4bkiIfO/s3rqS5mPPHy6w2c7A8=)
                          2: 9NC9VZWVXCDGXS-Gbz2sbEpud3w.roa (hash: ENTPA3eKA+o83CbO6DLdaT2bnskiGmTmI748T5YuAPs=)
                          3: E-bHCsYrW7SrEgoszTkYjWaBUl0.roa (hash: SQvcR4616bSFv3T1JdnviQPzodPyTLJ2qwgGIvoGyQQ=)
                          4: dx_EmdaCtCk3lPgY9GHpXyywHN4.roa (hash: A9UJpCPfL7hO2rNlUxE5iQopLk2eq6WPtVOcMxT85dU=)
                          5: jlFVDqu5eEvY4hcppuGoxG329Xk.roa (hash: sg7bhA6MrODM/82hHvHec0CZxFeKMYnKwUZdeRQd/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:e9:1e:27:c9:d9:e5:03:c5:04:b2:00:90:aa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Mar 25 18:00:42 2026 GMT
            Not After : Mar 26 18:00:42 2026 GMT
        Subject: CN=081214afe77cae074fe29d6e5a93816931ea47e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:b4:5a:eb:a5:ac:ec:03:24:2d:3d:aa:9b:
                    5a:89:07:97:13:26:05:03:22:ee:ef:fa:ff:43:7b:
                    54:66:83:8a:00:d9:64:85:e6:14:ad:c9:55:fc:12:
                    22:6c:f6:4a:dd:a7:80:7f:bd:cb:51:36:40:fa:8d:
                    42:42:4f:f8:4c:24:b3:47:c7:d9:d6:b3:71:74:07:
                    e1:45:7b:03:8d:09:78:e9:ad:cd:13:03:3c:46:03:
                    7c:cc:8f:09:31:f5:57:fa:26:81:0f:fd:f5:87:b2:
                    21:cc:13:9a:18:0f:98:d0:80:71:f3:b6:1f:af:c9:
                    71:e1:5c:43:54:ee:38:be:8a:68:f4:61:96:f1:c9:
                    27:10:a7:48:66:8e:84:19:24:73:a3:02:a9:5e:af:
                    69:c9:f5:cb:78:63:2f:56:99:3c:45:26:f5:03:eb:
                    54:4f:91:06:09:06:75:2a:ae:dd:03:8c:65:cd:b5:
                    8c:fc:c9:a1:3c:eb:7d:12:b7:bc:fd:b2:da:dc:e3:
                    1f:98:0d:3e:7d:cd:5e:81:1a:46:79:a4:bd:0b:c7:
                    79:59:da:d3:87:e8:be:7b:ed:fa:4d:6d:29:62:d3:
                    b4:8a:09:3f:7b:83:8e:73:96:ab:2c:ba:05:4a:b8:
                    38:6f:3a:b7:27:4e:9b:58:6b:48:e3:98:59:e5:4d:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:14:AF:E7:7C:AE:07:4F:E2:9D:6E:5A:93:81:69:31:EA:47:E3
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:2a:ee:e2:59:f0:f4:45:be:35:0d:25:d3:7a:dc:e4:65:
         0f:99:0d:e8:6d:3e:56:33:a3:1a:69:a0:06:c8:82:97:80:48:
         a0:24:86:52:23:8e:78:2e:47:ea:32:61:94:fc:75:4a:5b:af:
         94:34:d5:80:d9:ab:3f:f2:75:32:41:65:17:31:fe:6a:04:cc:
         2e:fc:ba:a6:05:89:38:ea:70:ab:bb:10:4f:2d:04:62:4a:75:
         c0:a5:1e:34:46:08:59:74:20:e8:34:e5:f3:7f:3b:40:7b:b7:
         79:58:bd:a9:d7:c3:e3:51:f2:ed:b8:24:be:cc:7a:5a:e3:c7:
         8e:cd:e2:ab:6f:c0:4e:55:c5:7d:27:de:bf:14:9e:ff:66:74:
         94:b9:e9:75:ba:7a:4a:15:88:7d:d7:57:98:49:22:d6:e2:68:
         80:6f:53:de:b6:2f:87:ec:ad:06:93:14:06:91:19:3f:25:32:
         ce:75:1d:7b:3c:05:44:53:2c:8e:f4:79:87:82:14:61:bc:7d:
         74:40:92:32:ca:60:4f:a5:a9:52:23:c6:06:c7:f5:c7:b2:da:
         cb:a2:6e:1d:df:67:f7:08:84:98:f4:0d:ae:e3:56:4a:ee:f8:
         25:30:c4:96:bc:19:a1:a2:ce:50:1b:fd:26:b8:c6:ab:bb:e0:
         98:36:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:53 2026 by rpki-client