Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
File:                     Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft (raw, json)
Hash identifier:          e7nhjsicgYEaZX++nbc+q8XAopcdm3svAJfXQ5clteI=
Subject key identifier:   08:FE:9F:F8:DC:FE:B7:98:AE:86:4C:62:89:35:8C:3A:DD:FE:5A:3C
Authority key identifier: 25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF
Certificate issuer:       /CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
Certificate serial:       019D284E3FBD8D480D5AC14E063432E12840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
Manifest number:          0175
Signing time:             Thu 26 Mar 2026 04:01:49 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:49 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:49 +0000
Files and hashes:         1: Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl (hash: +Ps9m7ECrDyiBXJTpuAAUtydTxJxp0ZDQygfbnnAVXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:3f:bd:8d:48:0d:5a:c1:4e:06:34:32:e1:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
        Validity
            Not Before: Mar 26 04:01:49 2026 GMT
            Not After : Mar 27 04:01:49 2026 GMT
        Subject: CN=08fe9ff8dcfeb798ae864c6289358c3addfe5a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:37:4e:c8:79:8c:c2:aa:38:44:ce:cb:ea:
                    5a:09:40:c1:67:3a:26:de:43:5c:5f:b5:00:96:a6:
                    2b:76:1e:05:45:df:45:f0:51:1b:b9:7e:07:d8:8e:
                    9a:c1:80:df:16:fd:b8:c8:85:43:29:58:49:4b:33:
                    72:45:a8:c4:46:82:53:d9:72:cb:65:80:9a:e9:d6:
                    02:69:2f:24:7c:fe:57:26:63:f4:68:cd:ba:77:ce:
                    a1:49:19:f2:0e:17:81:0c:c6:bc:aa:7d:a0:8e:8d:
                    39:fc:d4:97:1b:a8:0b:5d:a3:b4:64:55:b0:fe:9c:
                    40:5d:11:6a:a1:b2:6d:1d:92:74:2e:a4:4a:9c:6a:
                    8a:26:5a:d3:f5:80:b4:fa:37:a3:26:61:b4:44:62:
                    0d:74:4e:e6:03:cb:68:21:04:e6:b4:ec:bb:fa:aa:
                    47:46:f9:dd:50:c1:0b:40:fd:e8:9a:78:22:fd:8f:
                    1b:fb:6a:55:7a:52:4c:14:38:8b:91:58:d4:cf:08:
                    90:47:42:3a:e5:ca:dd:0d:4e:7e:25:69:f9:86:31:
                    c9:f6:97:09:4a:2f:24:9a:db:55:90:96:e3:e9:24:
                    cc:65:88:8d:9f:2c:1d:76:e0:69:b0:b5:7b:dd:62:
                    a7:24:7d:2f:8b:58:a9:d5:cd:04:ea:35:fa:41:af:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FE:9F:F8:DC:FE:B7:98:AE:86:4C:62:89:35:8C:3A:DD:FE:5A:3C
            X509v3 Authority Key Identifier:
                keyid:25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:98:bf:01:2d:f2:59:91:0b:3b:9a:9f:73:0c:5b:32:bb:0e:
         5a:8c:ba:45:09:4b:ce:c4:d3:5a:65:b9:1f:21:75:1c:e4:99:
         d4:ab:9c:e5:4f:bc:e8:e7:14:ea:65:c0:db:b2:99:3d:60:7a:
         67:3f:e1:6c:89:f4:d8:2f:32:08:53:ae:81:4d:4d:04:5d:e7:
         3e:3e:6a:65:01:65:7d:1e:96:10:37:f1:e8:a9:67:1b:3b:eb:
         c0:b3:20:35:d4:d9:b6:df:bd:71:31:97:86:64:a9:4f:eb:53:
         ee:d8:ea:f6:8c:09:ba:1c:54:1e:f5:79:df:2f:c9:36:89:40:
         d0:4e:3d:5f:c6:b4:8e:ac:f1:e7:28:6d:85:6d:f5:91:d2:bd:
         11:ef:61:08:39:4c:b9:be:37:06:51:cf:27:c1:da:b3:57:2b:
         44:48:33:c9:83:d7:3e:26:87:72:7d:ad:b1:0d:75:8e:5e:1a:
         9a:de:a6:7a:f6:9e:8a:0a:4c:91:06:48:59:46:04:76:ac:de:
         9b:6a:4a:63:14:bf:ad:ad:e8:71:26:dc:af:2e:19:e9:09:c9:
         d1:dd:7b:85:3e:0c:8f:e3:c3:1c:01:b1:1e:23:b0:6a:ca:5f:
         cb:5d:99:0d:1c:2e:d9:e8:9b:57:95:a7:0f:01:06:ce:1b:d5:
         5d:bc:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:09 2026 by rpki-client