Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File:                     cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier:          1Q/EShNiBVl5YQEIMQGtvNyOYrzPmW8rEpl37BxhCMs=
Subject key identifier:   43:AB:B8:5D:E6:7A:B4:AC:14:E4:6B:33:BC:D3:E7:3E:05:62:99:48
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer:       /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial:       019D265F0A326EDFA752DDDCBE012533C68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number:          0CC6
Signing time:             Wed 25 Mar 2026 19:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:55 +0000
Files and hashes:         1: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: 21ROJ4yrOll7A8ix68+Z9XgBdiYleABACstnT/VRS94=)
                          2: paBTm9XJ_5OjOsmofXolfSOu8tI.roa (hash: 0BVMqZx9bh/K7mlP8B+uwanGbjjmcCmxI2TQpqnc/3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:0a:32:6e:df:a7:52:dd:dc:be:01:25:33:c6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
        Validity
            Not Before: Mar 25 19:00:55 2026 GMT
            Not After : Mar 26 19:00:55 2026 GMT
        Subject: CN=43abb85de67ab4ac14e46b33bcd3e73e05629948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:99:bf:e4:96:9a:97:62:13:8f:29:f6:52:a2:
                    54:97:ea:bb:22:d9:35:12:e1:9f:44:c2:d7:4f:f9:
                    75:8f:7c:e8:1e:dd:4f:c5:88:71:29:05:ec:5e:d8:
                    07:85:e9:ac:33:f3:5a:18:fe:3b:58:c2:c9:fb:3f:
                    30:de:ba:cf:35:bb:ac:ae:40:92:2b:da:d1:9b:9a:
                    28:35:df:24:63:54:d0:06:59:59:bc:a9:04:48:78:
                    c7:23:a7:38:87:82:c7:6a:4f:49:38:a1:4e:39:a7:
                    8a:d0:30:e4:9b:fb:87:5c:ff:90:1a:f6:e7:a6:6c:
                    38:46:b4:71:e1:d2:bf:10:d4:67:9a:4c:a8:ea:8a:
                    64:51:a4:d7:80:73:78:50:83:95:d9:af:0f:a9:5e:
                    8d:6d:d1:fb:54:6c:74:fb:40:08:38:44:63:d1:f2:
                    03:b9:13:72:2b:1a:3a:be:52:f0:84:49:2d:7c:6a:
                    5f:90:74:e1:72:00:97:3e:0b:7d:ee:88:9e:69:c4:
                    e9:e6:4b:ff:7c:d3:f9:ed:6d:fb:64:1d:bc:5d:ab:
                    1e:52:f9:c6:00:68:c1:dd:a2:bc:86:8f:29:0a:28:
                    51:1d:0e:0f:4e:84:ef:33:cc:74:49:b1:b8:e2:5c:
                    a6:15:58:14:04:fb:63:23:3c:0d:7f:93:a0:cd:51:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:B8:5D:E6:7A:B4:AC:14:E4:6B:33:BC:D3:E7:3E:05:62:99:48
            X509v3 Authority Key Identifier:
                keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:95:c7:42:75:40:0a:b8:a9:b3:ec:43:09:aa:a0:2c:bd:a9:
         8a:59:f7:54:81:e0:5f:f8:1d:cc:af:ee:af:1e:c9:0b:95:17:
         3f:9b:c9:be:31:fb:0e:ec:78:28:34:10:56:e5:65:98:3b:c9:
         1e:7e:56:86:7f:26:26:c1:92:a9:8d:14:12:d7:5e:9c:85:6d:
         a4:d0:02:35:b7:4d:8a:5a:40:83:90:e6:eb:53:1f:9e:ad:30:
         94:38:d0:c8:2a:ff:85:7f:4d:63:01:44:07:42:6d:e6:fe:6e:
         16:1c:b6:9c:05:00:72:7e:96:63:e4:42:e1:68:a6:b2:89:13:
         61:3f:3e:2b:35:17:c4:06:26:55:b3:c2:c4:e4:6a:9f:92:ff:
         7d:9b:b2:99:12:15:14:9d:bf:30:ca:46:2e:3b:47:67:65:14:
         bd:5a:55:0b:09:d5:a2:ff:7d:ee:91:8e:29:9c:d4:68:4e:3a:
         48:b4:54:44:5a:98:66:fb:9e:96:cc:64:60:f3:17:b0:60:d6:
         67:8a:1e:9d:9c:19:be:a3:35:88:a0:1e:81:4e:33:1f:38:e4:
         57:90:10:a1:2a:92:17:35:9b:04:51:22:23:9a:20:24:9c:7b:
         6c:b8:3b:a4:cf:39:29:45:a0:6a:ae:9a:d6:a1:90:f6:77:48:
         16:56:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:42 2026 by rpki-client