Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          blvLnuAxwahXjiGK9KWNEfoAdv/7tcsyHb2yuQIjlVU=
Subject key identifier:   DF:CA:50:A1:98:35:D6:13:0A:5C:43:22:BF:51:5B:16:9C:4E:F7:06
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       019D26963EB611BFE551BC4B2B66493C0809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          0E62
Signing time:             Wed 25 Mar 2026 20:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:13 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: q43vO8hQCApEkYcepQ5QKoG/x1Z+7RdvQn2wrb2TCbU=)
                          2: Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (hash: 1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3e:b6:11:bf:e5:51:bc:4b:2b:66:49:3c:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Mar 25 20:01:13 2026 GMT
            Not After : Mar 26 20:01:13 2026 GMT
        Subject: CN=dfca50a19835d6130a5c4322bf515b169c4ef706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:cb:4b:fa:f9:32:bf:9b:a4:20:27:ed:97:
                    40:9b:3b:d8:7b:80:06:7e:5d:bb:c3:c0:07:c7:c0:
                    3e:63:6a:78:24:4f:79:7c:ac:f4:10:b0:4b:97:88:
                    42:94:ea:26:c8:2e:09:ae:8c:4e:91:d3:b6:e0:f7:
                    2a:3f:30:04:c1:73:78:64:62:45:22:2e:1a:15:95:
                    be:e0:fd:01:32:a0:ec:fc:58:33:73:e4:58:aa:8f:
                    54:53:50:72:15:9c:fe:c2:57:c3:73:8c:cd:78:68:
                    1b:bb:50:41:0e:91:c1:8b:c1:f1:b3:b8:08:0b:d2:
                    a0:98:4a:a9:28:ef:13:35:2b:a3:e8:e7:58:fa:46:
                    62:d0:84:28:5b:51:6b:85:45:fe:39:9e:52:f4:1e:
                    02:60:d7:6c:04:bb:9a:6e:76:6a:ad:c4:46:ba:ca:
                    1b:ea:b3:22:15:52:c3:1e:84:6e:20:98:85:59:b0:
                    36:67:5a:d1:52:21:14:df:d3:c1:65:6f:ae:d0:77:
                    3f:7c:77:17:10:9d:4b:8a:8f:60:ca:7f:d2:66:9d:
                    95:40:f4:0e:92:81:be:d6:9f:93:88:97:68:59:33:
                    15:5b:f2:4f:36:1e:e8:7b:b1:1f:ec:14:8e:ac:7f:
                    5b:1e:2e:67:d2:5c:a8:56:96:b4:a2:df:13:4b:71:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CA:50:A1:98:35:D6:13:0A:5C:43:22:BF:51:5B:16:9C:4E:F7:06
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:9c:2e:38:97:8f:e6:4f:fa:7d:02:f4:79:06:19:fa:cc:
         56:19:01:c7:8b:5f:3c:0a:74:01:15:3a:e8:08:ef:09:30:b2:
         a2:c4:62:60:22:95:9b:9c:e0:e6:11:95:cd:92:81:d3:e0:2b:
         d3:a3:a6:39:2a:20:71:40:6f:9d:0d:2c:56:55:00:39:fa:f0:
         20:cb:95:cf:ae:59:56:7a:eb:5a:bc:99:6a:8f:9f:8b:1f:19:
         c8:a1:ae:7d:52:fc:81:70:6c:80:fc:6c:b5:63:d0:6a:83:cb:
         6f:17:f6:b4:f7:1e:a0:b6:ac:7d:cd:b3:2a:54:ea:c9:42:6d:
         b5:d3:37:75:e6:af:fb:b1:fb:40:db:30:05:cf:d9:68:12:d1:
         ed:8e:a1:b9:4a:8c:69:68:09:a4:e7:f8:53:d4:6d:d2:1c:dc:
         02:f2:e2:d2:31:1c:2a:9b:ba:0f:4c:7c:ee:dd:dd:f8:7c:f0:
         f7:43:5d:dc:25:5b:83:78:14:f4:d8:cf:58:a5:c8:7b:54:2a:
         ad:7e:f1:0e:ae:3e:1a:91:7a:29:9b:0c:bb:73:76:1b:38:81:
         4c:b9:9a:2c:15:ed:a7:ce:a2:e9:2e:74:42:fb:fa:47:8f:c7:
         cc:56:62:31:96:63:b5:8a:ef:82:c4:56:96:57:4c:2c:4a:69:
         cd:e5:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:48 2026 by rpki-client