Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File:                     dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier:          AKm81DCwTVxUnyhbVyVYWER2ynIklk8LMXp/HbM6wzE=
Subject key identifier:   CC:91:03:5B:55:27:FA:84:D5:7C:3E:4A:DE:72:B8:D1:0B:53:95:FF
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer:       /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial:       019D27E05AE2DBFA40678F8CB132922795CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number:          069B
Signing time:             Thu 26 Mar 2026 02:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:47 +0000
Files and hashes:         1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: u31r1Leo/uXekNrqj4/FBPH9WaLiFYyBvizJpYjKFRg=)
                          2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:5a:e2:db:fa:40:67:8f:8c:b1:32:92:27:95:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
        Validity
            Not Before: Mar 26 02:01:47 2026 GMT
            Not After : Mar 27 02:01:47 2026 GMT
        Subject: CN=cc91035b5527fa84d57c3e4ade72b8d10b5395ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:73:c7:d4:03:41:75:5e:bb:a8:69:0f:62:
                    89:4f:5d:c9:1b:d6:87:b9:2c:54:f9:62:70:43:e0:
                    45:94:f7:e4:d4:5e:d0:f0:4e:b2:69:3e:3f:29:94:
                    ae:b4:43:d4:ab:a8:04:e1:6d:89:80:b5:e5:34:09:
                    21:1a:21:e1:b6:68:53:e1:2b:65:09:16:62:6e:38:
                    0e:43:10:f4:eb:c8:28:4b:07:b9:22:77:dd:ff:d9:
                    2e:54:c1:1d:2d:a0:19:c0:41:7a:43:d0:b1:1f:8d:
                    a1:ec:c0:7e:d2:5b:cc:d4:7b:fd:6b:32:62:99:c1:
                    0b:28:83:9b:a1:7f:0a:26:e7:52:55:ab:a3:a2:aa:
                    90:eb:02:d9:e9:12:e7:f0:3e:86:85:9e:2b:49:d4:
                    c8:67:44:c6:9e:45:4f:cb:0b:19:9e:79:95:6f:1d:
                    e2:54:23:11:62:c8:e9:ae:2d:f2:36:c4:98:88:90:
                    72:35:f1:47:d3:fb:17:d3:03:e2:ac:94:ff:1a:6b:
                    59:c4:f9:4d:bc:e7:17:ae:c8:e6:0c:0d:82:e6:20:
                    f5:3a:ff:85:22:3f:0d:d1:96:4a:3b:ea:02:52:77:
                    e0:99:ab:0c:c6:d2:2d:b5:de:89:26:51:06:98:54:
                    3f:f5:cc:c6:4a:ce:b4:5e:ea:46:d0:65:1a:4c:c1:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:91:03:5B:55:27:FA:84:D5:7C:3E:4A:DE:72:B8:D1:0B:53:95:FF
            X509v3 Authority Key Identifier:
                keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:82:fe:84:6a:ac:43:51:bc:ec:e7:38:a0:98:96:67:27:
         13:44:31:c1:9a:ea:94:58:86:67:fe:73:11:1b:45:be:05:aa:
         cc:75:2b:71:79:be:4f:6e:a4:97:f6:4c:b8:f9:94:81:f9:8b:
         d1:ec:32:99:32:ff:54:4a:f0:1b:46:80:2a:33:ae:b6:d3:5c:
         4b:00:70:49:4d:5b:72:10:b5:66:08:15:c9:90:70:ba:a3:ab:
         11:d4:c1:94:ba:c4:af:01:99:48:d9:81:ea:b2:6e:f8:98:5b:
         16:c4:ac:78:d3:a5:52:7e:79:97:c7:66:72:b9:df:18:a3:96:
         58:a7:3b:e8:35:78:bd:4d:83:81:8d:b0:8d:a6:60:e0:ae:53:
         44:06:57:6d:72:eb:df:42:6a:c8:04:20:55:7e:f4:00:5d:69:
         99:b8:53:e3:f4:e4:b1:be:57:b7:6a:59:11:a6:88:12:2e:b2:
         4c:4f:57:4b:c8:88:82:7b:20:cb:aa:8c:26:15:fb:1b:7a:02:
         ec:cc:8f:46:88:43:ba:bf:0f:1a:85:bc:ef:9b:7a:ff:f6:3d:
         29:5b:ca:1f:b8:5c:a5:a5:16:9e:db:74:75:1a:b2:ea:ca:e9:
         48:2a:c9:a7:46:4e:e6:e2:96:df:90:39:b2:f5:43:5f:35:6f:
         77:86:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:39 2026 by rpki-client