Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          obUD8wVmt1G2EXaR415VlGWUHtWvsL9Ql9fz+oCH2Jc=
Subject key identifier:   AA:D7:FE:02:D1:71:50:1F:6D:5C:B5:31:D9:03:6F:0F:79:03:86:15
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       019D27E02AD2AF519F48017F97FA92D03072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          181B
Signing time:             Thu 26 Mar 2026 02:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:35 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: gHKkScAJZAiPWC9/dslyax1UIFWUKHUZgAsXMRsGx8Q=)
                          2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:2a:d2:af:51:9f:48:01:7f:97:fa:92:d0:30:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Mar 26 02:01:35 2026 GMT
            Not After : Mar 27 02:01:35 2026 GMT
        Subject: CN=aad7fe02d171501f6d5cb531d9036f0f79038615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:ae:73:86:56:3d:a7:00:ae:36:7c:e9:3d:
                    e0:0a:d3:83:6d:10:93:ba:2d:da:03:80:a7:75:f2:
                    7f:c9:36:91:a2:2f:92:1f:2a:0d:f8:61:53:2c:fa:
                    c5:71:c5:e4:61:5a:8f:6c:4a:a0:28:ca:fb:fc:ec:
                    60:e6:6d:3e:e0:90:d7:05:a9:78:1e:18:bc:36:60:
                    80:14:f7:43:2b:d9:bd:93:d0:9c:5e:a2:b2:ad:51:
                    cb:89:67:b0:5e:43:e2:e4:58:69:01:66:fc:2c:cd:
                    21:0e:9d:c1:98:db:ae:48:e8:a9:87:dc:50:44:f0:
                    a9:68:33:c6:af:c9:a2:fe:f9:cc:99:fe:97:83:3e:
                    d1:79:02:b3:92:d4:c9:ea:65:04:1d:2b:58:bf:4b:
                    66:be:2a:43:53:cc:78:cc:43:9a:d2:83:7f:98:cc:
                    e4:ca:7c:57:2d:24:3a:af:84:3d:84:4b:32:4d:f7:
                    2f:9d:a7:dd:92:80:7a:73:9a:b3:42:9d:93:fb:00:
                    24:b9:98:6f:d0:5b:11:36:c5:33:9e:1b:2f:7e:d1:
                    4c:d5:10:1b:d8:96:00:a5:38:40:5c:f0:f0:74:98:
                    90:2a:55:ad:15:4d:2a:5a:b8:29:56:84:7c:d0:f1:
                    e5:9b:ca:77:89:dd:1c:66:b7:ac:5b:d1:74:ba:17:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:FE:02:D1:71:50:1F:6D:5C:B5:31:D9:03:6F:0F:79:03:86:15
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:51:5d:f0:47:45:ee:71:54:7c:80:c4:cd:a6:6d:82:16:
         14:a4:21:58:d4:1b:64:c8:a5:b5:1a:ef:60:a3:b1:11:31:50:
         e3:e1:6a:7f:b0:de:bf:75:34:4f:a7:3d:00:d1:b8:f3:b5:c5:
         b5:a0:05:db:de:93:5d:cb:d6:f6:08:c3:f6:84:5b:e5:02:7e:
         6f:db:3e:ca:c5:a9:fb:ee:b6:79:56:22:96:bc:6f:16:6d:85:
         52:1b:27:6d:8d:f6:e8:5d:84:40:6e:48:c4:c9:a6:c9:94:e1:
         ff:ed:41:81:fa:96:62:82:a9:8f:ac:8a:09:02:a4:b7:1b:49:
         f7:e4:af:3b:4c:eb:8a:85:8b:51:ac:9b:e8:d1:10:48:89:12:
         ec:2d:f9:ad:33:82:e6:cd:c5:84:c7:98:a0:77:d7:1c:02:77:
         54:a4:34:29:d4:2b:ff:dd:7e:93:d5:3d:f8:e0:20:c1:d9:13:
         61:54:b3:35:0f:0a:04:84:e4:03:cb:1c:99:72:58:66:b0:da:
         96:dd:50:9b:b9:7c:c9:ea:6d:5c:6c:82:9c:f9:0e:76:47:56:
         f6:3b:33:49:50:de:b3:19:14:dc:fa:ed:31:f5:7d:1d:21:43:
         f6:98:19:db:57:a1:e9:27:51:84:49:75:4b:f0:f2:20:e9:cd:
         73:7b:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:48 2026 by rpki-client