Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          218zvsRtsiQeYsoEINHRG4CDVo1ktveC4yE9uJqqJ/s=
Subject key identifier:   A0:70:36:EE:B7:13:FF:9D:74:55:79:0D:14:B4:58:FB:7C:23:2F:7D
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       019D3307FC0567CDAEF982857B82B6A1F282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          188A
Signing time:             Sat 28 Mar 2026 06:00:54 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:54 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:54 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: +J+8ANdvGzhnWmZv03PX3kyMnDObNLivtoJuK4mfU4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:fc:05:67:cd:ae:f9:82:85:7b:82:b6:a1:f2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Mar 28 06:00:54 2026 GMT
            Not After : Mar 29 06:00:54 2026 GMT
        Subject: CN=a07036eeb713ff9d7455790d14b458fb7c232f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:4e:19:67:93:14:af:f3:5e:ea:3f:46:14:
                    56:0a:09:ec:5b:71:b2:17:5a:b3:91:82:f2:51:23:
                    97:14:cb:44:cd:75:25:f0:c0:76:17:b0:0f:44:8c:
                    42:e2:4a:6c:ab:01:fb:e8:74:d7:95:79:1a:4a:c9:
                    93:5e:cd:d9:eb:d2:2a:45:7b:18:fb:e8:64:09:c7:
                    d5:a4:f7:49:1c:3e:16:10:9b:30:4d:41:f4:ee:c9:
                    57:5d:fa:90:30:41:ad:d0:13:43:b5:26:1c:1f:37:
                    60:7d:02:9f:c4:17:f0:f7:27:80:93:91:64:66:48:
                    c2:8a:1a:d9:13:ca:93:77:0e:91:13:00:9a:4c:d9:
                    e2:ef:c0:0a:74:8d:4b:d6:bb:b3:0d:09:f0:9a:9b:
                    38:3b:9a:1f:85:0d:cc:22:fb:10:3c:da:c1:fd:0f:
                    dd:31:dd:f5:80:e8:a8:8e:3c:64:64:bb:55:56:f9:
                    4a:13:97:ad:3d:8a:46:00:c4:36:66:2d:e4:67:58:
                    57:3e:ff:0b:93:09:81:cf:94:99:76:49:08:4d:bd:
                    99:3c:2f:ed:21:59:0d:f2:d5:2a:b3:86:cc:28:73:
                    a2:81:b5:fb:3e:d9:8e:f3:86:ef:57:13:91:bb:ac:
                    b4:58:fc:4b:d8:26:f3:32:68:e6:8f:22:cb:dc:c9:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:36:EE:B7:13:FF:9D:74:55:79:0D:14:B4:58:FB:7C:23:2F:7D
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:54:8d:39:5b:9e:1c:e0:17:5b:3d:b7:a3:99:7c:47:06:
         e1:97:09:40:52:98:db:7d:f6:0e:9f:7a:64:75:81:14:d5:72:
         c5:de:40:23:fd:a0:29:af:dc:ac:b9:8b:2f:c1:d0:65:c6:70:
         4c:bd:75:0d:7e:30:f6:27:ca:30:96:39:99:2b:00:6e:cd:23:
         0d:ea:02:5b:f0:3a:72:d3:14:52:14:fd:77:b1:7a:27:bc:c9:
         c0:75:7c:70:80:5f:75:a8:e4:d3:df:81:3f:82:7f:80:c8:ce:
         74:91:1f:83:f0:15:9d:91:c4:8f:98:3d:bd:09:24:82:96:69:
         a4:e1:9b:8d:d1:ef:c6:3a:30:43:ba:a1:ab:c2:1b:99:e2:74:
         d2:7e:e1:63:46:64:7c:e4:8e:d1:8e:20:72:5c:81:14:6d:b4:
         13:17:15:53:04:17:80:01:15:82:cf:54:95:f0:8e:f5:e7:fe:
         d2:53:88:79:ad:b8:da:47:56:97:ac:03:8f:b0:02:f5:97:fd:
         0c:ef:40:8f:00:ec:f1:ea:ec:04:f0:09:68:ce:ef:89:03:cf:
         c7:f9:88:43:7b:b2:b4:d1:99:40:95:08:dd:63:20:e3:f3:60:
         4d:c8:6c:b8:4e:bc:3e:8a:ab:c7:5d:0f:4e:6b:6e:e0:f0:41:
         4d:eb:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:19 2026 by rpki-client