Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File:                     E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier:          FQLpwWAdM7PtPwQ5USXp3W5cnRelANP+az2KtgUhoAA=
Subject key identifier:   38:95:5B:F1:50:CE:1B:8F:20:17:5E:AB:4C:74:AB:ED:ED:3C:A8:19
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer:       /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial:       019D26CD577B7C4CA85CAB01EF27C0D5D3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number:          0AFC
Signing time:             Wed 25 Mar 2026 21:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:24 +0000
Files and hashes:         1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: NFeF5ZOF6StqfldSY+zg1dp3yWx9jvp+XQRpP2ETK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:57:7b:7c:4c:a8:5c:ab:01:ef:27:c0:d5:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
        Validity
            Not Before: Mar 25 21:01:24 2026 GMT
            Not After : Mar 26 21:01:24 2026 GMT
        Subject: CN=38955bf150ce1b8f20175eab4c74abeded3ca819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:db:1d:ff:4f:15:7c:9e:b3:11:54:cf:a1:
                    3b:15:70:eb:b6:f0:7c:35:e8:0c:d0:86:5e:51:08:
                    df:52:1c:7b:6a:5a:de:2f:a8:60:87:7f:12:19:7a:
                    3e:93:9f:63:c7:39:1f:88:2c:80:d3:e8:03:c1:93:
                    af:42:a2:26:df:2a:11:12:4c:f3:af:d2:3a:4e:0f:
                    4f:51:62:1e:76:9c:7d:2d:e1:29:78:5e:7d:c4:32:
                    f3:0a:c4:cf:03:1c:07:2f:3f:55:e3:82:12:14:e2:
                    08:c6:52:08:3f:fb:db:13:9b:43:1b:19:db:43:7f:
                    c8:3f:b0:b2:64:8e:3e:9f:56:e0:c4:2d:bd:45:a0:
                    fe:72:65:4a:a2:ae:7c:bc:ae:66:72:9b:c4:aa:ad:
                    37:06:84:c3:7d:e0:cd:cb:46:ea:5e:8c:5e:0e:f8:
                    ed:81:16:23:a5:4c:2f:25:8a:bb:0f:f5:20:36:15:
                    84:0a:73:4b:9c:6d:db:45:09:b3:03:d0:96:2d:f9:
                    66:bc:b5:77:1c:81:fb:34:7e:40:a7:26:2c:bd:8b:
                    7d:d0:22:a5:c6:9f:b1:77:78:6d:bc:78:cc:92:b3:
                    a7:bb:6d:b9:36:5d:e0:2e:fe:86:dc:d1:be:c3:67:
                    f7:e4:0b:16:db:fb:89:de:d5:15:cb:a3:af:2f:34:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:5B:F1:50:CE:1B:8F:20:17:5E:AB:4C:74:AB:ED:ED:3C:A8:19
            X509v3 Authority Key Identifier:
                keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:c6:7f:e8:8a:6e:06:94:46:0d:36:79:52:e3:35:85:90:
         be:c7:cc:f7:93:e4:4b:76:a9:e9:35:97:da:1c:b8:34:23:75:
         7a:75:22:83:03:12:5c:42:18:9e:20:1e:9e:f6:fb:3f:49:45:
         1a:54:34:63:11:ba:3c:11:e8:1f:58:a2:07:b4:cb:52:70:27:
         55:16:c1:83:05:56:30:c4:9f:91:49:1c:77:73:17:02:f3:b9:
         b0:e3:47:51:32:e8:f9:32:7c:21:4f:10:b4:85:f6:77:1c:04:
         7a:02:35:f5:5b:ec:83:a4:1f:a9:2c:98:d1:87:89:43:0e:f4:
         24:32:0a:2b:26:79:e9:f4:40:76:c9:2b:52:6f:a9:76:70:f2:
         cc:7c:bf:22:94:44:59:e7:f4:30:8f:03:55:b7:22:40:fd:bd:
         00:94:d0:3a:c5:6d:c7:28:13:b5:fa:ae:d8:d4:e0:68:49:f8:
         52:ec:81:32:c1:5c:21:c4:b2:9b:4b:09:ce:b2:a4:23:38:5f:
         f4:e2:7d:b8:90:54:8d:d6:af:a5:21:52:1e:9b:22:a6:9b:fd:
         42:4b:e0:33:b0:82:81:c2:34:8e:94:70:dd:7e:a2:3d:d1:05:
         06:4a:94:1e:79:f2:05:24:c4:ae:24:bc:69:ed:cd:97:e3:8a:
         cb:6d:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:30 2026 by rpki-client