Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          WNj1Wghbt4noVZxH+lCPrObM9oyjh2ifu9nKz0Pkz4g=
Subject key identifier:   F8:EA:26:2D:A7:02:C1:7C:78:68:99:DF:7F:A2:FF:BF:EA:94:40:41
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       019D2628982D7A86AD330749E4AF467F0BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          0D8D
Signing time:             Wed 25 Mar 2026 18:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:27 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: dUWzu+jqe3fxxNlnPGd9rHCk++a750YEUyxmJ45pUcM=)
                          2: h_utoHeOpQBYse4tQQn19NAtDIA.roa (hash: wzWnekCDPzeEk5ruT1AKm5uXIAtEuf8wPeRY0OMMD+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:98:2d:7a:86:ad:33:07:49:e4:af:46:7f:0b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Mar 25 18:01:27 2026 GMT
            Not After : Mar 26 18:01:27 2026 GMT
        Subject: CN=f8ea262da702c17c786899df7fa2ffbfea944041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:f9:3f:ec:6e:9c:a7:5f:5f:e2:48:d1:17:
                    fe:55:fe:6a:4a:1f:fa:1c:d4:8b:c6:f7:f0:99:2a:
                    e3:db:c0:c2:8b:5e:b1:50:5a:0d:0f:7b:b0:76:cb:
                    4c:04:a9:b1:d2:32:7c:70:5c:37:7e:67:f5:7b:4b:
                    59:59:90:3c:07:ba:c8:b4:c9:ce:fd:5f:c0:df:d0:
                    33:92:cf:03:95:00:93:5f:9d:7b:f5:8c:e1:a4:11:
                    09:4f:63:ac:d5:17:18:89:0d:fc:55:95:fc:38:20:
                    79:00:bf:e7:18:38:1f:b7:71:f0:b5:ab:a1:bd:f0:
                    5e:f1:1d:75:f9:d4:b4:c0:b8:e6:2e:eb:7c:7a:47:
                    b3:75:4b:eb:98:fd:a2:ef:9d:10:00:f3:51:91:fa:
                    dc:78:bf:bd:ed:08:9e:57:af:b1:af:0c:6b:14:31:
                    0b:e5:2c:7f:b8:89:cc:7f:7c:f7:ab:e0:0c:6d:ff:
                    e1:df:8c:41:69:b5:fb:f7:a7:2c:58:b9:75:94:21:
                    80:da:a0:8a:1c:6d:30:79:e4:a9:d6:3f:4e:22:4f:
                    9e:69:c1:38:e4:3f:db:27:de:e0:c4:a4:22:8a:f0:
                    5b:f8:3b:c9:4d:bd:70:31:df:d2:b3:72:84:df:c5:
                    72:9c:a4:bd:9d:56:4b:ba:08:12:20:9c:f8:5d:4d:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:26:2D:A7:02:C1:7C:78:68:99:DF:7F:A2:FF:BF:EA:94:40:41
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:4a:d2:d2:e4:e4:ea:1b:9c:b1:7a:7f:68:8d:de:45:f4:
         bc:ba:95:05:a2:90:ba:8e:0f:20:48:49:95:dd:ad:ad:fa:3e:
         2b:f9:05:d1:b4:ad:67:aa:fc:cd:b1:36:fa:22:78:43:8d:a1:
         ae:3f:1c:d4:9d:6c:8b:b0:4e:f7:bf:db:8f:2a:b2:89:d4:d4:
         3b:ad:d0:9f:9e:89:72:21:5b:b2:a6:3c:df:39:ef:46:cf:24:
         00:c8:e4:ff:33:18:fd:41:83:70:95:63:73:1d:55:a1:60:96:
         60:72:1a:a8:9c:52:ae:ff:3c:83:b9:d9:e6:8a:43:66:8e:72:
         4d:d3:38:b7:7d:7c:9d:f0:b2:9f:eb:4a:4f:fc:8c:0f:44:1d:
         c0:af:98:b5:e9:ba:c7:7f:b6:d9:f8:21:42:e4:1e:76:4a:61:
         98:28:7f:9a:56:8e:6d:70:b7:e6:57:12:da:62:92:bf:f8:14:
         bc:3a:38:10:27:90:74:41:6f:04:c7:17:03:b8:d7:de:a0:6c:
         2a:3f:e9:80:0d:0d:ee:71:1e:68:7d:b7:61:2c:07:73:51:c7:
         46:4f:b2:41:62:f7:3b:2d:f9:d4:7c:4d:73:d7:09:6d:4e:7a:
         46:6d:7f:04:c8:67:9d:8d:11:77:53:e4:08:42:20:0d:a4:53:
         14:9f:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:22 2026 by rpki-client