Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File:                     c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier:          wiFYGllJE1bZz7kIBTmSuBpI/ugVlZKsIp0FzetgX2Q=
Subject key identifier:   D9:4D:19:CF:C2:55:4E:12:B0:4B:9F:E9:74:60:78:DC:EE:C4:D8:6E
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer:       /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial:       019D270396A669197DD709757AFDE9C9541A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:39 +0000
Files and hashes:         1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: 7UJxNQgOZvU4SkrVm1hKJAfN7HAywh+VSV9m2EW/31Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:96:a6:69:19:7d:d7:09:75:7a:fd:e9:c9:54:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
        Validity
            Not Before: Mar 25 22:00:39 2026 GMT
            Not After : Mar 26 22:00:39 2026 GMT
        Subject: CN=d94d19cfc2554e12b04b9fe9746078dceec4d86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:7e:0e:55:a1:fb:43:6a:fc:e1:f9:8f:b8:
                    c6:cd:ac:3f:31:15:53:ca:98:85:53:21:ed:b3:72:
                    5e:7a:25:f6:3e:23:78:35:cd:cf:c6:bd:40:b6:00:
                    2b:03:cf:cf:e2:e3:8c:16:61:88:8a:14:f4:aa:b4:
                    19:c4:7c:2f:69:23:43:3a:dc:64:c2:bb:be:23:b1:
                    e0:42:5e:91:fb:b9:2b:66:d6:e3:69:43:65:56:51:
                    3e:73:b6:ab:5c:8b:57:9f:29:98:c7:97:c7:9a:2b:
                    10:99:d8:b2:4b:34:02:38:94:93:a0:39:11:56:67:
                    7e:96:ff:c2:f8:91:c3:6e:57:f3:a3:02:0d:68:dd:
                    e3:8d:e6:c6:5d:63:0f:95:ae:09:d6:cf:c3:91:9e:
                    86:4b:82:06:a7:56:5e:5b:e9:e1:fd:9b:6d:f2:2c:
                    58:5a:53:56:ed:1a:c9:23:ac:b2:82:33:a0:9a:30:
                    9d:23:31:81:17:71:49:08:99:2b:63:0c:2d:ba:ce:
                    14:0d:7e:5e:f7:cd:a2:03:16:d4:a6:87:fa:03:89:
                    36:18:7c:b2:aa:bd:7a:f8:70:ec:24:1e:7e:08:0f:
                    bd:ef:f2:20:ac:80:2c:9e:c1:ff:97:2b:01:e8:8b:
                    53:01:c3:db:b1:40:24:1d:99:b9:cd:18:41:f2:6a:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:19:CF:C2:55:4E:12:B0:4B:9F:E9:74:60:78:DC:EE:C4:D8:6E
            X509v3 Authority Key Identifier:
                keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:9d:2e:65:cb:fc:6c:5c:a3:5c:e3:a3:ea:01:dc:9e:cf:
         b1:6a:12:18:57:54:58:25:68:02:25:6b:d7:53:15:ae:84:9f:
         df:f9:27:df:2b:3e:11:df:42:b4:9a:fd:b7:c1:72:f9:c1:0a:
         a7:8d:17:17:56:cd:31:cc:e7:da:fb:1a:30:08:19:03:6b:2b:
         29:45:2a:5f:14:d7:42:48:46:f8:ff:4d:40:77:b0:e8:99:97:
         5e:38:84:21:46:3c:88:4e:ce:4c:0c:c8:95:fe:c9:91:17:77:
         9f:d0:fa:e1:93:64:7c:19:e7:c9:39:20:02:2c:f6:14:25:4b:
         cf:53:3f:3d:10:9c:e8:90:c8:b9:13:41:e8:f4:a2:d8:5d:6d:
         1b:fd:7b:15:50:18:8a:fd:3c:dc:1c:ff:00:f6:24:63:13:13:
         b0:bd:38:85:76:1b:24:54:1e:c3:67:44:7d:b9:1b:4b:cd:49:
         dd:03:bb:fb:b9:eb:df:11:af:68:4e:cb:49:4d:77:01:82:63:
         e9:fa:ca:e9:f4:95:42:d1:ce:a4:e1:d0:d8:9d:43:81:74:87:
         f5:79:8d:52:11:ed:49:88:0d:81:3a:39:4c:07:04:9f:58:a6:
         48:e7:80:36:39:63:7d:21:e1:1d:15:d0:b3:ea:ec:f2:db:46:
         58:b8:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:42 2026 by rpki-client