Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File:                     AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier:          Xjm1IJJSiFwH/rT/3ZQVBpPHQMKZLzJYMFk4L+Da9Hk=
Subject key identifier:   F9:1C:05:C6:94:3D:74:A9:54:91:EB:95:E6:1C:FF:4B:91:DD:97:20
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer:       /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial:       019D2703C1B258362484912550A6028ED6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number:          0805
Signing time:             Wed 25 Mar 2026 22:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:50 +0000
Files and hashes:         1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: dxnr8OtA02L3PQD+Yfnaea6xd/+j+h1nlZaFoUn8KX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c1:b2:58:36:24:84:91:25:50:a6:02:8e:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
        Validity
            Not Before: Mar 25 22:00:50 2026 GMT
            Not After : Mar 26 22:00:50 2026 GMT
        Subject: CN=f91c05c6943d74a95491eb95e61cff4b91dd9720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:f7:87:dc:b8:34:9b:75:09:4e:ff:43:30:
                    61:6f:a0:83:65:74:89:5f:74:b6:60:66:df:d0:87:
                    c4:c0:32:29:69:58:9d:e9:92:95:3f:53:7f:44:2e:
                    31:62:58:c9:f0:49:e7:51:aa:80:55:ea:a3:d5:51:
                    d3:3b:e9:ac:de:e2:cf:31:cb:05:08:08:c1:ac:a2:
                    d3:41:8d:5a:c6:9c:30:dd:00:c9:e7:13:3c:5c:1c:
                    a6:1f:cc:d0:da:10:06:f3:48:a6:f7:25:b8:b2:97:
                    bf:de:31:47:58:f7:cf:74:14:3c:f0:a3:14:7e:e4:
                    89:b3:42:d9:40:7e:ec:ed:d5:1c:13:14:b5:78:7e:
                    f6:11:f7:a5:c1:33:54:99:6a:cc:65:56:72:d7:9b:
                    ca:cd:9e:b0:a4:cf:bc:4a:ae:fc:94:90:3b:bb:19:
                    3b:71:20:07:55:9a:9e:80:f4:b4:1f:d0:75:6e:c0:
                    12:45:95:c3:74:60:14:f0:e0:a1:09:dc:51:cc:08:
                    2f:99:84:aa:ff:42:33:9b:c5:a5:f5:a8:5d:00:b1:
                    3a:dc:f7:4f:75:35:09:91:ab:af:0f:8b:74:7a:81:
                    2c:70:ae:28:80:74:cf:67:62:fd:b6:a7:06:f8:5c:
                    b0:61:03:db:47:ae:88:f9:09:13:de:b0:2c:20:42:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:05:C6:94:3D:74:A9:54:91:EB:95:E6:1C:FF:4B:91:DD:97:20
            X509v3 Authority Key Identifier:
                keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:ed:19:f2:20:9e:34:1c:63:40:4c:f1:2b:d0:f5:33:6a:
         28:23:73:be:5c:7b:e0:62:27:10:d7:01:fa:af:0d:e2:7d:71:
         14:96:56:39:7f:4b:bb:dc:ad:b5:c2:f3:35:54:ab:ec:a3:98:
         cd:f0:31:0e:ec:26:f2:ce:f5:b3:52:1a:22:19:77:e5:d0:6d:
         21:a6:93:0c:d2:2c:4b:7e:2a:8f:38:a0:27:d2:b0:81:c3:0e:
         af:c6:94:78:9e:36:f7:14:30:a2:00:1c:ae:38:57:e2:0f:32:
         45:9f:30:18:16:9a:e6:87:d6:cd:c5:37:21:09:71:a1:1b:88:
         ae:20:d3:f3:cb:79:da:63:bb:1f:cf:96:d8:22:27:a0:a6:4b:
         3f:7f:5c:9b:25:23:06:c3:e2:7c:c8:0d:83:2a:8e:b3:e3:b8:
         cf:65:6a:43:52:27:51:d1:6d:ac:f8:eb:94:30:2e:8c:a4:0c:
         1e:e1:0c:72:da:d0:4d:70:b9:d1:2a:06:12:ff:1b:d2:db:fa:
         62:8a:4a:8c:44:02:44:e1:dc:ed:96:8b:35:cc:ae:6a:d1:8a:
         67:97:ad:e5:f2:e3:12:0f:05:6b:b8:73:6e:7c:63:85:02:17:
         83:a9:6e:f3:1e:fd:d3:09:9e:2e:cb:60:95:80:18:bf:64:19:
         dc:22:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:45 2026 by rpki-client