Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File:                     Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier:          hNl6vp29n8uo/oDreTRUHdJUmErmGcqebn/oaPOPsVI=
Subject key identifier:   04:08:C1:48:25:46:C1:3C:2A:98:5D:5A:D3:80:80:FD:AC:A9:01:48
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer:       /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial:       019D284E65AB6B47229B64A503FDA7AD1262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number:          0C93
Signing time:             Thu 26 Mar 2026 04:01:59 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:59 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:59 +0000
Files and hashes:         1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: Ub2R+mgQONXbGG8YrpsR44eeqTQ9fFTOcOGlrPb3IgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:65:ab:6b:47:22:9b:64:a5:03:fd:a7:ad:12:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
        Validity
            Not Before: Mar 26 04:01:59 2026 GMT
            Not After : Mar 27 04:01:59 2026 GMT
        Subject: CN=0408c1482546c13c2a985d5ad38080fdaca90148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:86:39:3b:77:b9:f6:21:c7:75:09:d4:65:
                    ca:cf:7b:9d:f7:d6:e5:e5:6b:ac:a2:24:d4:6e:9b:
                    11:e2:63:89:90:2b:38:dd:be:2a:b6:fb:1b:99:6b:
                    8f:6c:63:ee:cf:e2:61:fa:cf:e1:a5:b2:5d:e4:1a:
                    a8:20:25:29:6f:27:3b:f5:01:97:a8:58:0a:0e:27:
                    34:f4:3a:51:79:b1:2d:60:a4:dd:49:95:72:21:f0:
                    55:2c:54:c1:ac:ac:dd:61:18:31:a4:26:ed:d5:55:
                    0a:7d:50:43:7f:c1:bf:85:ff:d7:f5:cf:28:9b:bb:
                    2b:97:b5:2f:8b:1a:08:b4:9b:ef:21:b8:a7:a1:a6:
                    b1:a1:86:d3:88:9b:76:0e:e5:c0:14:c7:51:ed:a8:
                    b7:49:c5:ac:2f:e9:4d:04:9c:92:cd:93:95:83:59:
                    c1:2d:28:5d:92:93:b7:26:90:cb:aa:12:eb:b1:1d:
                    58:10:50:29:b6:62:5b:8c:d8:86:b5:13:3c:1c:0d:
                    48:51:83:4b:77:56:d8:7f:5d:a0:6b:7d:24:7d:16:
                    0a:0f:d7:f8:0f:5b:91:b8:cf:c5:05:3e:0c:48:4c:
                    5f:be:4f:18:ed:cb:9c:68:38:3f:d2:35:f6:4c:58:
                    cd:89:96:04:84:c7:c0:63:3c:4b:19:36:27:dc:46:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:08:C1:48:25:46:C1:3C:2A:98:5D:5A:D3:80:80:FD:AC:A9:01:48
            X509v3 Authority Key Identifier:
                keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:00:e4:8f:ba:b6:12:f8:65:6a:93:b9:9c:68:0b:ab:39:
         40:79:aa:e2:f6:13:dc:52:28:47:b9:ed:75:7f:02:05:3b:f8:
         a7:3f:a1:5d:bc:0a:5b:6b:1c:db:dd:dc:b3:87:e2:fe:12:10:
         e8:27:1f:e0:49:9d:80:b6:ab:3e:0a:72:bf:6e:51:4f:e0:37:
         6f:b8:fc:94:fc:75:be:87:1e:78:7f:80:dc:96:ff:70:90:c9:
         6a:89:e9:51:af:9a:22:26:22:39:8c:2b:d4:a9:e0:54:c4:50:
         35:98:da:f3:e5:83:e9:e9:0d:89:1e:04:c4:da:7b:ba:9e:b0:
         ff:76:e5:24:38:13:ea:a9:29:3f:87:81:e3:23:f4:7a:50:41:
         45:c6:33:05:56:50:f4:97:20:a7:8d:d5:4e:64:5f:67:ec:d8:
         61:d5:bb:48:34:23:86:de:94:ea:50:8d:be:25:85:75:95:5a:
         f0:4a:3e:ca:0d:f9:0e:8f:e8:a1:7f:8c:30:a2:16:2f:0d:b2:
         2a:40:64:6a:7b:0f:af:82:c5:fe:53:5d:aa:70:d4:1f:8a:28:
         c7:28:ef:5e:41:67:3d:29:78:b8:b3:55:24:fe:23:f5:7c:20:
         04:d9:3b:d6:f2:25:bc:7f:6d:e2:83:77:25:82:31:5a:6b:40:
         8a:12:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:49 2026 by rpki-client