Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File:                     fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier:          ZqnhqTRwCTZWx1rZzHE9zbHP9MGAAUGN55Zav31b1tw=
Subject key identifier:   51:6B:69:D7:B8:E0:9F:9C:EB:CF:46:D2:22:A6:A3:44:24:AE:B8:4A
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer:       /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial:       019D27DFD64C1D7CC9311D2B1EA59B5326FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 02:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:13 +0000
Files and hashes:         1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: DoLE/dYebOJOnWD4dP6AMFrkjmQZT7xLFqU8KNv2dT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:d6:4c:1d:7c:c9:31:1d:2b:1e:a5:9b:53:26:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
        Validity
            Not Before: Mar 26 02:01:13 2026 GMT
            Not After : Mar 27 02:01:13 2026 GMT
        Subject: CN=516b69d7b8e09f9cebcf46d222a6a34424aeb84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:5c:91:0a:41:23:01:8c:e0:db:02:c5:bf:
                    34:91:e1:79:ee:13:c3:97:48:f3:15:c2:11:d2:4c:
                    5a:1e:2e:f1:a6:20:b4:72:55:78:3b:45:24:f0:13:
                    ed:5f:24:cc:19:43:d7:b0:78:0a:2f:7a:e7:3a:af:
                    89:f4:c6:32:90:6a:ec:bd:76:b3:1e:cb:40:9d:b0:
                    82:92:c0:7c:f2:ad:97:75:f5:72:92:cd:8d:fa:37:
                    96:e1:37:69:9b:4a:90:6f:e8:b8:7b:f1:6d:f4:6e:
                    d6:68:44:64:a5:31:aa:91:95:43:89:2a:b7:bc:15:
                    86:26:32:97:c9:ee:93:85:c4:16:60:47:4e:5d:16:
                    9f:2f:fe:ae:11:d5:29:60:8d:9d:92:88:60:8e:62:
                    96:e4:7b:c9:41:83:23:03:70:44:4b:e8:da:e0:de:
                    2a:b3:24:e9:9b:f4:e5:36:89:2f:15:97:ef:1c:ef:
                    ca:66:ab:3d:d8:0c:42:81:f7:c1:fb:87:ec:92:3f:
                    e7:64:48:0c:8c:7d:3a:6f:22:d6:63:36:45:2f:b6:
                    e8:d8:b3:8d:1d:b0:c9:9b:58:7a:9f:47:1c:b4:89:
                    3c:d1:65:8f:e0:de:9b:21:39:74:e6:a9:33:ee:7d:
                    d6:75:17:7d:60:97:05:7b:74:d7:7b:61:1b:d4:cc:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:69:D7:B8:E0:9F:9C:EB:CF:46:D2:22:A6:A3:44:24:AE:B8:4A
            X509v3 Authority Key Identifier:
                keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:9e:07:2c:a9:e1:84:c0:70:92:0e:c7:1a:6d:d3:7f:e2:
         29:e6:41:1e:30:92:13:f6:64:cd:52:4d:98:b8:2c:9a:85:77:
         6c:d8:6d:8c:84:68:ef:08:67:6e:4d:3b:75:be:80:c1:41:12:
         d7:d6:fa:db:0e:06:0c:71:14:70:f0:2b:88:a8:34:cd:13:55:
         14:ae:9e:54:4f:e5:0e:79:8a:c4:6f:81:18:fd:9b:e6:74:a8:
         4c:ea:92:71:96:b6:c2:46:10:f8:e4:bb:1e:78:d1:d1:41:3e:
         d4:c3:6b:8d:3c:75:e5:0a:50:1c:ab:6a:e0:7e:cd:d3:a4:82:
         1e:3e:74:15:bd:10:40:7b:7c:b8:f0:fd:43:fd:2a:68:f0:6a:
         8e:40:d0:fe:55:72:dd:a8:e2:b0:99:7d:10:71:b3:5d:24:06:
         2b:1e:c0:0f:7c:f0:92:91:72:58:23:e6:8f:dc:cd:fe:7b:01:
         80:12:45:b1:72:59:86:84:b9:94:f3:ee:03:29:6d:8f:04:8f:
         d4:3a:10:19:34:e7:2d:9b:5d:c5:56:12:97:90:b1:f5:07:20:
         5f:1b:19:ae:96:58:3a:cd:77:ac:3a:dd:bc:df:1a:2b:a0:97:
         4a:a8:13:96:0a:5a:de:58:e0:53:1d:8d:47:19:66:0d:fe:2e:
         c4:b5:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:18 2026 by rpki-client