Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          ozEO6m4jTImRva/jLXmISfBCitls+wUjZxT8cjY2Rx8=
Subject key identifier:   DC:28:7E:7C:28:3D:1F:42:D8:34:F2:55:0F:91:6D:F4:D4:62:A3:77
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       019D25BA2D8E82210F2C5173AC277D2BE602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          0584
Signing time:             Wed 25 Mar 2026 16:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:51 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: MPUgaIkFzbBh5QjwTVK4NsDR20xUOT01ZNGVthyJUJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:2d:8e:82:21:0f:2c:51:73:ac:27:7d:2b:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Mar 25 16:00:51 2026 GMT
            Not After : Mar 26 16:00:51 2026 GMT
        Subject: CN=dc287e7c283d1f42d834f2550f916df4d462a377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:0f:6e:3a:e2:ef:85:2e:c7:75:63:4f:33:
                    99:36:63:9b:bf:8a:1a:74:f2:f6:0a:57:14:6b:20:
                    37:86:19:f3:11:da:60:a5:12:67:e8:70:1b:93:ad:
                    7d:d8:10:cc:53:8b:0f:cd:5e:af:73:16:33:52:72:
                    5e:0a:e0:14:84:65:5d:d5:59:c2:90:c1:f1:d4:3b:
                    be:d4:15:57:b6:f4:82:55:77:94:39:e3:b4:4e:54:
                    c6:cf:e3:d4:70:dd:4e:a9:d3:e3:bc:86:2a:7e:83:
                    92:cd:05:a9:50:c8:18:55:02:b2:b2:36:5f:91:b7:
                    df:da:ed:74:bf:ac:0d:32:cd:d2:df:60:01:a6:7c:
                    9d:73:e8:0d:17:ae:7e:76:3e:88:12:c9:ad:48:fa:
                    1b:48:d2:30:65:fc:c5:57:19:77:cc:38:10:05:a8:
                    b2:b2:0f:e9:52:1a:59:da:79:b6:2e:0c:2f:7a:aa:
                    5e:60:85:df:98:c5:b6:f5:79:c5:62:ed:48:a5:ce:
                    c6:cc:7a:4f:31:b2:14:c4:0e:e7:8a:fe:8a:1f:e9:
                    d8:6c:c0:ea:01:a1:0e:ba:21:f3:67:1f:f7:56:6d:
                    a0:a9:49:a9:3e:0d:d5:d7:1e:f1:6f:27:d4:1e:2c:
                    c1:e4:7a:f8:b7:2e:c7:ac:8e:7c:75:06:91:b3:90:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:28:7E:7C:28:3D:1F:42:D8:34:F2:55:0F:91:6D:F4:D4:62:A3:77
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:84:42:b2:7d:0c:24:05:6c:86:30:7f:e2:32:e8:88:de:
         ae:a2:76:97:b3:a0:f1:2d:f0:ab:ee:4a:fd:8d:48:5f:84:68:
         5c:72:35:af:6d:66:8b:70:c7:73:55:54:f4:eb:a8:23:e3:e0:
         e2:a5:61:0b:07:4d:01:b5:f5:fc:27:bf:f4:ee:a8:ab:f4:9b:
         d9:38:3d:51:9d:01:32:f1:6b:dc:76:05:8a:3c:fc:40:99:fd:
         97:d9:b7:77:6a:89:19:a0:d6:78:40:93:e0:82:16:4c:63:c6:
         2e:04:27:2d:6b:71:c0:be:06:ba:30:53:f2:e9:c5:e9:63:53:
         40:48:34:a6:bc:92:4f:df:ca:83:67:a8:b2:62:bb:d6:81:40:
         fe:92:f4:61:18:c6:47:a6:68:51:f5:38:0e:ff:de:65:6e:60:
         e0:a7:01:cc:64:fb:0c:4a:25:12:e9:ba:88:27:0e:e3:27:7c:
         d4:5a:c6:2f:eb:a4:65:cb:79:40:dd:c0:fc:7b:90:d6:b9:c3:
         19:5f:b0:43:7c:1d:ea:e3:31:d2:d9:16:79:89:81:0c:f7:a4:
         38:1d:c7:8b:63:75:93:86:9f:ef:31:61:7c:64:69:54:28:82:
         59:e5:d6:3a:8d:a2:ee:66:22:bf:30:e5:33:6c:52:1f:4b:76:
         49:03:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:20 2026 by rpki-client