Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File:                     Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier:          ukESiNxoUTVVV+pi1EEaCpwZxKFSiGWamvVz0l8S0pg=
Subject key identifier:   5D:4C:CC:75:F3:29:75:68:32:4C:2B:DD:F3:6D:2A:B8:51:69:7D:C0
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer:       /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial:       019D2703AA5399E7BEF93E046C0B4089468F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number:          17A5
Signing time:             Wed 25 Mar 2026 22:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:44 +0000
Files and hashes:         1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: V96LBhPamSYFZtgyqEwZn0gVAAA8jgUmoLRgnQ6bH3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:aa:53:99:e7:be:f9:3e:04:6c:0b:40:89:46:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
        Validity
            Not Before: Mar 25 22:00:44 2026 GMT
            Not After : Mar 26 22:00:44 2026 GMT
        Subject: CN=5d4ccc75f3297568324c2bddf36d2ab851697dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f2:83:8d:61:73:9c:9f:52:aa:74:fd:24:1d:
                    26:e1:99:58:d4:72:50:fc:87:a2:a1:a1:b7:2a:e3:
                    62:b4:2c:c4:d9:7f:ea:32:d6:a8:db:b3:37:98:4c:
                    a7:85:29:53:5b:41:b8:7b:c9:99:bb:c1:51:e0:0f:
                    48:f1:a9:d6:41:c9:99:33:87:a2:c0:2b:d4:a9:75:
                    df:4e:ca:5f:c0:77:65:a0:31:4f:5a:70:3f:d5:63:
                    e8:e0:15:23:d0:c0:48:31:5f:0d:31:63:f9:b0:b2:
                    5c:a2:04:17:e0:06:87:f6:23:3a:88:68:cb:1d:c0:
                    17:26:47:e5:6d:e4:4e:39:ae:5e:a9:29:c5:b5:8d:
                    d9:88:3a:ea:af:53:74:cd:7a:07:b7:84:67:bf:e7:
                    e6:e0:46:55:fb:81:80:0c:84:da:e2:c7:c4:e3:17:
                    60:27:32:d0:90:7b:27:37:46:f5:31:f5:a2:a2:2e:
                    1e:a1:05:9d:12:9d:09:31:1a:df:88:9a:6f:0a:43:
                    69:8a:5d:72:51:9e:9b:8c:e0:51:e2:bc:dd:31:e3:
                    a6:65:74:a0:1b:a3:93:01:07:dc:0f:21:c7:45:d3:
                    09:15:d6:48:cd:15:d1:44:16:8a:be:28:96:da:1e:
                    9e:c3:d5:db:9e:cb:f1:7a:2d:cd:b9:42:95:53:6c:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4C:CC:75:F3:29:75:68:32:4C:2B:DD:F3:6D:2A:B8:51:69:7D:C0
            X509v3 Authority Key Identifier:
                keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:06:81:4f:a3:a6:07:ac:3c:54:94:5f:ee:bf:db:5b:3e:
         0f:5d:ab:32:ba:1e:f9:6d:bc:28:4d:85:40:72:03:41:d6:ca:
         6b:4a:96:6c:8a:1e:71:bd:79:9e:97:a9:73:76:07:45:dc:95:
         ae:5a:28:0a:4f:3d:8e:78:a0:46:e5:41:ef:cf:38:8e:be:d8:
         cf:57:aa:67:aa:ae:fb:27:7f:c1:8f:71:08:c6:94:f7:df:83:
         0e:9b:6c:27:b0:10:4f:24:86:13:b4:49:18:74:47:0f:03:c7:
         90:fd:b5:72:22:db:eb:73:88:ed:bc:6d:c6:f4:82:db:7f:7a:
         85:57:ee:5e:f8:6d:cd:ba:cf:3c:33:1e:a8:6e:1f:6a:e9:3b:
         7b:4c:9f:f1:af:63:83:45:40:fe:d6:8e:c2:76:6f:1b:a8:dd:
         f5:81:f2:20:1d:ca:31:18:bb:37:45:71:5c:b2:f8:d6:a9:50:
         96:cc:eb:76:52:05:5e:fc:f2:79:29:74:9f:e5:fa:a6:35:99:
         4e:5f:5e:98:f9:73:b7:c2:28:9a:97:c1:2d:37:3b:a1:5f:88:
         49:96:94:18:1f:91:e2:94:ae:99:5c:ed:83:79:20:c0:9e:a8:
         cf:54:74:1c:8e:f0:88:39:8b:91:63:67:23:18:2b:97:16:08:
         8f:a7:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:22 2026 by rpki-client