Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File:                     me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier:          LJtMRp1hLsYTT+e4N0M1fk7mmKJm2x99SxphMSjARBw=
Subject key identifier:   88:6B:B6:52:2B:A6:2F:79:D5:09:FC:A6:49:DC:23:46:B6:87:64:35
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer:       /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial:       019D284E1180EC3A96501620F96C60C88BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 04:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:37 +0000
Files and hashes:         1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: PAH6TAa7vRxYTpJ+ogVitvslzsDAkqCOLdWHY6KcIDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:11:80:ec:3a:96:50:16:20:f9:6c:60:c8:8b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
        Validity
            Not Before: Mar 26 04:01:37 2026 GMT
            Not After : Mar 27 04:01:37 2026 GMT
        Subject: CN=886bb6522ba62f79d509fca649dc2346b6876435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:93:e5:08:db:f1:37:68:98:f1:b4:de:00:
                    cd:e5:fa:4b:95:38:c2:37:5f:e0:6f:16:cc:8f:b0:
                    81:ff:50:9e:05:42:c9:1f:a8:0c:e9:70:b1:37:c2:
                    3d:ba:bb:29:d2:21:c7:d6:05:c1:00:34:70:9b:19:
                    ec:17:32:c2:d6:c4:22:4d:e1:5f:3a:19:34:66:b0:
                    32:c1:0e:55:2c:90:8c:c7:d0:8a:42:55:3d:5c:11:
                    41:74:78:60:34:9b:10:80:a3:c7:ef:73:84:0b:f7:
                    eb:4d:1b:f6:6c:8b:52:25:a8:a1:3e:0b:4c:f7:72:
                    b7:87:8b:47:d7:03:73:3e:f0:ae:24:e2:70:42:3a:
                    a9:05:b0:46:f5:1d:b0:67:d0:6d:f5:af:fb:7f:f7:
                    05:84:c2:82:fa:12:e9:de:8a:d6:87:0b:00:83:f1:
                    32:c8:df:2d:a9:55:d1:b4:c0:9e:7c:40:bc:b2:ac:
                    b3:ea:89:4a:d3:45:c9:3c:d6:06:f0:c0:f1:1e:b6:
                    0b:f8:11:5d:f4:22:24:5b:52:ff:47:7a:c4:ed:34:
                    41:be:84:cb:f0:10:a1:77:38:d0:c7:a6:06:fb:6f:
                    9c:db:87:49:ae:db:9f:1c:5b:bf:59:29:1b:05:99:
                    6d:79:0c:ed:a7:56:be:3a:b7:d4:3e:c3:cf:59:95:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6B:B6:52:2B:A6:2F:79:D5:09:FC:A6:49:DC:23:46:B6:87:64:35
            X509v3 Authority Key Identifier:
                keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:2a:8a:3b:e2:50:e5:61:95:e4:5a:96:ef:1e:9e:44:d4:
         11:ff:04:4f:b8:1d:54:fb:44:ac:df:1f:78:f4:a7:a6:02:cf:
         6d:b9:e0:ef:eb:b3:d0:88:f5:24:77:09:bd:d9:fd:9a:20:0a:
         3f:4a:9a:1a:d2:09:24:a9:36:83:b7:16:ef:29:19:9b:b2:9a:
         bc:21:86:13:37:3e:78:9e:99:28:79:b1:bf:29:c2:b5:56:09:
         2e:fd:e1:25:03:54:00:99:2c:f2:55:28:20:76:44:07:8e:56:
         e3:f2:44:a5:4f:31:58:c2:a7:1d:3e:c8:96:aa:1d:90:da:c9:
         e8:b8:e8:8d:2c:01:a9:f2:44:06:b4:51:ac:ab:f2:d6:94:8e:
         bf:2e:e1:ed:33:73:87:42:6a:4d:2b:79:16:6c:9b:9f:5e:e7:
         cd:9b:15:92:bc:64:5f:94:db:99:25:16:18:1c:42:95:79:f5:
         86:5e:cb:46:81:de:9e:67:fc:f0:cf:4a:85:65:8e:cd:c4:d2:
         be:42:70:e1:8f:9f:98:69:8f:17:5b:bc:77:a5:37:ef:a8:12:
         20:64:5f:5f:bc:32:1d:66:33:fe:c1:73:23:37:a2:dd:63:a6:
         23:36:20:91:f7:f6:eb:57:5d:73:b3:76:75:2d:18:47:9d:e4:
         3c:cd:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:19 2026 by rpki-client