Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          uP6HpjnVmLot5rayusrdN7NfWNePeh3iGjwy17d/2XA=
Subject key identifier:   BF:B6:83:A2:79:A4:B4:6E:09:F1:27:17:72:AB:4B:1E:AC:07:40:81
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019D265F5103BB86FBDC084C0213574BBC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          0D50
Signing time:             Wed 25 Mar 2026 19:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:13 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: 9Gud4hVQoU9qt2qeUab5Ejsls/65lndc/+fcf0qgAOw=)
                          2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:51:03:bb:86:fb:dc:08:4c:02:13:57:4b:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Mar 25 19:01:13 2026 GMT
            Not After : Mar 26 19:01:13 2026 GMT
        Subject: CN=bfb683a279a4b46e09f1271772ab4b1eac074081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:f2:d7:53:49:1f:89:ae:ff:2c:7f:e1:9c:
                    86:3b:ac:31:1c:d6:45:86:29:30:5e:58:de:a2:70:
                    97:41:37:a3:99:b9:27:e5:cf:4a:91:96:4b:5d:4f:
                    4d:b7:e0:83:ca:dc:92:16:72:cf:70:2c:99:49:e7:
                    d6:a7:9b:ac:5b:00:d2:19:6b:be:b2:f5:fe:27:c8:
                    7f:b3:7d:f5:7b:cf:f4:c6:1b:fe:ac:f8:1e:6c:33:
                    f8:43:25:18:cf:b7:da:80:58:27:83:e4:22:9d:28:
                    e3:41:ab:ad:13:e3:4e:80:8d:b5:b7:58:8e:d5:3d:
                    5b:e7:5f:1f:09:d5:bf:76:34:db:aa:5f:ea:fd:60:
                    6f:58:ad:a2:d4:65:a8:be:6a:72:a7:28:9d:3e:94:
                    a3:db:bc:3f:ca:c0:69:8b:df:0a:04:cf:25:db:d1:
                    91:68:75:10:3b:e1:70:55:c1:9e:75:dc:82:56:04:
                    30:7d:86:9d:95:23:28:17:84:d3:66:4b:77:30:c7:
                    67:d2:77:45:ba:6e:5a:f0:f5:0b:c9:2f:8d:23:ab:
                    de:dc:5d:2b:91:10:db:3b:99:c1:94:f9:96:9a:93:
                    f9:54:8c:73:ab:20:d6:ce:3c:1a:f0:bf:ce:43:02:
                    62:f3:ea:55:f6:b1:0e:20:14:79:31:54:9f:56:50:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:83:A2:79:A4:B4:6E:09:F1:27:17:72:AB:4B:1E:AC:07:40:81
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:64:2f:a1:fd:27:b7:fe:61:0c:df:83:b7:b6:cd:7e:1f:
         f4:11:f8:2f:ee:f5:40:11:52:ec:8c:df:aa:de:75:59:60:14:
         3a:62:77:1f:6a:b0:57:d2:e6:15:0c:4b:d8:57:a0:fa:32:bc:
         9c:2d:63:0d:23:a5:8d:1c:c4:ba:17:11:6b:4e:54:37:3b:da:
         f6:1b:92:13:86:60:bb:76:ac:c5:eb:3c:d4:13:5f:7a:68:04:
         ee:d3:b2:c2:13:b7:ee:af:1f:aa:2b:32:fe:cf:c0:1f:25:68:
         53:0a:82:7c:a5:06:d4:42:fb:ef:23:f9:f4:1d:6c:ac:16:dd:
         b3:4c:b6:4f:bf:b5:13:46:7d:12:27:1e:96:5b:1f:03:ca:ea:
         76:06:49:99:b3:88:4b:5c:a7:4c:f1:f7:02:0e:67:38:ab:7b:
         50:4b:c9:14:a7:2e:cd:5f:6c:ad:e1:f9:19:6f:18:6e:2e:97:
         8c:0a:5a:03:2b:89:26:3d:8d:f1:35:1a:dc:05:0a:74:f9:37:
         9c:78:51:2d:4c:be:36:c5:77:f9:7e:cd:88:44:37:03:fe:a3:
         8b:3f:35:82:2e:15:fc:2a:25:5e:bb:b1:d7:3b:9b:d2:b7:82:
         50:c7:0c:68:61:66:8a:11:60:5b:07:65:4d:e6:6c:8c:60:34:
         4d:55:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:36 2026 by rpki-client