Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File:                     debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier:          6KHiAPNiuBdCLHH3B7KaXXRfaDYr+uXAhIID2W18o6k=
Subject key identifier:   E8:C1:98:B7:0A:E4:64:A9:E3:91:34:A5:3F:00:FF:91:69:BA:4F:0E
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer:       /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial:       019D2704C06B16C601A985A113F1E6A07B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 22:01:55 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:55 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:55 +0000
Files and hashes:         1: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: gySzfJldX99b0KaPMDDgRGpXSPbR2lGN9RPkd8Wmv9o=)
                          2: pJSIOlE7etgRPHOV7NUiL4iDbe8.roa (hash: V6DbZKls0vS9eC0PuoKfqVERIziSa7fU4KNDwTwFtQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c0:6b:16:c6:01:a9:85:a1:13:f1:e6:a0:7b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
        Validity
            Not Before: Mar 25 22:01:55 2026 GMT
            Not After : Mar 26 22:01:55 2026 GMT
        Subject: CN=e8c198b70ae464a9e39134a53f00ff9169ba4f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:95:e3:41:57:b4:df:5a:84:9d:e1:ae:8d:
                    6d:50:e0:6c:f4:1e:80:60:40:74:70:71:38:20:2b:
                    7e:9e:43:7a:cf:ad:81:7a:6c:49:17:f3:56:99:1f:
                    7c:88:9f:9c:40:7b:e1:b2:d8:5e:47:18:de:3c:f3:
                    fd:ec:6d:97:6d:44:3c:46:ad:23:a6:b8:05:88:43:
                    2e:c2:0d:3a:fb:43:7f:8d:ce:a4:3f:c6:e8:c7:40:
                    8e:4e:b9:8f:6c:8d:e1:cd:55:63:7c:70:79:05:aa:
                    c6:16:93:62:11:19:e4:6f:22:c0:ce:fb:0d:4d:4a:
                    54:5b:52:cd:2f:95:fc:1f:b2:4c:27:3b:fc:4e:24:
                    b2:a1:9c:b3:ee:3d:34:24:56:b1:3c:1d:f2:a0:38:
                    ba:3d:76:04:86:ca:d7:7d:28:48:f6:5a:fd:dd:ea:
                    39:9a:af:57:7d:8f:b3:98:eb:e1:e5:a9:03:35:cd:
                    96:3b:49:af:27:3b:64:71:db:9b:04:04:60:d0:8d:
                    93:9a:c0:1e:2c:5c:d2:50:a6:b0:b3:b4:05:31:e1:
                    46:ff:18:ec:f2:18:a3:97:10:70:f9:3a:c2:4a:0a:
                    56:9c:bf:a1:c1:d8:12:7a:5e:93:97:0e:17:fa:64:
                    93:45:38:a3:39:37:e8:49:38:a2:2e:2d:e3:4f:14:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:98:B7:0A:E4:64:A9:E3:91:34:A5:3F:00:FF:91:69:BA:4F:0E
            X509v3 Authority Key Identifier:
                keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7e:5f:0d:51:a4:95:df:d9:80:77:47:14:e3:d2:97:68:5d:
         34:30:ec:d0:d0:43:0e:71:16:78:33:a7:fb:5f:ce:1b:79:02:
         10:d7:8c:25:1f:9e:95:70:c8:03:a5:07:a5:cf:1d:cd:c1:81:
         e4:8c:47:cd:f9:92:9d:4f:cb:ff:97:0a:06:af:f2:4d:5c:30:
         8e:a5:d6:a2:a1:f5:ae:85:2b:62:3f:79:b5:77:d8:28:1c:2a:
         f9:68:69:56:ad:b7:76:81:2c:95:b2:71:bb:2f:ae:b2:d9:39:
         cc:1c:a2:d7:c3:10:76:33:79:8e:78:01:ea:da:5c:52:00:00:
         4e:f6:81:38:e0:ab:6e:67:cb:59:ea:7c:09:0a:df:bc:44:36:
         80:6e:4c:ee:89:39:77:0b:a5:17:97:14:f6:e1:77:c0:17:7f:
         e8:fd:a1:b5:c6:57:91:da:cb:d4:f1:f4:2c:88:25:bc:43:69:
         9d:4b:e7:d5:b5:3b:26:49:87:b1:98:4c:a1:2b:ae:c1:90:a6:
         72:07:94:bc:66:4a:43:90:33:ea:0d:69:6a:bd:ba:e4:c6:26:
         56:68:e0:c7:6a:ae:c3:68:15:90:26:ad:c3:86:70:ad:45:ec:
         c9:8a:29:61:6b:ba:09:09:f0:bc:12:77:35:a8:76:21:d0:0c:
         2a:1f:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:25 2026 by rpki-client