Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File:                     sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier:          ZP6Ow2bOZI3A2qmf7f3i+/OO6uFWgfIayYs0Dg0UeRw=
Subject key identifier:   81:D5:2B:0C:88:CC:A4:F1:3B:81:B9:7E:70:47:41:F1:6C:FD:FB:70
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer:       /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial:       019D2583C57F608E75F887889A20BA7BCC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number:          115E
Signing time:             Wed 25 Mar 2026 15:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:25 +0000
Files and hashes:         1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: Rh5EVZnUKEhGr5h0fMGAZsXLhgb3Rfqj4BJY+lDvsgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:c5:7f:60:8e:75:f8:87:88:9a:20:ba:7b:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
        Validity
            Not Before: Mar 25 15:01:25 2026 GMT
            Not After : Mar 26 15:01:25 2026 GMT
        Subject: CN=81d52b0c88cca4f13b81b97e704741f16cfdfb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:13:3b:7f:5d:12:05:4b:85:ab:2d:e9:b0:
                    76:e5:7e:f2:e9:35:ed:33:65:3d:84:cb:6e:a5:5b:
                    ac:c8:14:77:ba:6f:2d:d2:eb:9d:43:1e:66:4f:d3:
                    20:65:ad:73:82:1d:72:82:78:bc:26:0d:7b:f4:1d:
                    e5:45:1c:6c:96:a8:6f:bc:e8:40:55:a6:24:ef:5e:
                    bb:14:6e:ba:f6:de:ea:f2:2f:32:14:32:f3:98:d0:
                    ee:45:1e:ee:06:1a:63:80:94:12:46:58:80:4f:c1:
                    71:d8:37:52:b0:27:7e:8f:a8:0c:ab:58:76:b8:5b:
                    44:24:8b:79:26:85:5c:0d:3a:06:9f:06:4b:67:78:
                    34:91:b4:5f:eb:af:8f:3c:36:84:9f:0b:32:fd:7d:
                    f7:6c:dd:03:1b:58:6b:a3:c6:9d:fa:41:9b:10:eb:
                    06:15:1f:51:91:39:80:a8:7b:c3:d2:6d:e2:be:35:
                    59:fb:b4:e1:0a:09:1b:a1:a4:71:e4:98:39:ae:e8:
                    bd:f8:16:09:11:02:e6:da:37:12:e2:2e:76:73:9f:
                    ad:de:a6:a1:99:aa:fb:1d:3b:fb:ba:39:93:20:ef:
                    0a:56:da:a7:5a:d0:d4:d6:54:0a:f4:70:7b:78:7e:
                    2d:51:9c:13:5b:20:58:21:93:56:d1:c6:49:8a:e3:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:2B:0C:88:CC:A4:F1:3B:81:B9:7E:70:47:41:F1:6C:FD:FB:70
            X509v3 Authority Key Identifier:
                keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:a4:d5:56:31:32:da:54:22:e7:ff:c8:ba:77:c6:65:32:
         08:c0:c4:56:9e:e6:ad:42:fd:d8:d8:bd:25:87:9d:65:af:e5:
         c2:b3:ec:ee:53:7a:77:1d:5c:17:8e:3d:c8:37:f6:5c:df:0d:
         45:f9:d7:5c:f7:be:42:94:48:e6:c9:0f:9a:2a:17:87:21:c9:
         0f:e7:2d:a4:31:5f:b3:d8:cd:35:d8:8a:b4:f3:79:c2:1d:18:
         dd:31:2c:5b:66:e2:f2:05:11:e5:02:4e:95:62:8a:5f:78:8c:
         0b:e7:d8:e6:d7:da:56:70:5d:bd:66:a9:79:c5:2e:47:74:55:
         31:44:cc:7c:41:f0:62:8b:e8:73:65:8c:14:dd:e2:58:fb:ea:
         10:fe:49:49:a9:fc:51:fc:60:2d:50:dd:64:ea:6d:96:bb:b7:
         8a:18:50:da:10:d2:60:e7:41:ce:53:ba:9f:4a:5a:f6:cc:7e:
         b7:01:c9:4c:28:2c:8b:7d:a8:7e:fc:f1:01:52:78:92:a3:b4:
         fa:54:f0:00:40:0b:a0:3e:1f:85:60:3c:c4:30:a7:9c:5c:f8:
         2a:4f:22:af:d1:db:e7:92:5c:84:94:5d:07:91:46:81:8b:07:
         ed:45:2f:4d:53:2c:6a:42:8b:56:58:ec:c8:5f:32:c5:30:e5:
         7b:2e:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client