Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File:                     0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier:          /cxTkbOaCilfJBIpDtQXFTWyfDa6GvsSe9OjKED0kuE=
Subject key identifier:   91:42:7F:F2:BF:D5:FC:A1:04:5F:7D:96:86:6D:0F:55:EE:63:02:3B
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer:       /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial:       019D2A3BCCA0BB825F244C17BA982249505F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number:          0CE8
Signing time:             Thu 26 Mar 2026 13:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:54 +0000
Files and hashes:         1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: VJvrBH6pEI09FsSoUHYhXruwjfTpH0v0Afjv/uVIBss=)
                          2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:cc:a0:bb:82:5f:24:4c:17:ba:98:22:49:50:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
        Validity
            Not Before: Mar 26 13:00:54 2026 GMT
            Not After : Mar 27 13:00:54 2026 GMT
        Subject: CN=91427ff2bfd5fca1045f7d96866d0f55ee63023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:9b:55:02:61:9a:bf:54:3b:02:69:1c:ab:
                    bb:88:83:26:e0:1b:44:55:9e:de:7f:e1:7f:61:6a:
                    78:95:a9:11:6f:42:12:f4:3d:3a:58:f3:2d:97:38:
                    ca:7e:b7:a2:ed:e6:99:2c:3e:28:e2:62:43:40:5d:
                    97:ff:ba:5c:96:9f:9c:5a:4c:17:d6:6d:1c:65:50:
                    9d:36:38:60:3f:fc:c1:43:c3:9d:1d:8e:ac:c7:3a:
                    a9:0e:8d:91:32:7e:27:f7:12:7f:af:28:f2:67:55:
                    00:2c:af:d4:38:24:bf:68:d5:e5:09:e8:29:76:f0:
                    16:57:29:2a:06:ee:29:8f:76:e6:b3:66:09:96:7f:
                    00:70:74:70:1e:6b:3b:5d:a2:d0:2c:1c:45:8f:36:
                    0b:06:9a:2b:f2:38:59:52:8a:60:a1:41:6b:22:97:
                    72:62:6d:e3:b1:37:24:ed:94:ce:f5:d8:3f:59:c0:
                    d1:b4:55:2c:49:95:05:eb:ef:99:98:b3:ce:f7:d3:
                    66:08:8c:69:65:3b:53:7a:86:00:2a:89:6b:93:f8:
                    96:76:67:91:88:db:8b:12:fb:46:86:79:ed:b8:14:
                    d5:b6:30:0d:d2:26:fc:dd:ea:77:5d:cf:49:20:4f:
                    70:91:63:7e:f1:65:18:ef:f9:cc:50:8e:f9:a9:de:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:7F:F2:BF:D5:FC:A1:04:5F:7D:96:86:6D:0F:55:EE:63:02:3B
            X509v3 Authority Key Identifier:
                keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:9d:b2:6b:1b:42:97:2f:76:c8:07:cf:6e:fb:0d:65:af:
         db:8a:a6:5b:7f:f4:68:28:b3:b2:d7:76:2a:a2:a4:54:6a:ed:
         94:85:af:16:f3:6c:82:b2:38:01:b2:57:22:9f:ad:24:d8:a6:
         57:f8:72:73:a5:8e:10:18:c1:c9:29:2d:42:da:0d:b0:94:4e:
         9f:c3:34:27:6b:48:b2:ad:aa:ef:c5:2e:a6:9d:10:ea:a7:76:
         2e:b1:11:1a:3a:9c:ea:21:64:50:f3:f1:55:c4:9a:be:34:9b:
         22:0e:74:e3:ff:51:36:ba:41:2d:8c:2a:b3:4b:8d:0f:f4:b5:
         33:4d:5f:58:86:47:21:cc:ac:28:c0:9b:4a:9c:5e:92:c9:ba:
         e2:9f:6d:d0:13:07:e8:c1:d2:45:2e:1d:ce:52:16:fe:36:75:
         db:dc:f9:6d:45:e6:93:68:33:aa:3a:d9:7c:a0:30:ed:d4:1c:
         ef:63:ed:ba:dc:b2:4c:f8:c4:5f:32:07:4c:7a:02:aa:7d:73:
         23:8b:9b:e7:93:1a:12:81:81:ed:db:48:6c:62:10:c7:8d:34:
         6a:03:f7:c6:2b:0f:d1:5d:12:4d:b9:3c:b9:28:3e:8e:fc:e9:
         92:5d:f9:60:4a:61:ec:97:62:6b:0e:7c:70:1d:dd:7a:33:97:
         87:10:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:12 2026 by rpki-client