Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          lLm0KiqkAs2KRYVMmbPIJ6RbSRQyn5l28+bB72BzF+M=
Subject key identifier:   20:6C:27:97:6A:3C:CD:1C:0B:AC:48:9D:60:92:38:5C:26:12:97:3F
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       019D27A8A989ACE9076C6760EA547B585916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          0953
Signing time:             Thu 26 Mar 2026 01:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:57 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: LL8OSwha4A847BnQCAhhzQPqJa6UNSaWS6tPIGbFWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:a9:89:ac:e9:07:6c:67:60:ea:54:7b:58:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Mar 26 01:00:57 2026 GMT
            Not After : Mar 27 01:00:57 2026 GMT
        Subject: CN=206c27976a3ccd1c0bac489d6092385c2612973f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:9a:89:1f:d0:f7:5a:c1:33:4a:ce:df:c0:
                    ba:3a:55:6d:93:dc:54:6f:e8:00:54:f9:71:6d:0e:
                    a3:e9:32:68:1f:da:33:74:0c:1a:cf:26:c7:76:ed:
                    2c:ca:fa:35:cf:d1:a7:c3:b9:af:82:ca:84:a2:17:
                    83:62:4d:e8:66:63:c3:68:70:b1:8f:06:63:e8:50:
                    3e:11:4b:be:47:8b:2e:40:9d:69:11:fb:2f:f8:6c:
                    6c:b7:98:46:2d:c9:ae:1e:31:da:e3:63:56:c2:f0:
                    c8:c2:57:be:34:d3:4a:b6:2e:b4:58:77:e9:7c:aa:
                    c5:13:02:bc:3f:3b:cb:00:0a:e6:a9:6a:bc:66:70:
                    6d:ed:d4:f1:44:8c:6d:d7:dd:42:48:87:60:86:05:
                    56:30:b2:88:25:b1:0f:c1:14:3b:c3:35:5d:91:25:
                    64:9f:20:f6:5f:27:1c:9d:a7:f8:61:f8:52:95:e9:
                    72:f8:ee:c1:d9:29:7c:7d:31:86:3b:cb:56:29:84:
                    bc:40:32:54:05:4d:8a:0e:0c:b1:4b:0e:89:53:4c:
                    6f:7f:00:79:c6:50:72:f1:29:3b:14:0d:56:a7:04:
                    fa:b2:16:53:d9:11:9c:10:db:46:c3:90:8a:a8:8c:
                    82:63:22:5b:3a:fb:79:0d:41:d0:e5:55:2f:88:61:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:27:97:6A:3C:CD:1C:0B:AC:48:9D:60:92:38:5C:26:12:97:3F
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:bd:48:a4:4c:03:4d:e5:c7:00:5b:08:f6:b5:ce:fd:20:
         57:01:48:5c:c4:25:e0:fe:23:f9:d3:25:81:58:80:fd:fe:57:
         f2:c3:29:f0:f7:bc:5a:b1:33:b5:dd:81:98:14:92:6d:ac:54:
         78:f9:58:54:ce:c6:6a:c4:04:0c:54:bd:08:84:64:c8:74:76:
         32:02:80:88:a0:0c:29:f7:d6:e5:20:cb:f8:e7:53:9b:09:71:
         6b:b8:23:0b:81:e2:0d:d9:49:e6:5d:03:e2:f0:95:c4:57:c2:
         e2:d8:c5:b2:9e:35:6d:e9:31:9c:0c:57:96:3a:29:c9:c9:e7:
         36:3f:2f:a3:23:2d:27:e3:14:3a:a8:7d:9e:c6:ae:c2:ab:55:
         85:6e:fc:6e:d4:06:d1:bc:d4:f1:5e:93:bf:8d:b4:a5:03:ea:
         cc:aa:91:a2:e4:b0:75:e5:7f:a7:82:b3:08:b2:67:86:8b:cb:
         a8:62:bc:83:e6:15:f7:36:ca:72:f2:e4:80:d9:a1:37:6d:61:
         fa:c0:f2:5f:38:38:fc:3c:7e:63:ee:d6:30:83:0b:bc:b6:59:
         cc:f0:25:ca:42:77:d6:0b:23:89:e2:0f:cc:2a:5c:aa:e0:ec:
         98:74:3b:8a:98:31:51:86:1e:42:fe:55:c7:26:dc:0f:6a:6d:
         3b:53:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:07 2026 by rpki-client