Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File:                     36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier:          Ii9Md9BOJBEijwvrgwk2RD+rFlujsMQvovqtgr3BDHE=
Subject key identifier:   A3:32:40:DF:31:E5:50:BC:8E:ED:5A:3D:74:47:52:7D:69:C3:81:B3
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       019E1CEBA482D7A769488C9A7FB219384F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number:          0FFB
Signing time:             Tue 12 May 2026 16:01:05 +0000
Manifest this update:     Tue 12 May 2026 16:01:05 +0000
Manifest next update:     Wed 13 May 2026 16:01:05 +0000
Files and hashes:         1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: +hz1JvZuZi7VSStgmLOqDQcK72SJXl1MGoBjNtEisgI=)
                          2: nNppMpelb0oU-Z8bXlu9JPmj-50.roa (hash: vaplA6p67yz2pjVfp5DzGuZj7gD852HpFF3uwF96n1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:a4:82:d7:a7:69:48:8c:9a:7f:b2:19:38:4f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: May 12 16:01:05 2026 GMT
            Not After : May 13 16:01:05 2026 GMT
        Subject: CN=a33240df31e550bc8eed5a3d7447527d69c381b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:18:ff:0b:ee:b4:8b:0d:61:9b:10:62:d4:
                    c1:b0:9b:49:0a:6b:39:31:33:f5:9e:5a:6c:1c:ec:
                    13:39:d5:c8:94:2a:f2:ad:a9:24:89:4f:95:2b:9b:
                    9f:b6:c3:04:a7:7c:17:f5:97:1c:18:b2:ba:8e:57:
                    c0:84:d8:31:10:71:9b:9d:3c:87:b5:6a:5f:fa:2e:
                    2f:d2:90:cd:a1:0d:9a:81:a4:93:41:ca:5d:f4:24:
                    ee:05:9f:16:94:d3:48:0f:da:1a:49:dd:a3:a2:71:
                    24:ce:24:7d:e4:03:f8:8a:0b:d5:3d:9f:8a:b1:23:
                    81:a8:a5:90:cd:5b:e4:2a:ac:d7:a5:61:cf:f4:b8:
                    9d:18:8e:b8:e0:35:4e:f6:fd:81:6a:9b:29:0b:d3:
                    af:ca:b1:50:5a:f5:9a:58:00:23:5d:b9:20:a4:8d:
                    2a:91:7f:56:81:d0:ba:26:38:76:a8:d4:0c:b1:ab:
                    2a:95:28:b0:f5:9e:80:71:72:75:82:f1:fb:98:ca:
                    39:fb:21:38:92:81:7e:9b:b1:40:6f:e5:03:9a:83:
                    77:55:0d:aa:c3:cf:41:b9:bc:5d:27:d3:17:71:08:
                    3f:5e:7e:02:a2:ae:cc:f6:8a:f2:f5:60:9b:3e:8d:
                    75:5d:62:ef:f1:a6:8a:f3:aa:fe:57:93:74:68:4c:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:32:40:DF:31:E5:50:BC:8E:ED:5A:3D:74:47:52:7D:69:C3:81:B3
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:ac:c6:c7:67:63:79:32:9b:93:14:a5:82:98:46:d2:0d:
         55:7e:a6:63:d8:87:1d:f8:fd:b5:ae:b6:d6:a6:b1:95:05:ee:
         d0:35:84:cf:69:18:a8:38:92:f1:aa:af:6a:9c:ba:b6:a2:eb:
         1d:01:cc:33:de:1f:04:49:60:80:4c:af:ea:df:0f:96:b5:58:
         0b:96:24:e0:1f:ef:04:20:56:b0:be:43:73:dd:23:cd:2a:88:
         59:b6:82:d8:dd:36:0e:a3:50:48:9c:16:80:ff:ee:c2:c3:35:
         7d:83:72:02:cd:2f:a5:a6:d1:8d:02:b7:30:b5:bd:1d:ae:ed:
         09:ed:3c:01:f8:c0:9b:f9:d0:e1:47:dc:a4:04:26:26:dd:f4:
         97:79:61:67:aa:9b:43:cc:87:5f:87:7e:d5:74:86:bc:91:f1:
         68:db:2d:cc:85:25:12:7b:66:98:d3:54:f1:9a:ff:89:4e:5b:
         2c:bb:1a:00:b1:04:90:dc:97:3e:85:b2:36:35:76:7b:b6:cc:
         80:e3:8e:09:55:98:42:f6:d1:df:11:80:cf:7e:bf:76:43:89:
         c8:c5:c5:ef:3a:c7:c8:83:4f:b9:4c:5f:18:1e:26:d3:89:87:
         0f:78:a1:ed:72:ec:fb:0c:6a:27:3b:b4:7e:e9:17:9c:e9:ce:
         04:6f:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:55 2026 by rpki-client