Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File:                     aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier:          vqek8ff4AWp6wXMCfvH1TD89ioyleFhbefEzTgRPnWg=
Subject key identifier:   A1:0E:5D:CB:AF:F8:00:32:FE:2A:62:A1:30:81:87:17:EC:51:DE:E2
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer:       /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial:       019D29CEB7C8077A76B347D58DF02686ACC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number:          0462
Signing time:             Thu 26 Mar 2026 11:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:46 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:46 +0000
Files and hashes:         1: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: yjf2E5zgNBICRhj4HdXLACfGYega+LD8Ok5j4se+3nY=)
                          2: zm22SYQDssPVyPUHKsbO-cFBVo8.roa (hash: e95IhW6weWHIteUAYq4kEbRjvuNFmWrzWP7IgPh5MEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:b7:c8:07:7a:76:b3:47:d5:8d:f0:26:86:ac:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
        Validity
            Not Before: Mar 26 11:01:46 2026 GMT
            Not After : Mar 27 11:01:46 2026 GMT
        Subject: CN=a10e5dcbaff80032fe2a62a130818717ec51dee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:8d:3a:a6:ad:ae:02:76:5e:7d:34:5d:5d:
                    f1:7c:ff:e3:ae:9a:84:0e:b2:01:09:9c:c3:75:c2:
                    11:d3:85:80:10:4e:44:6d:4b:f5:c6:88:45:96:2d:
                    84:87:ec:08:a4:58:11:eb:ee:9c:5f:ef:8c:98:d9:
                    19:e6:03:2d:1f:fb:d3:68:c4:91:2f:41:1a:9e:a6:
                    7f:73:71:c0:44:26:bb:1a:d4:57:43:cd:ac:de:af:
                    d7:22:52:19:48:b8:60:25:77:8b:00:8f:50:05:b8:
                    03:b8:9c:83:a6:e6:e0:39:ea:96:17:0e:2c:6e:6f:
                    07:47:98:10:99:a6:f2:ce:0d:98:f6:35:94:ef:5c:
                    fd:0e:82:bd:0a:3c:eb:2d:38:58:9f:21:a2:21:73:
                    76:5e:f3:6d:1c:f3:27:42:0a:dd:90:b8:93:14:82:
                    3e:c0:0f:be:2d:d7:53:19:ca:ac:a5:44:10:f4:c9:
                    e5:27:76:9c:a0:3c:98:b9:72:bc:1d:42:ed:07:0b:
                    e2:38:50:8d:fc:f5:48:04:28:a9:25:78:43:8d:f0:
                    8a:3e:d7:49:6c:15:a9:8c:74:f0:a6:a3:ae:33:76:
                    de:a8:b4:19:7e:12:d2:97:b5:f2:dd:8b:5f:21:f8:
                    ea:22:e0:76:c7:0f:df:ed:e8:a5:79:c4:2f:7c:0b:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0E:5D:CB:AF:F8:00:32:FE:2A:62:A1:30:81:87:17:EC:51:DE:E2
            X509v3 Authority Key Identifier:
                keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:a7:02:f1:e3:0b:ee:9c:cb:31:ef:26:73:bb:9e:b2:1e:
         b5:ec:d6:eb:ff:45:23:df:ea:ef:cc:09:49:ee:41:d0:21:9e:
         eb:c4:f4:90:fb:b6:d7:41:eb:e0:57:42:58:3c:86:a3:0b:d5:
         31:12:ba:5c:b0:44:9e:84:dd:8f:3b:93:31:18:41:e2:da:69:
         61:a1:ef:db:86:d7:bc:5b:f8:cc:c2:1a:5c:6a:51:72:d6:3e:
         01:13:0e:cf:e1:4a:05:b4:7e:48:36:ee:a5:1d:1c:54:04:8c:
         75:6b:f0:53:a9:85:f8:1f:ad:16:e7:f7:d1:87:dd:04:34:c2:
         bc:41:f8:88:b0:4f:83:c1:92:61:26:b3:1b:8a:90:83:01:0f:
         9a:43:d2:f8:a1:52:4b:26:0f:e3:33:ba:69:c0:64:88:44:58:
         2a:80:6b:6c:83:3a:ae:a5:e3:0d:86:55:d3:37:45:ad:16:b5:
         13:4c:d1:03:ac:f7:0c:53:00:4b:08:92:8c:c6:0c:0d:09:0f:
         76:ab:bc:de:5b:4a:bb:d8:db:22:64:45:91:c0:5a:c5:07:51:
         8e:a9:19:c9:22:56:70:c6:40:a9:62:b5:d1:bd:c2:68:96:12:
         b9:45:09:3f:42:76:73:eb:92:3f:dd:1a:86:49:f7:36:8a:58:
         f7:2e:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:25 2026 by rpki-client