Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
File:                     ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft (raw, json)
Hash identifier:          VfcVLbAnR+fiNLCttAETyJLQTPexb12PW5l58fdYotM=
Subject key identifier:   D7:6A:97:7D:76:72:A4:AF:97:A6:FF:18:E4:AB:DB:91:30:2F:4A:1D
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Certificate issuer:       /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial:       019D2628065C727515323DA69902C2F9B2CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 18:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:50 +0000
Files and hashes:         1: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl (hash: gS6KzSGZayVh1bI8QN01+g39NZdqtfCpTeVAbDDfYk4=)
                          2: UpKRjChH7E6XgVm5AEhCKw9xUVI.asa (hash: itl4/7Ulh3ulcNHslb/7i9V8CSJ2eDVPnXoQqeOhRyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:06:5c:72:75:15:32:3d:a6:99:02:c2:f9:b2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
        Validity
            Not Before: Mar 25 18:00:50 2026 GMT
            Not After : Mar 26 18:00:50 2026 GMT
        Subject: CN=d76a977d7672a4af97a6ff18e4abdb91302f4a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:6b:b4:24:f7:9a:30:4f:4e:77:76:de:c5:
                    57:ce:f5:c2:ca:f6:57:24:13:aa:7f:be:bf:75:4d:
                    50:cc:18:24:dc:a4:53:ba:b2:ee:5f:69:4e:97:e4:
                    03:2a:87:64:a5:76:27:f2:bf:d7:1c:e2:9b:b3:91:
                    b6:21:b2:14:7d:e5:61:7b:b4:c7:6e:da:52:58:a7:
                    70:a0:dd:3f:8c:74:a6:60:1c:d8:70:51:b5:9f:d4:
                    05:b3:c6:a8:6f:72:bd:af:fd:48:95:76:bb:8c:94:
                    ac:60:06:57:7b:90:d6:43:cb:61:b1:c4:55:5c:eb:
                    fa:0f:04:ae:ee:ec:9b:2e:62:7f:7d:0a:be:23:75:
                    f2:cb:84:30:8b:fd:0e:73:03:2b:38:4c:fd:27:c0:
                    08:a8:73:e6:81:8c:57:4a:a6:22:eb:87:aa:40:df:
                    fe:26:45:cb:24:16:28:c9:7f:e5:1b:2a:da:38:c4:
                    00:72:c4:a2:41:d6:89:f6:2c:fb:e6:65:d1:3c:d4:
                    46:fc:70:dc:74:eb:75:cf:b5:27:1e:8f:0d:28:b3:
                    6a:82:d3:a3:7d:28:2a:3a:c8:a8:0c:04:e5:52:60:
                    10:23:d5:97:32:1b:66:05:a3:ed:4c:05:98:88:4a:
                    fa:02:07:e3:9c:68:de:63:d8:a5:65:96:05:97:0e:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:97:7D:76:72:A4:AF:97:A6:FF:18:E4:AB:DB:91:30:2F:4A:1D
            X509v3 Authority Key Identifier:
                keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:86:da:75:68:9e:77:45:95:c9:66:c3:46:b0:34:f3:5d:28:
         a7:0d:d6:9f:a3:54:4e:82:f3:43:b8:4a:45:3a:23:35:2d:aa:
         d7:ba:12:8d:c1:e1:a4:7d:e5:2a:a2:31:d7:c6:5e:23:0e:cf:
         cd:cb:61:73:3c:76:4f:8c:91:c7:28:b6:22:fe:67:fd:af:49:
         e4:50:2f:77:36:67:8d:40:28:40:81:d0:6f:91:be:41:29:01:
         9d:bd:fb:03:54:00:dd:d0:b2:59:e0:a3:9c:9d:b9:0f:69:89:
         08:45:8d:95:fc:82:0c:30:5f:6b:04:84:67:3b:d1:b0:e3:f9:
         43:59:46:24:6a:c6:90:63:dc:8b:34:fb:eb:cc:29:61:13:68:
         2c:cd:92:4e:a0:70:91:02:12:8b:19:13:19:ff:d0:42:d9:09:
         c4:c2:82:26:da:96:84:29:26:b3:77:8e:d1:3c:e8:69:b6:04:
         2e:b3:88:57:ca:6c:b9:17:ab:7e:46:11:c0:a5:8c:ac:be:96:
         cc:cc:c6:d0:1b:ed:a5:f8:8a:43:e2:3e:ed:27:f8:fb:1f:74:
         65:e4:05:77:1f:1c:ca:a2:a4:d2:dc:ec:da:7e:a8:f6:71:34:
         1c:dc:5d:ac:48:43:7b:7c:41:8c:4f:b9:25:ef:fc:5c:24:9e:
         b2:f4:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:54 2026 by rpki-client