Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File:                     mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier:          pd9FUtldRaDBKsQ4Kh1LOgwQQfTaV5PxpoANDv74v/Q=
Subject key identifier:   F4:78:B5:71:F5:37:F9:64:9F:44:2F:17:D1:84:A9:91:73:B1:87:7F
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer:       /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial:       019D2704B3540BF1750749F3C6DC2373F06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number:          05C5
Signing time:             Wed 25 Mar 2026 22:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:52 +0000
Files and hashes:         1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: WX4A3pCw8cAhjbtoFMAJtRLwj+xZVnNR6R6u9wlFP1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:b3:54:0b:f1:75:07:49:f3:c6:dc:23:73:f0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
        Validity
            Not Before: Mar 25 22:01:52 2026 GMT
            Not After : Mar 26 22:01:52 2026 GMT
        Subject: CN=f478b571f537f9649f442f17d184a99173b1877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:ac:18:5b:dc:ed:fc:41:ea:c2:90:27:48:
                    c7:33:1d:1e:c5:b9:68:7c:1c:94:da:30:66:a6:eb:
                    53:af:ca:f2:56:c5:cf:2d:ab:b2:a9:31:57:9f:ac:
                    d9:a4:4f:ed:62:a5:18:5d:39:ce:cf:10:ba:88:5f:
                    69:d7:68:5a:15:a5:a9:e8:b0:79:1c:8f:0d:88:fc:
                    73:f7:45:46:30:40:fd:75:a0:d8:dd:da:64:43:f3:
                    19:2e:8a:6b:5b:65:0e:53:ef:db:46:76:14:bc:d8:
                    e5:c1:1c:da:e1:a9:a0:a5:22:a2:80:76:ef:be:fa:
                    25:3f:b7:c1:71:c5:9d:a2:4b:c3:ae:36:14:d2:e4:
                    cd:45:97:0e:25:fc:3b:f8:b7:a4:aa:95:44:9a:8f:
                    2b:f7:03:51:56:3d:14:8b:e3:97:b3:fa:be:49:a1:
                    8f:a7:5e:ea:c2:ac:85:f1:22:4e:f6:f2:80:84:d8:
                    4f:76:da:91:b0:0c:75:08:04:13:7f:d2:6a:87:29:
                    3a:1c:14:34:42:77:f2:74:1b:6a:11:2b:cf:2a:7e:
                    77:32:d4:a6:5c:5b:a5:98:7b:6b:52:08:a8:f5:c3:
                    50:07:89:7c:e9:5e:b7:46:35:40:6c:4c:4d:9b:19:
                    61:45:95:94:60:1c:2e:f8:16:35:36:a2:e6:91:a5:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:B5:71:F5:37:F9:64:9F:44:2F:17:D1:84:A9:91:73:B1:87:7F
            X509v3 Authority Key Identifier:
                keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:43:06:18:cc:f6:eb:7a:16:c9:57:85:66:07:b9:3c:45:
         5e:05:e7:29:c9:21:40:53:f3:13:29:41:9a:eb:40:8c:a6:c9:
         14:ef:4d:fc:43:a2:57:e7:04:4f:81:9d:bc:f6:9b:23:ef:6a:
         93:76:87:13:9a:be:45:d2:80:f0:81:aa:47:50:39:45:ec:be:
         fe:8a:33:c5:35:a4:35:20:ea:12:33:a6:df:0e:3f:78:fb:f7:
         40:1d:a5:8e:8b:13:49:6e:aa:3c:39:82:a8:83:db:ca:49:4a:
         03:c9:87:1b:b7:29:e0:be:a3:45:a5:bc:ed:e0:c9:8f:fd:03:
         be:0d:65:bc:3f:f6:89:a9:fc:68:22:36:99:54:0b:9f:74:55:
         96:92:d7:5e:ae:d7:73:8f:6f:b1:93:94:f1:85:3e:57:20:51:
         06:2f:b5:13:bd:e7:d6:df:8a:79:63:56:ca:75:20:aa:22:a2:
         37:ca:31:9f:0c:a7:c1:ab:81:f5:08:f9:f3:bd:b1:50:0c:b9:
         0e:cc:db:1b:57:8e:2e:82:fe:16:ab:82:d1:71:38:c4:25:cd:
         e8:90:92:6f:a4:a3:07:38:a1:e1:95:61:f8:e7:25:01:a4:c6:
         f5:ff:56:f2:31:a3:e0:c8:7a:21:63:e1:63:61:26:54:d8:50:
         d0:a7:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----