Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
File:                     RF5JFjhV_sylL50Of079Lw8nGcU.mft (raw, json)
Hash identifier:          xg5W/BcoovqgxZtG4tPHkyFOuqOr6fBq+50p6dm9QkA=
Subject key identifier:   F0:52:06:00:8C:32:3E:71:34:82:04:8E:41:AD:E5:53:9F:5E:0C:25
Authority key identifier: 44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5
Certificate issuer:       /CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
Certificate serial:       019D270480D31C6C9D488EF33904A3ABCB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
Manifest number:          0FF5
Signing time:             Wed 25 Mar 2026 22:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:39 +0000
Files and hashes:         1: RF5JFjhV_sylL50Of079Lw8nGcU.crl (hash: I4n8wuaSTFkJeD0yoTZwyMlvpKkXZ8AyFvD2hniFnkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:80:d3:1c:6c:9d:48:8e:f3:39:04:a3:ab:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
        Validity
            Not Before: Mar 25 22:01:39 2026 GMT
            Not After : Mar 26 22:01:39 2026 GMT
        Subject: CN=f05206008c323e713482048e41ade5539f5e0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:0b:ba:be:5f:7f:b5:0c:75:d8:ef:5a:66:
                    de:16:c3:ce:e2:24:80:73:db:ab:c6:87:49:cf:0f:
                    76:1d:82:15:0f:dc:d4:a2:d6:e6:a9:9f:84:77:21:
                    be:d6:c1:1f:a7:87:2e:54:da:69:61:d5:be:8e:08:
                    17:a9:5a:ea:59:69:5d:59:85:6c:2e:ad:14:0c:c6:
                    aa:39:39:31:b2:07:69:91:19:93:63:b3:8d:6a:71:
                    66:3f:3f:f1:19:70:4a:e8:34:31:d6:33:8e:3e:26:
                    05:1a:b7:4c:f0:da:b7:f5:d5:8a:96:ee:24:db:c9:
                    8f:4c:9c:8a:7e:c4:3b:dd:f1:c1:e0:7e:b8:e9:ae:
                    c7:59:71:72:18:67:52:85:03:f1:af:2e:e2:c4:7f:
                    ce:06:08:89:56:fd:d3:0b:0b:58:2b:42:a8:4e:55:
                    a6:75:fb:c2:20:8a:f8:e8:eb:6f:ea:b2:3f:da:aa:
                    71:35:17:8d:c7:32:14:01:d8:89:56:d9:cd:2f:31:
                    b1:25:ca:b5:03:9b:9b:73:80:a6:64:60:3b:41:f4:
                    10:cc:29:54:03:e9:eb:2f:e5:e6:40:3b:4c:74:43:
                    ca:c5:ff:1e:3b:0c:68:f9:d1:d2:2f:37:12:1c:06:
                    d9:d7:3b:1b:d0:e2:a7:84:56:e0:10:aa:42:32:8f:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:06:00:8C:32:3E:71:34:82:04:8E:41:AD:E5:53:9F:5E:0C:25
            X509v3 Authority Key Identifier:
                keyid:44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:9e:66:09:d8:2a:08:ad:38:7e:b3:55:16:58:bc:de:27:82:
         ce:a8:0d:13:79:89:79:15:f0:7d:be:b4:cf:dc:ba:99:e6:bd:
         fc:f8:a3:2f:62:73:07:1a:19:0d:62:9c:5b:13:4b:60:53:5f:
         ed:98:69:f5:a7:3f:57:3c:b3:96:01:e6:8f:00:00:b0:e7:99:
         55:eb:c2:4b:d9:72:28:46:9c:ab:96:4c:ab:ad:6f:0c:c3:9d:
         bf:6e:c6:e4:78:23:74:89:50:14:54:99:35:ca:b5:91:38:0d:
         8d:71:16:8b:80:55:9b:f7:62:36:97:7b:46:63:1d:47:d7:6b:
         87:b3:c5:c7:f4:1d:7b:3c:13:b5:ab:f0:9b:3f:d6:ef:3a:a9:
         a6:7e:bc:bb:c5:1f:19:d5:de:33:26:1d:24:06:d1:78:cf:78:
         c8:e1:cf:92:52:01:29:17:0d:75:b9:96:34:1c:9f:75:c0:91:
         4d:95:61:13:cc:39:6d:3e:2f:59:a1:4f:0a:95:8a:ce:ff:0a:
         ee:21:8d:6d:c4:58:be:a4:28:ab:a3:7d:4d:cb:6c:69:e2:39:
         8c:60:27:47:9d:ae:2a:92:b1:74:cd:73:47:cb:25:71:82:f2:
         e7:8b:7d:b6:9f:f6:e1:d9:81:b6:f2:3b:c1:38:db:75:3e:de:
         2d:3f:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:49 2026 by rpki-client