Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
File:                     qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json)
Hash identifier:          UE4kNCgTmxUztUDzC1e0EBbxKjRUh6nSev+4Pn0sYvE=
Subject key identifier:   68:C0:68:D5:02:15:B6:2F:AA:59:FF:14:33:B5:78:E6:86:4A:18:B6
Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Certificate issuer:       /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Certificate serial:       019D2703F1EB515CCCAE5EEDEEBFCA7BE22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
Manifest number:          0CE4
Signing time:             Wed 25 Mar 2026 22:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:03 +0000
Files and hashes:         1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: iu3/njzxITNMTpLP29qp0JEId5nRPFwrTKpvhrWk1AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:f1:eb:51:5c:cc:ae:5e:ed:ee:bf:ca:7b:e2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
        Validity
            Not Before: Mar 25 22:01:03 2026 GMT
            Not After : Mar 26 22:01:03 2026 GMT
        Subject: CN=68c068d50215b62faa59ff1433b578e6864a18b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:33:9f:74:5d:83:57:29:15:8a:5c:2d:d5:
                    27:f6:7d:db:5b:15:0e:59:18:88:72:4e:16:e1:7b:
                    f8:40:77:91:ba:09:78:1a:49:df:18:8c:97:14:21:
                    28:00:d6:f5:f5:5b:2a:82:0e:65:19:7f:be:48:28:
                    87:a5:b5:10:32:44:07:cf:35:1a:72:56:c7:e5:96:
                    7a:83:c1:a6:d3:03:80:65:e4:0d:aa:2b:85:b8:79:
                    0a:bf:d6:f1:59:a6:14:45:3a:3e:92:44:aa:ad:16:
                    41:2d:ad:2d:ec:8f:80:a9:64:73:fe:58:0c:23:86:
                    83:49:ae:6b:90:a5:7e:78:97:40:a6:9c:36:46:15:
                    40:97:4b:96:0b:32:f0:be:ae:cb:de:22:c3:93:32:
                    54:52:8a:e9:fb:fe:c2:a8:14:94:f8:91:4a:9d:6f:
                    f6:90:9a:9b:9b:3b:d2:6c:e6:4f:35:fe:f1:69:57:
                    fa:a0:a3:2c:40:3c:3f:8d:5a:d2:60:b2:25:1e:a8:
                    37:ac:79:6d:33:0b:46:a3:f5:ab:05:46:3f:b0:90:
                    cf:ce:6f:5c:7d:0a:1e:d8:23:66:07:8a:87:70:0f:
                    8d:0f:3a:b6:f7:86:e3:8d:19:cb:42:0b:9c:a6:a7:
                    be:4d:ba:74:43:06:5f:1c:1b:1d:25:48:1f:dd:b3:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:68:D5:02:15:B6:2F:AA:59:FF:14:33:B5:78:E6:86:4A:18:B6
            X509v3 Authority Key Identifier:
                keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:11:86:1d:c8:b8:71:92:cc:64:23:42:9d:63:22:cd:87:0a:
         6b:90:c5:f6:bc:19:3d:f1:cd:db:f7:f2:25:f0:60:ad:37:b2:
         7f:6b:af:42:0b:0f:d8:25:da:0c:e7:3f:5c:a7:99:bc:7a:b6:
         a7:c2:6f:c8:f9:be:53:40:82:52:50:16:c4:66:bd:e6:2f:6f:
         fe:ea:9f:e6:e2:ea:1f:d9:e9:65:23:7f:c7:fa:ad:08:13:53:
         34:e5:12:3e:ed:de:90:07:b0:cf:6c:3f:30:98:16:3b:37:4f:
         43:d6:4c:58:47:23:2c:72:d3:04:4a:69:a6:fd:61:d0:15:61:
         46:83:86:46:e9:d1:2a:98:84:d6:1d:c5:8f:4c:a7:ba:d9:58:
         72:2e:94:e2:ab:88:1a:f3:cc:4f:f2:24:70:f1:6a:d9:cd:ee:
         b1:3a:9c:1a:54:4d:fe:2f:29:0d:0d:c0:9a:c8:c9:6e:42:e2:
         a9:ba:49:46:4a:b4:39:ab:83:e6:9b:40:8a:52:1a:5e:31:70:
         41:07:67:0e:06:d6:68:84:65:f2:74:f7:9f:98:3e:80:b2:36:
         43:d0:6e:a2:3d:72:ce:b4:4b:da:fe:18:0f:26:97:6c:41:2f:
         9c:75:45:82:d7:94:40:d1:09:17:fa:2e:5a:42:58:6d:13:5a:
         33:40:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:28:44 2026 by rpki-client