Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File:                     buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier:          g9t+Vn/ss3m5lxYtZnVdGechjgqNxs93Y2BEGvW8DmQ=
Subject key identifier:   9A:83:33:5A:13:FA:95:84:58:63:C8:CD:78:E1:12:E9:9A:0E:71:B5
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer:       /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial:       019D2996DEF68FA7A3536964557CF8CADC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 10:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:46 +0000
Files and hashes:         1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: Ia4L0UTqD2fTH9OmJPQXA69kYzQ888X3Jz2YUbUJX/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:de:f6:8f:a7:a3:53:69:64:55:7c:f8:ca:dc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
        Validity
            Not Before: Mar 26 10:00:46 2026 GMT
            Not After : Mar 27 10:00:46 2026 GMT
        Subject: CN=9a83335a13fa95845863c8cd78e112e99a0e71b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:f8:a8:86:bf:28:34:15:79:d7:89:93:fc:
                    05:30:af:bd:d9:91:9d:39:5a:03:c9:55:f2:d4:de:
                    5c:04:e5:ba:bf:91:4e:66:eb:12:98:02:7f:7e:aa:
                    9b:c1:4d:0d:0d:6b:50:e4:86:19:26:33:a8:fb:75:
                    18:de:35:3c:80:a0:43:a5:5a:5f:33:37:08:2d:c2:
                    c0:55:bc:c0:89:44:21:89:4a:6a:7b:07:00:35:d9:
                    df:37:bd:9e:1f:04:95:ea:25:92:f2:ec:ce:0f:44:
                    8d:65:15:ee:b4:c1:dc:a6:0b:d3:61:b9:d6:3b:0e:
                    a4:dc:b9:01:85:a5:ea:03:e8:2e:cd:ca:db:60:0a:
                    56:a2:28:48:3e:76:10:cc:28:0d:67:e2:19:4b:7a:
                    26:34:3a:14:d6:31:fd:44:1f:64:7e:84:19:9a:fe:
                    38:e5:fe:68:99:45:f9:03:f6:3c:66:ff:d5:82:23:
                    dc:51:98:fd:ec:38:60:cf:c6:23:30:55:89:5e:27:
                    76:87:82:a5:49:b1:6d:7c:5d:28:1c:cd:a4:eb:bd:
                    9d:9e:b6:72:ba:a4:0c:63:6f:2f:8e:81:ee:9f:53:
                    77:5f:fe:12:cc:01:1b:23:45:9f:c8:1a:a2:6d:55:
                    eb:40:0d:ae:32:68:de:63:6d:b9:10:5b:39:08:44:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:83:33:5A:13:FA:95:84:58:63:C8:CD:78:E1:12:E9:9A:0E:71:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:66:58:00:85:bd:dc:a1:38:c7:13:e8:ff:8f:b3:29:9f:6a:
         1d:c0:57:de:be:8d:86:66:5a:38:e9:80:e5:61:1c:91:70:cc:
         54:a7:8d:3f:0a:e8:46:52:3e:06:18:d0:4c:c9:10:c3:c6:dc:
         7d:3d:4a:1e:38:5a:41:fc:95:6d:bf:d6:4d:60:a9:e0:51:a0:
         2a:29:f7:cf:aa:52:9b:d9:07:06:cc:b1:eb:f9:0c:58:f2:d7:
         f9:de:60:b0:9c:c6:1c:c9:1f:3f:ae:c9:04:e0:55:b3:67:0d:
         87:3f:9e:29:86:35:52:79:e3:9d:3e:02:48:8f:64:57:64:f4:
         14:40:82:57:0c:8a:59:81:22:e7:4a:13:77:43:c3:38:fc:99:
         10:d0:d4:2e:f3:c8:a8:60:67:da:f6:34:2f:83:71:65:f7:00:
         98:d0:0f:47:5e:72:a5:f9:f2:5c:98:72:3c:b3:37:73:5c:cf:
         35:6a:ee:c3:d4:4d:3a:47:86:3e:c3:10:58:d5:ab:d6:d9:21:
         ab:4d:19:5f:8e:c3:6e:96:3a:bd:a3:7c:e8:3f:35:52:3f:d2:
         ff:4b:81:ef:6f:22:55:1c:af:ea:83:67:fa:c1:6b:4d:56:db:
         b2:c9:54:f5:3c:71:ce:18:e7:df:85:72:9b:b5:d7:9b:d1:d2:
         73:32:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:36 2026 by rpki-client