Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File:                     gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier:          MKE8wcAYZQFsYJBk73f/Hmfpfhw+yve1MfRjqozqJMs=
Subject key identifier:   18:A3:FD:5D:05:E5:37:37:C1:84:44:36:F4:13:A7:89:02:37:8A:B4
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer:       /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial:       019D27A8E9CC7550B042B09C3E144B06A8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number:          079D
Signing time:             Thu 26 Mar 2026 01:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:14 +0000
Files and hashes:         1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: 996ZjQFWoIy3iNWnChufk9Ou00h5KyfYVX/MRRbSlZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e9:cc:75:50:b0:42:b0:9c:3e:14:4b:06:a8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
        Validity
            Not Before: Mar 26 01:01:14 2026 GMT
            Not After : Mar 27 01:01:14 2026 GMT
        Subject: CN=18a3fd5d05e53737c1844436f413a78902378ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:7d:e3:5f:68:6a:36:90:f1:2e:da:75:9b:
                    cf:d6:b1:a1:54:31:e0:a9:2a:4f:83:4e:d4:ca:c8:
                    e9:50:2e:f9:1c:b4:2e:ae:80:67:44:8d:af:f4:a7:
                    73:06:f9:4b:33:d0:4f:55:4a:fb:f3:8c:08:56:6a:
                    15:a2:9f:19:7d:e0:03:70:39:f7:1c:e3:c5:b9:6a:
                    f5:45:4e:1a:c2:31:3a:54:33:64:60:56:a2:31:7f:
                    dd:1b:e1:a5:2e:26:65:da:81:64:49:66:0f:86:23:
                    46:a1:5f:8d:bb:3b:aa:8d:f7:55:70:c9:9d:c6:4d:
                    51:da:0f:33:80:d0:a4:55:39:a8:60:72:61:41:3b:
                    08:b0:32:09:2b:6e:1d:fb:27:1f:59:95:8a:fd:89:
                    82:d8:4b:f3:1f:a3:8d:21:c0:92:b8:df:7d:11:95:
                    93:40:44:c3:7d:8a:2c:10:ca:dc:ca:b7:4c:35:cc:
                    52:85:8d:bc:56:29:3f:c2:68:fe:66:53:f7:2b:14:
                    e7:af:51:2a:86:4f:ca:83:dc:e3:8e:c3:c7:fd:8b:
                    eb:18:4b:37:f2:e2:0c:1f:19:08:5c:5d:1c:12:9f:
                    fe:a6:6c:eb:27:46:da:f4:d5:73:c7:63:85:c5:c6:
                    77:e9:44:55:13:40:c7:98:f8:df:e5:2e:c6:a3:30:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:FD:5D:05:E5:37:37:C1:84:44:36:F4:13:A7:89:02:37:8A:B4
            X509v3 Authority Key Identifier:
                keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:d2:8e:1a:d0:22:f9:4e:7d:ba:78:c0:d9:38:54:2e:24:
         a3:94:d5:56:98:72:4f:e8:83:d2:27:16:d9:eb:26:cc:42:aa:
         dc:9e:81:0a:99:66:c1:ca:5d:1b:ea:bf:fb:dd:8e:05:94:fc:
         42:a3:6e:d9:88:78:50:7d:32:8a:58:20:9e:07:6f:e9:26:4c:
         9a:c6:cf:99:da:ce:ee:9c:18:9e:3f:59:8a:2f:82:a6:60:e3:
         09:6c:92:e3:a2:2e:fe:70:be:f7:ed:85:b8:5c:0b:b1:5b:4a:
         21:a4:1b:41:9f:ab:2d:04:9f:a7:30:83:b1:7f:7c:3d:01:69:
         a8:e5:7d:4d:d6:65:f2:ea:9d:fa:f7:86:5a:6a:86:d4:79:40:
         2e:9f:ec:d2:76:07:71:e5:48:79:ed:d7:b7:53:36:14:7c:69:
         7b:9a:09:aa:a8:c1:44:2a:49:6d:68:69:76:10:f6:df:84:a3:
         a9:f6:cd:22:3c:59:e8:31:ba:53:ef:8a:81:0a:20:39:80:b6:
         da:6b:df:f2:01:94:b9:88:5a:94:46:dd:a4:13:8c:fc:d8:95:
         f6:8a:f3:31:8a:b2:40:c7:66:29:3c:46:4a:b4:2e:19:f7:ac:
         8f:05:d7:88:de:4a:d9:4b:b2:d0:28:b0:08:46:82:df:1d:5b:
         df:53:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:31 2026 by rpki-client