Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File:                     guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier:          sRl1u89p8egvX7NwpTGS813Npiz1K2UlxfxNn2hF1lc=
Subject key identifier:   42:C8:AE:85:A3:69:DA:4A:16:75:4A:E2:1F:AA:06:25:81:82:07:07
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer:       /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial:       019D27A8771C7324C3DBA3421AEB44FE8FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number:          11CF
Signing time:             Thu 26 Mar 2026 01:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:44 +0000
Files and hashes:         1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: fabYjtUvP1jYUb/KRp5EfhmZmd7TC1hOSqgqNQkqjnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:77:1c:73:24:c3:db:a3:42:1a:eb:44:fe:8f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
        Validity
            Not Before: Mar 26 01:00:44 2026 GMT
            Not After : Mar 27 01:00:44 2026 GMT
        Subject: CN=42c8ae85a369da4a16754ae21faa062581820707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:80:49:bf:0c:6b:af:8e:aa:32:b1:e2:a2:
                    6d:4e:13:02:f9:2f:cc:fc:26:f3:31:6d:09:00:70:
                    0e:d3:ae:6a:e9:c4:b0:8c:28:7a:60:6e:01:ef:cb:
                    af:ee:b9:aa:55:41:f9:d9:bb:6e:8f:c0:d7:01:49:
                    a5:d5:cd:b5:fb:31:fe:ef:dd:64:02:24:ef:f5:cf:
                    a7:4c:a2:04:40:ed:fc:cd:7c:b2:1d:6c:67:ec:13:
                    86:e9:69:1c:f0:4d:95:01:e0:b9:91:c7:31:a5:1c:
                    2d:e3:25:b3:cd:c1:34:7c:61:cc:dd:69:9d:9e:e8:
                    b5:9e:8d:d0:e1:60:94:46:49:1a:21:bd:80:9f:19:
                    dd:06:58:ba:04:43:17:a5:d7:de:68:79:b8:f7:7f:
                    35:57:78:7d:d6:04:46:c8:71:4a:92:09:3c:5a:f1:
                    1e:65:3b:27:ed:da:bc:75:d4:a2:7c:07:32:3f:b9:
                    87:25:8e:03:3b:14:21:05:e1:ed:78:ff:cf:2c:c9:
                    a4:73:8e:7b:b6:26:fb:3a:10:e8:51:57:a0:fd:df:
                    14:4a:a0:d2:46:77:94:01:8f:2d:89:e9:cc:df:aa:
                    d3:27:3d:ca:57:71:fe:96:d2:99:d6:9b:8c:32:75:
                    e2:66:0f:30:15:52:94:c4:89:5c:41:ad:c0:26:56:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C8:AE:85:A3:69:DA:4A:16:75:4A:E2:1F:AA:06:25:81:82:07:07
            X509v3 Authority Key Identifier:
                keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:64:d2:c6:01:df:3e:f0:df:41:9a:48:07:28:4f:70:0a:
         d8:b3:6d:48:ba:3c:57:ca:f1:21:81:bd:c1:43:76:28:f1:2f:
         cf:d7:33:16:a3:6b:93:98:ab:77:b1:19:b5:7b:d4:2c:9e:04:
         4c:97:84:d5:57:e6:f7:ea:ef:36:81:52:ac:94:93:2e:e3:c6:
         fb:2f:6e:97:7f:58:ac:38:de:43:e9:ea:4f:e7:f3:3d:61:3b:
         f5:0f:56:49:34:ee:91:6f:9f:34:79:32:48:a9:da:87:1d:f1:
         0c:4e:fc:6e:a3:01:f7:c8:9b:4e:eb:44:81:3f:5f:d3:cd:f2:
         8e:55:94:df:73:22:f1:79:04:c2:e0:29:35:17:0c:a5:60:17:
         ac:a4:64:3e:10:e0:7e:34:20:ef:be:ca:e8:40:60:cf:04:73:
         d2:e8:41:2e:03:6e:14:25:ae:9a:d8:ab:58:e0:3e:55:1e:d9:
         36:77:06:1d:2f:0c:58:10:02:47:bf:3b:1e:2a:52:3a:f5:a7:
         2c:47:47:02:24:c8:53:b7:45:22:f9:e1:46:6b:ed:71:8a:1e:
         4e:85:54:d2:12:d8:b9:c0:08:c2:96:1f:68:30:c0:a4:bf:25:
         a6:85:19:c1:59:d1:2f:4d:20:dc:db:d3:c0:44:93:a0:b6:9d:
         e0:31:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----