Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File:                     3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier:          361vrTczI1Y67cCmHL3cARKyleft8tPol/pHEf1aGRw=
Subject key identifier:   14:96:BA:FD:92:8E:90:47:51:EB:E1:3D:76:F5:D3:08:E8:D9:36:0B
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer:       /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial:       019D2A04A92705F26F67EFE65D50F38DA73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number:          110F
Signing time:             Thu 26 Mar 2026 12:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:41 +0000
Files and hashes:         1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: YS5rhuF3ouEFRhtCSKL7ogHnTiEPt2BjubkQf0g3dsE=)
                          2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:a9:27:05:f2:6f:67:ef:e6:5d:50:f3:8d:a7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
        Validity
            Not Before: Mar 26 12:00:41 2026 GMT
            Not After : Mar 27 12:00:41 2026 GMT
        Subject: CN=1496bafd928e904751ebe13d76f5d308e8d9360b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:fe:2a:26:46:8d:d0:a0:aa:73:ab:19:27:
                    a6:6d:79:63:04:04:e7:7a:87:ac:2b:5b:28:37:f3:
                    09:df:fd:eb:61:3f:76:a5:46:fe:61:1a:16:d4:86:
                    ba:25:9a:1a:d1:22:4e:00:ed:0d:50:7a:05:e6:25:
                    cc:78:d8:25:8d:1d:53:ff:d0:f0:d1:94:ba:f2:1c:
                    d6:4b:1f:34:ab:c5:9b:0c:b2:6c:84:a5:63:84:de:
                    b3:a1:d5:7e:2b:42:4e:ce:70:94:32:ed:47:e6:49:
                    d8:1b:a2:47:fd:3d:86:6c:d6:61:0b:4d:e3:13:c5:
                    41:34:11:9f:6b:24:75:48:24:fe:23:1e:3d:9d:1a:
                    cf:f2:11:92:26:0e:6b:f7:f1:90:ad:ef:9f:ec:e8:
                    dd:23:bd:f6:79:1a:c3:c9:c4:2b:d3:90:14:a8:23:
                    96:3d:b0:8f:50:8c:d2:37:bd:85:46:73:94:3b:98:
                    e6:9c:86:fe:c3:23:1d:91:8f:60:cb:44:d0:5c:17:
                    67:7a:3d:1c:eb:c0:64:73:28:3e:50:e8:ad:b0:a0:
                    ed:4f:5d:b6:1b:7e:43:19:6f:24:94:49:a6:06:4a:
                    c4:c2:41:b2:57:d0:48:c0:54:6f:aa:dd:f2:a7:42:
                    82:c1:9d:8b:8d:77:e2:5c:45:d7:32:1f:33:95:27:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:96:BA:FD:92:8E:90:47:51:EB:E1:3D:76:F5:D3:08:E8:D9:36:0B
            X509v3 Authority Key Identifier:
                keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:4e:ab:b0:b9:27:97:0d:c2:28:af:54:9c:bf:84:93:21:
         ef:c7:c9:3a:b6:6b:a0:92:ee:2a:d5:bc:a4:40:1e:d0:25:8b:
         c5:99:9e:52:6e:18:78:0a:c5:64:ea:33:8d:48:0e:91:67:34:
         ba:0d:4e:ea:32:55:04:5e:35:a8:81:bd:7d:a5:f9:52:37:cc:
         63:de:03:cf:91:36:4f:08:25:5c:14:1a:1e:51:12:e9:21:ad:
         2f:fa:f7:65:74:5b:37:4a:9a:b9:47:82:10:11:d2:70:34:47:
         6a:2b:da:ff:0c:d5:a5:23:9e:70:25:e1:cf:b0:e0:18:a8:9e:
         27:a8:9b:c2:12:b5:68:9c:84:2b:6e:5c:da:77:65:b7:61:6c:
         1f:c4:9c:23:33:16:d9:d4:49:ac:50:4c:65:ab:36:fe:00:a1:
         81:5c:6f:fb:9e:b5:8e:c8:bd:75:d5:f8:0d:b1:9d:99:1f:b0:
         88:49:69:e2:3a:9f:e5:53:16:26:5f:56:65:f1:45:0a:9d:d4:
         58:18:70:df:09:d8:ad:37:14:3c:53:50:b6:7d:af:e9:52:01:
         1c:0d:92:a8:ff:de:42:f7:35:3a:e6:a4:1f:4f:a1:12:b3:08:
         ba:22:22:9e:30:a1:fa:dd:47:01:0b:f9:60:2d:3d:e0:2c:ad:
         81:f6:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:13 2026 by rpki-client