Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
File:                     _Me2AVe1RTWEdeJXCMbizAbbres.mft (raw, json)
Hash identifier:          wqQJ9ba4b4AbLQ3W22mhNJ8HNi3cFCfXZrYowSGsjkA=
Subject key identifier:   ED:11:54:2D:BA:0F:A1:0B:75:3A:32:B5:73:00:10:94:05:66:D8:17
Authority key identifier: FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
Certificate issuer:       /CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Certificate serial:       019D28BB36F68BE762E9FC769C83D54407EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
Manifest number:          050E
Signing time:             Thu 26 Mar 2026 06:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:51 +0000
Files and hashes:         1: _Me2AVe1RTWEdeJXCMbizAbbres.crl (hash: DlrSn8jf+L11MLeBMqm0dGUfAmp9lXVIGj4XCLD/3Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:36:f6:8b:e7:62:e9:fc:76:9c:83:d5:44:07:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
        Validity
            Not Before: Mar 26 06:00:51 2026 GMT
            Not After : Mar 27 06:00:51 2026 GMT
        Subject: CN=ed11542dba0fa10b753a32b5730010940566d817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:1b:c0:bf:37:80:34:40:f5:77:94:14:53:
                    ce:56:dc:1d:92:4e:eb:9d:ac:5e:f6:60:78:66:5f:
                    5e:33:a0:e8:c9:65:9b:b4:84:3a:c4:18:b7:55:6d:
                    c8:ac:9f:57:12:ba:ef:e8:aa:e2:a3:79:4f:da:14:
                    f3:e0:fe:00:35:9c:95:5a:fe:9b:86:ee:da:68:f8:
                    84:4c:e3:a2:92:83:7e:f1:1d:82:7e:10:48:15:ca:
                    62:3c:02:17:97:6d:59:ea:56:2f:7c:cf:df:5d:a1:
                    22:55:f0:ca:55:25:b2:5f:db:f0:c9:a5:39:97:d0:
                    4a:a3:25:de:b2:f0:86:56:0f:d9:99:08:44:a3:68:
                    9d:81:d4:4c:77:31:b3:83:a7:3a:d7:23:9f:d2:97:
                    98:96:87:6f:90:34:c6:b2:4c:d9:f1:23:d1:19:ea:
                    fe:fc:ed:51:cf:ea:26:d1:96:28:7d:ac:73:e2:ce:
                    03:5d:3e:95:4e:14:6a:f3:63:35:7f:ea:5b:f9:95:
                    c7:f7:25:88:f4:f5:bb:c4:c3:3e:8f:a1:e2:b7:b3:
                    fa:66:56:43:de:9c:37:31:4f:56:ed:8d:55:6f:ea:
                    a6:64:17:5c:0b:26:6d:cf:45:ef:bd:a8:13:f1:23:
                    b8:c3:02:fd:e7:cf:93:ad:dd:d0:94:85:a8:67:99:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:54:2D:BA:0F:A1:0B:75:3A:32:B5:73:00:10:94:05:66:D8:17
            X509v3 Authority Key Identifier:
                keyid:FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:95:80:84:2e:cf:5e:9f:af:bd:fa:08:08:c5:1f:80:bd:5f:
         a5:eb:12:0e:7a:dd:f2:e9:41:df:50:62:92:24:32:5f:37:2f:
         26:52:01:84:82:bd:3b:f4:7d:81:1d:cb:98:05:e1:97:49:bc:
         6e:47:73:5c:fa:ea:ab:8f:c8:d9:4e:3f:75:97:98:93:48:3c:
         66:a4:09:21:6e:fe:ad:bd:06:09:7d:96:88:b1:c1:18:17:6d:
         67:9a:c2:c6:41:3c:0c:f5:15:fa:5a:f6:c8:5b:22:ce:67:1b:
         db:ad:24:65:13:dd:06:7b:da:ef:b9:a4:34:a0:6b:38:25:24:
         0e:8a:37:85:25:8d:19:7e:2c:40:4e:75:d6:b9:2d:2e:c8:62:
         be:a5:f4:1f:d5:8e:b5:f6:07:e8:56:22:a8:f7:42:ba:38:10:
         16:28:17:a7:21:10:a4:4c:32:97:f8:ff:f1:0f:33:b9:c6:3f:
         e1:4b:98:19:da:39:01:20:26:45:26:d5:75:9e:57:2c:e4:e8:
         ec:61:47:39:0f:7d:60:6e:77:55:1e:45:90:93:31:3d:71:55:
         4c:4e:60:51:02:db:62:82:6a:91:11:62:75:37:f7:0c:ce:6c:
         1d:63:a4:71:ad:96:91:b1:50:a3:69:8b:be:68:49:2e:e0:a8:
         57:e5:a8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzb2i+di6fx2nIPVRAfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYzdiNjAxNTdiNTQ1MzU4NDc1ZTI1NzA4YzZlMmNjMDZk
YmFkZWIwHhcNMjYwMzI2MDYwMDUxWhcNMjYwMzI3MDYwMDUxWjAzMTEwLwYDVQQD
EyhlZDExNTQyZGJhMGZhMTBiNzUzYTMyYjU3MzAwMTA5NDA1NjZkODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+wbwL83gDRA9XeUFFPOVtwdkk7r
naxe9mB4Zl9eM6DoyWWbtIQ6xBi3VW3IrJ9XErrv6Krio3lP2hTz4P4ANZyVWv6b
hu7aaPiETOOikoN+8R2CfhBIFcpiPAIXl21Z6lYvfM/fXaEiVfDKVSWyX9vwyaU5
l9BKoyXesvCGVg/ZmQhEo2idgdRMdzGzg6c61yOf0peYlodvkDTGskzZ8SPRGer+
/O1Rz+om0ZYofaxz4s4DXT6VThRq82M1f+pb+ZXH9yWI9PW7xMM+j6Hit7P6ZlZD
3pw3MU9W7Y1Vb+qmZBdcCyZtz0XvvagT8SO4wwL958+Trd3QlIWoZ5kIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0RVC26D6ELdToytXMAEJQFZtgXMB8GA1UdIwQY
MBaAFPzHtgFXtUU1hHXiVwjG4swG263rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MDIyOWYtOTg4Mi00NjU5LWFmZjQt
Mjk0ODJjMWVkNTgwLzEvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85MDIyOWYtOTg4Mi00NjU5LWFmZjQtMjk0ODJjMWVkNTgw
LzEvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZWAhC7P
Xp+vvfoICMUfgL1fpesSDnrd8ulB31BikiQyXzcvJlIBhIK9O/R9gR3LmAXhl0m8
bkdzXPrqq4/I2U4/dZeYk0g8ZqQJIW7+rb0GCX2WiLHBGBdtZ5rCxkE8DPUV+lr2
yFsizmcb260kZRPdBnva77mkNKBrOCUkDoo3hSWNGX4sQE511rktLshivqX0H9WO
tfYH6FYiqPdCujgQFigXpyEQpEwyl/j/8Q8zucY/4UuYGdo5ASAmRSbVdZ5XLOTo
7GFHOQ99YG53VR5FkJMxPXFVTE5gUQLbYoJqkRFidTf3DM5sHWOkca2WkbFQo2mL
vmhJLuCoV+WoUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:03 2026 by rpki-client