Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File:                     fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier:          VP5LQNpKP87TQx44YZPBUjsq0DpIyYiiItfpyoa2sww=
Subject key identifier:   B5:11:74:96:EB:66:44:0E:E6:07:27:0B:84:D1:3F:E5:B7:C4:4C:B1
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer:       /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial:       019D2583D18E13DAAACC55427816C2D5E911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number:          0F82
Signing time:             Wed 25 Mar 2026 15:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:28 +0000
Files and hashes:         1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: otDXtwMoHH4MQF+u4o/cIcZiJN00J9oeL2KQ1GU014s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:d1:8e:13:da:aa:cc:55:42:78:16:c2:d5:e9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
        Validity
            Not Before: Mar 25 15:01:28 2026 GMT
            Not After : Mar 26 15:01:28 2026 GMT
        Subject: CN=b5117496eb66440ee607270b84d13fe5b7c44cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:cd:de:91:35:58:0b:12:b4:5c:b5:f2:58:
                    29:b1:96:41:0c:a2:65:ca:74:90:9c:40:76:de:bc:
                    1d:c6:1b:ec:2b:37:0d:ae:e8:17:dc:e8:a6:35:f3:
                    90:76:77:09:d8:36:df:6f:d7:bf:56:44:d0:5c:c0:
                    20:d9:d6:0a:a7:d9:16:84:af:92:12:68:00:34:ca:
                    55:8d:11:c1:f3:ce:b6:d6:03:50:cb:de:d6:3f:57:
                    61:0f:9d:9f:5e:1d:9b:46:4d:31:f7:99:24:04:9b:
                    de:e5:4d:a1:59:b4:89:a4:af:9a:26:f2:2c:39:ac:
                    99:97:ff:98:41:69:9d:4d:91:d7:56:7f:56:2e:e2:
                    de:69:c5:ad:7c:d6:b2:bc:67:f8:2f:51:f4:b4:9f:
                    83:2f:ee:88:30:3c:10:6a:5e:e5:28:78:8a:12:9e:
                    31:20:d7:b0:ae:f8:69:3c:e3:0f:37:3c:de:c9:f2:
                    28:0b:17:e2:df:48:2e:fd:21:71:1f:da:58:11:14:
                    52:71:bb:ea:22:89:37:71:88:c1:6b:79:de:17:13:
                    4b:c1:ef:4b:f9:5b:09:05:93:ce:ec:92:1e:3c:af:
                    07:ae:44:f4:29:63:bd:38:7e:81:c4:fc:ae:6a:78:
                    f9:6d:06:49:c0:da:dc:33:8f:19:49:56:03:48:08:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:11:74:96:EB:66:44:0E:E6:07:27:0B:84:D1:3F:E5:B7:C4:4C:B1
            X509v3 Authority Key Identifier:
                keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:28:00:8b:70:9a:91:1e:bb:b3:44:25:6a:34:6b:51:00:
         63:e9:12:db:ef:1d:28:46:4f:b4:f6:fd:83:a1:e6:e3:86:9e:
         07:9c:3b:d7:33:54:bf:55:68:53:4b:08:68:4c:b6:f5:99:44:
         d7:cd:55:14:c1:ef:b7:ba:49:47:f6:58:0b:73:81:eb:a6:bd:
         04:80:10:8e:de:26:30:0a:d3:da:b4:d7:ae:33:99:75:ef:0f:
         a8:9e:0b:ac:ce:aa:e8:e6:3c:45:0b:a2:24:c7:22:9c:92:a1:
         c6:3a:49:22:00:74:a9:85:11:8b:c5:37:8e:fd:d4:82:b2:bd:
         dc:e2:6c:9c:6b:3b:67:ed:0b:7e:3f:74:69:1c:0a:84:1f:91:
         d9:ca:05:11:26:62:40:60:8e:76:9e:31:79:37:7e:d7:97:b5:
         fc:06:de:f5:1d:44:61:1a:c5:a1:4e:85:bd:43:56:16:a1:a2:
         d2:7a:1b:58:67:d9:bf:b5:c2:99:ac:f6:4b:45:8d:bb:7e:b5:
         31:9d:81:8e:9b:2e:28:92:db:c1:77:74:85:1d:d6:b6:35:b9:
         8b:e7:bc:11:5a:e4:43:fd:8a:87:cf:cd:a6:5b:75:df:1e:2a:
         8c:7a:81:20:39:93:a8:68:b7:ae:3c:8a:b4:41:93:7b:90:28:
         fb:a5:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:27 2026 by rpki-client