Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
File:                     mJtzAF6_GeDG34diTlXwcnr0P_U.mft (raw, json)
Hash identifier:          Es28BUrpFuhRlpPsQU9UoN1BKTnglEZaBwmphFeu7FI=
Subject key identifier:   A5:67:2E:15:CF:58:A4:3A:D8:CC:F1:D4:01:19:BE:D4:28:66:C2:1B
Authority key identifier: 98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5
Certificate issuer:       /CN=989b73005ebf19e0c6df87624e55f0727af43ff5
Certificate serial:       019D333F1F9D716EDEE9AE2E2D4042CF77DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
Manifest number:          FB
Signing time:             Sat 28 Mar 2026 07:01:07 +0000
Manifest this update:     Sat 28 Mar 2026 07:01:07 +0000
Manifest next update:     Sun 29 Mar 2026 07:01:07 +0000
Files and hashes:         1: mJtzAF6_GeDG34diTlXwcnr0P_U.crl (hash: EQMCaIwVtVwWywMk+TzCiSzhXZAZnGgYBO7ehH8Cla0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:3f:1f:9d:71:6e:de:e9:ae:2e:2d:40:42:cf:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989b73005ebf19e0c6df87624e55f0727af43ff5
        Validity
            Not Before: Mar 28 07:01:07 2026 GMT
            Not After : Mar 29 07:01:07 2026 GMT
        Subject: CN=a5672e15cf58a43ad8ccf1d40119bed42866c21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:82:e0:a0:78:6c:dc:90:8b:98:89:a2:c4:
                    99:2f:dd:2c:85:e2:f6:4c:2f:28:0e:9d:5a:f1:21:
                    ab:2b:ab:73:e6:b6:0d:87:c6:0b:93:c3:bf:bc:f5:
                    eb:ed:a3:31:63:95:87:33:3e:bd:82:23:2d:e6:09:
                    11:6f:43:7c:c8:e3:92:45:7f:51:27:3e:69:fb:b4:
                    3f:c4:b0:85:60:ea:96:d7:ab:bf:a8:16:15:cc:a5:
                    c8:96:2d:c4:52:a5:0f:51:0b:2a:18:59:c7:ac:dd:
                    23:7c:53:bf:ee:fd:b4:ad:72:17:13:39:c5:f5:fc:
                    02:21:67:d0:44:69:61:a1:19:05:32:03:cf:a6:3e:
                    c4:51:7d:7c:13:01:0b:14:99:1a:94:e9:0d:cb:4f:
                    6b:02:25:92:a2:52:03:dd:25:40:74:09:ed:fa:2a:
                    26:53:49:a0:45:02:82:69:ca:24:21:35:9d:83:be:
                    a9:fa:68:67:c3:54:25:cb:1c:54:de:8e:0e:be:9c:
                    ec:3d:81:6f:f6:26:15:9c:c5:dc:af:53:12:8b:5e:
                    8c:16:4a:5d:a1:19:38:f9:a5:00:5c:c4:b4:24:5d:
                    ad:4e:1c:d0:df:ba:f8:93:9a:2f:8a:a5:b3:ab:0c:
                    f7:f3:8c:26:61:3b:09:f5:8d:1a:5e:d0:f8:46:d6:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:2E:15:CF:58:A4:3A:D8:CC:F1:D4:01:19:BE:D4:28:66:C2:1B
            X509v3 Authority Key Identifier:
                keyid:98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:3b:38:c1:d6:ea:9e:14:59:2e:df:a6:c3:f6:8d:8b:83:
         0c:bf:a3:95:cc:d8:6a:9a:ec:24:9a:69:23:a3:85:8a:23:0a:
         8f:02:96:42:b6:ce:71:7b:ac:6b:14:5d:91:57:d3:99:c0:48:
         92:dd:63:3d:39:68:0b:83:4c:f9:80:da:c5:0e:31:6c:6e:dc:
         dc:f0:86:79:87:fc:4b:23:62:3e:a0:49:d7:54:5a:4e:32:40:
         e9:6c:ce:d2:8e:c7:5a:28:e9:b2:cf:c9:77:ee:af:dc:2e:45:
         54:91:d1:e8:43:be:9a:1b:b9:fc:f4:8a:79:c7:05:af:ae:a3:
         9f:73:81:e7:aa:de:8e:6f:74:20:81:7b:da:2c:16:ca:1a:e2:
         d7:e0:ee:b7:0c:1d:27:e7:0c:36:49:11:2c:94:cf:c2:2f:b6:
         5d:a0:6c:7c:6f:fe:ae:a8:69:91:be:d2:df:e7:89:c1:ee:30:
         af:57:aa:d7:90:b3:1a:70:36:60:ce:cf:34:2e:b0:86:ca:f5:
         74:b3:ed:df:7d:2d:2f:2c:2d:a7:46:d8:64:ed:8b:c6:9c:85:
         80:dd:d1:e3:11:7c:28:35:ca:ab:88:90:83:fa:6c:ee:9b:bb:
         3c:be:05:eb:b9:84:e6:25:76:06:d3:f1:32:bd:a8:1f:15:80:
         91:76:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:02 2026 by rpki-client