Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File:                     M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier:          jTR1lpltNbfEkiZCYCzNIMC3vaxa6yAbDt6qZRURtjQ=
Subject key identifier:   05:B7:F9:1B:55:A5:4D:BE:23:64:67:8C:1B:08:82:ED:89:73:1C:A5
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer:       /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial:       019D2996F6DB56B8B246C6B7061E97904023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number:          15CC
Signing time:             Thu 26 Mar 2026 10:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:52 +0000
Files and hashes:         1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: w3u13ws07dUDC3CKW/3ybDSY5+jZpLWMGbREkmfB9jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:f6:db:56:b8:b2:46:c6:b7:06:1e:97:90:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
        Validity
            Not Before: Mar 26 10:00:52 2026 GMT
            Not After : Mar 27 10:00:52 2026 GMT
        Subject: CN=05b7f91b55a54dbe2364678c1b0882ed89731ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:f3:5e:99:89:c0:d6:a0:94:26:9c:38:27:
                    0e:e3:d9:95:1f:71:79:d7:2e:93:68:b8:ff:ed:8f:
                    63:ce:fe:06:a6:ce:35:77:be:58:73:cd:cb:0f:b7:
                    9a:6d:8b:b0:10:91:56:c5:0e:c0:e2:a2:48:bc:c8:
                    d1:af:b2:be:81:6b:cc:fe:b2:d7:29:98:01:2f:99:
                    b8:a3:3a:df:d9:a9:45:ad:e4:5b:96:ae:ef:b0:9d:
                    6f:4a:11:97:16:1d:98:5c:1f:e3:9c:72:e6:ab:41:
                    2a:6c:a6:ed:69:ae:a4:3a:c3:c8:96:6d:c0:a0:a5:
                    b5:d6:7a:86:f4:e4:e6:8e:60:75:5c:da:cf:8a:01:
                    7b:a4:36:32:8c:22:78:e3:d4:24:3f:64:15:b6:28:
                    17:da:ae:95:a8:b8:f3:be:cd:72:84:c2:3a:41:e3:
                    98:70:4c:bd:bd:3b:bd:45:b5:33:f0:9c:c3:ad:db:
                    4f:60:fc:e2:1f:cb:92:9a:a1:cd:79:d0:ee:c5:c6:
                    72:1b:24:82:a4:74:ad:83:91:99:3a:24:29:79:dd:
                    74:6f:e8:1f:27:a8:78:36:b6:0f:de:a2:d3:86:a4:
                    8b:3d:c3:ae:40:49:a4:b3:ad:df:5b:35:4a:b9:d0:
                    17:25:01:f1:0b:51:96:00:4c:93:00:0c:d7:48:82:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:F9:1B:55:A5:4D:BE:23:64:67:8C:1B:08:82:ED:89:73:1C:A5
            X509v3 Authority Key Identifier:
                keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:30:fb:c7:cd:41:74:9a:e7:35:5f:7b:14:e8:78:0c:c6:a6:
         57:9c:9b:e1:14:47:79:b1:fd:70:b2:f5:84:11:b3:9b:ce:ad:
         b2:44:2f:e8:9d:2a:4d:4c:de:53:37:52:48:a3:58:92:99:79:
         7e:5b:a9:c4:bf:74:0f:b7:9d:a2:74:19:48:20:ae:45:e6:7c:
         fd:7b:d1:bd:a4:da:4d:95:8e:c3:37:70:56:9a:13:13:ad:47:
         f8:33:4e:93:51:bf:94:00:d4:9e:10:76:6d:d2:99:64:ad:07:
         ef:7c:f2:ed:80:6a:49:a3:64:e3:3a:ff:83:69:db:31:c4:5d:
         f2:2e:c3:59:f2:b8:57:2b:34:f0:7b:0c:6b:34:ea:ac:86:d9:
         07:03:08:dd:10:b7:0f:1c:7b:c6:79:92:2a:21:b5:08:8d:2b:
         6a:6e:ff:52:9c:97:64:20:96:2a:16:13:94:8f:c6:71:49:3c:
         6c:7a:b6:4e:26:8d:f6:20:79:13:94:0a:9f:af:fb:de:f3:ec:
         36:fa:bd:f6:67:7a:bc:4d:52:58:3e:e7:11:b6:70:27:af:4e:
         b0:9c:7f:96:f8:8e:d8:0a:22:bc:7c:65:40:18:5f:e0:18:fa:
         aa:e9:8a:5f:5a:40:aa:ab:c9:e7:2e:ce:b8:fc:1a:35:38:2e:
         6a:6a:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----