Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          OL8hNxRQEu0Q/lMHPmktNsKQGI+ofwmjLeSPpmDHD0M=
Subject key identifier:   66:AD:CD:25:3A:C3:27:96:D1:A6:60:11:3B:EB:97:89:BB:56:05:07
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       019D27042CEC65F4A9D48D80B13487400A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          08D8
Signing time:             Wed 25 Mar 2026 22:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:18 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: m9yvKjgk7O5ALsuLU7DVysPKb7/UWM7yGVSZCYLErVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:2c:ec:65:f4:a9:d4:8d:80:b1:34:87:40:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Mar 25 22:01:18 2026 GMT
            Not After : Mar 26 22:01:18 2026 GMT
        Subject: CN=66adcd253ac32796d1a660113beb9789bb560507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:9c:d4:95:03:fc:7b:63:b9:f9:24:fb:ec:
                    d1:4a:bf:af:26:68:99:e5:30:00:87:8a:3a:68:4a:
                    ad:d9:95:d7:be:0b:43:b9:0a:89:6d:a8:01:f2:de:
                    b1:54:13:04:b0:5a:0f:66:51:04:f1:f8:9b:5b:12:
                    36:4c:dd:6c:87:79:4b:8f:b0:35:03:88:21:3c:15:
                    70:23:e8:4c:4f:0c:47:45:3e:79:76:0b:72:cb:f3:
                    cf:e8:e4:c7:41:e3:75:d2:a6:05:ef:67:90:bf:a0:
                    ca:a8:f7:1a:e9:62:42:fe:1b:b3:20:13:a3:b0:32:
                    1a:e0:51:b0:d0:28:2d:d1:1d:0d:28:8b:6d:94:cb:
                    5f:6b:f0:71:d4:f6:9c:30:ce:7b:d1:98:8b:48:2a:
                    95:8a:d7:c7:ea:96:99:ba:1b:f1:55:d3:a2:30:b5:
                    f8:d1:e5:4c:5d:cc:89:00:9a:bc:d4:67:ca:03:59:
                    ac:b7:34:93:6e:cd:85:9f:41:c9:8e:76:f0:a2:f4:
                    b4:b7:2e:ff:bb:f5:5a:a6:7c:fd:46:be:24:f2:b8:
                    18:a4:ce:b1:c7:c5:d9:79:41:be:10:b2:1c:f9:11:
                    0d:21:25:be:03:0a:ad:80:5c:b4:a7:e0:27:b4:1b:
                    a4:1a:a8:fb:9d:42:31:89:9f:6b:c7:2f:03:03:10:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AD:CD:25:3A:C3:27:96:D1:A6:60:11:3B:EB:97:89:BB:56:05:07
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:25:35:64:91:68:7d:6a:33:d2:d3:fe:13:63:33:88:ad:
         dc:48:98:e8:f4:64:ee:f7:3c:17:e8:e7:2f:f7:54:36:e1:3b:
         2d:ff:ed:ee:33:49:2c:ce:b5:21:43:3e:f1:96:85:08:c6:e4:
         5d:7c:db:29:23:9b:9d:be:f3:ab:ea:93:52:55:22:51:b8:c0:
         a3:60:8b:90:b5:2a:d8:6e:7b:fe:45:f3:8f:d8:bd:8b:c2:98:
         a0:8b:c1:ef:b4:39:2a:83:5c:a2:c5:2b:a4:29:b9:0c:cc:e2:
         23:01:1f:50:5d:42:f6:f7:60:a2:4f:a5:e2:2b:94:13:b1:71:
         a4:d6:a8:1d:60:5b:6c:a9:10:f3:db:a9:25:63:62:3b:39:be:
         f1:bd:a7:92:21:ac:7d:12:ce:7b:5d:a8:c3:ed:c7:bd:c4:24:
         9c:75:f7:33:27:af:2c:40:b7:48:86:fa:6e:3f:b7:5f:b7:17:
         fd:6f:6f:fd:73:8e:b1:42:ab:fa:5e:b2:ca:b4:9d:4b:b0:5f:
         76:28:db:03:03:91:4f:7f:c9:79:3f:81:6f:8e:74:a1:a5:52:
         25:12:d1:9e:cc:cb:e5:fe:b8:b2:22:1f:11:6d:67:5f:1f:34:
         6d:2c:3f:6c:0a:6f:41:1d:43:0e:b8:17:b8:13:31:49:d6:1c:
         1e:6c:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----