Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File:                     _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier:          2pg+T0pruq1dNNZMoDa/s9HFQu+0KXOs7SYmZWERkEc=
Subject key identifier:   41:F8:3D:AD:35:92:17:8E:54:E2:C5:86:6F:CC:E8:8E:62:CD:1C:EA
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer:       /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial:       019D2CD003D9E5C7CA0FF5951656EFEC03CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number:          0375
Signing time:             Fri 27 Mar 2026 01:02:03 +0000
Manifest this update:     Fri 27 Mar 2026 01:02:03 +0000
Manifest next update:     Sat 28 Mar 2026 01:02:03 +0000
Files and hashes:         1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: 4Z14b1hnPNOnxmqglEBS6zqP/PHPB5vu2m6fGigv7Zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:d0:03:d9:e5:c7:ca:0f:f5:95:16:56:ef:ec:03:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
        Validity
            Not Before: Mar 27 01:02:03 2026 GMT
            Not After : Mar 28 01:02:03 2026 GMT
        Subject: CN=41f83dad3592178e54e2c5866fcce88e62cd1cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:d0:4c:03:28:9e:71:e3:cc:8e:e9:b5:af:
                    8c:c0:0d:8e:a0:ca:91:12:78:e6:73:8f:de:95:35:
                    3a:1c:71:dc:20:de:8c:5f:f9:14:57:1a:98:4f:16:
                    a2:96:53:35:e2:29:68:53:34:d6:0e:a2:5f:e7:f0:
                    65:fc:eb:01:41:a2:9c:c7:0d:65:c3:bb:f4:0a:45:
                    4c:69:52:d1:6a:81:47:1e:ab:6f:ee:85:73:57:c3:
                    b1:d8:fb:3c:75:d8:93:79:50:5f:5f:85:04:18:87:
                    9d:d8:bc:e9:90:c4:ca:cb:c7:0e:3c:7d:25:98:60:
                    56:1c:5f:fa:c6:d8:c6:dc:64:f0:51:a1:12:72:b7:
                    4d:40:35:40:49:8f:30:4d:35:89:4e:57:ff:80:c9:
                    ef:8b:e6:a9:db:27:33:8c:03:bc:65:0c:e5:f4:6a:
                    d4:e3:61:27:2c:e0:8b:cf:39:0f:96:13:30:aa:29:
                    46:2f:bf:2f:ea:6f:8d:74:61:5d:38:5f:97:db:2c:
                    bc:c2:f5:8e:b9:27:d1:29:8e:76:16:b0:5b:5c:8b:
                    7e:de:a2:d5:13:5d:0b:79:0f:1d:af:3b:47:b6:00:
                    bd:f2:4d:71:68:80:88:7b:36:d4:31:a7:e8:3b:6d:
                    da:8e:b6:26:b7:4f:23:85:89:50:f6:66:7c:5e:ba:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:3D:AD:35:92:17:8E:54:E2:C5:86:6F:CC:E8:8E:62:CD:1C:EA
            X509v3 Authority Key Identifier:
                keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:31:78:24:5b:34:74:ad:ce:08:30:85:f4:53:2d:81:e5:f2:
         6e:27:0f:f3:e0:0e:5e:39:7d:3c:53:12:ba:0e:dc:95:fc:08:
         27:2d:e1:dc:08:87:24:27:17:84:0f:2d:01:0c:89:59:da:90:
         f5:27:fc:f3:fb:1d:51:f1:09:88:91:f6:ab:c3:57:31:75:ef:
         aa:99:4a:f7:f6:70:00:94:c2:e0:65:d7:2d:26:b5:97:d3:1a:
         a9:00:cf:76:9d:65:58:71:75:c7:d6:d2:08:c2:b5:4f:a7:8d:
         a1:2a:58:b7:4c:ef:d6:0f:f9:4c:c4:e5:5b:fa:d0:1c:f6:9c:
         87:5f:52:97:1b:66:ae:1e:ff:cb:2a:95:59:cc:47:b8:6e:8e:
         78:70:ef:f7:39:e8:ac:72:89:16:a6:e9:7d:45:3b:98:02:d2:
         bc:45:45:ad:cc:5f:ad:5e:81:ef:9e:a1:87:c3:dd:d1:51:0c:
         9e:68:1d:dd:50:47:71:17:59:12:c2:ad:87:e0:3c:b4:59:df:
         50:16:04:51:fe:60:d0:2f:16:4e:56:ef:f3:e0:29:2d:69:37:
         18:f6:9e:bf:7d:29:fb:6e:cb:c4:91:19:42:62:c8:52:9d:61:
         09:dc:8f:30:0a:3a:68:4b:0d:e4:9e:c1:99:eb:5c:84:31:8a:
         36:35:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:19 2026 by rpki-client