Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
File:                     aedSc-eU9kwv4TwmA00JJw-oRxY.mft (raw, json)
Hash identifier:          D1EdfYMoKuX3IhNVhX7MPbf6LkAi5Q1yLoy3p9JuvKg=
Subject key identifier:   F2:0A:A0:AB:08:2E:34:F8:58:F8:11:39:7C:E5:7F:B5:F8:0F:40:B9
Authority key identifier: 69:E7:52:73:E7:94:F6:4C:2F:E1:3C:26:03:4D:09:27:0F:A8:47:16
Certificate issuer:       /CN=69e75273e794f64c2fe13c26034d09270fa84716
Certificate serial:       019D333F1EE9E6266B90C0B7CDA5F8D3A905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
Manifest number:          76
Signing time:             Sat 28 Mar 2026 07:01:07 +0000
Manifest this update:     Sat 28 Mar 2026 07:01:07 +0000
Manifest next update:     Sun 29 Mar 2026 07:01:07 +0000
Files and hashes:         1: aedSc-eU9kwv4TwmA00JJw-oRxY.crl (hash: mAhWcXfbGFmR/kjw5u9DSmV4GliTCCPycQkZ3Jzjp9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:3f:1e:e9:e6:26:6b:90:c0:b7:cd:a5:f8:d3:a9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e75273e794f64c2fe13c26034d09270fa84716
        Validity
            Not Before: Mar 28 07:01:07 2026 GMT
            Not After : Mar 29 07:01:07 2026 GMT
        Subject: CN=f20aa0ab082e34f858f811397ce57fb5f80f40b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:ab:c2:ee:1b:7e:5d:cb:fe:1f:22:83:ee:
                    fb:2f:1f:3f:11:bb:ea:17:89:c4:7e:58:e6:37:4d:
                    a2:d2:50:be:c1:83:bb:61:39:7f:83:f3:39:ff:d7:
                    11:05:b1:b5:a9:57:b8:ed:08:8a:70:d8:dc:f2:07:
                    33:a0:1d:0b:69:fe:33:14:d0:8d:a9:46:64:62:52:
                    e0:b0:4e:eb:ca:54:f9:1c:ce:ba:44:25:d1:01:a8:
                    3b:d1:77:93:29:d6:2f:1b:db:6b:4d:06:b8:64:98:
                    1a:08:78:a8:a0:5b:e8:5a:bf:4a:22:0f:b9:30:d1:
                    a2:2f:16:94:a5:57:24:26:22:68:77:d3:df:45:e4:
                    ed:b0:f9:cc:8c:88:85:0c:98:55:bc:a0:06:43:4c:
                    3a:5f:45:d0:e3:5d:2b:cd:7e:09:e7:11:a5:1e:05:
                    6d:ba:01:38:6d:ff:56:65:c4:76:e3:cf:e6:b1:1f:
                    77:bb:1d:ac:ec:b7:40:3e:44:67:d9:f1:0f:88:cf:
                    dd:07:d2:81:c4:71:55:d8:46:4d:49:68:e6:e1:ee:
                    e2:76:ad:91:48:cd:6c:00:8a:b9:2d:cb:b1:0b:02:
                    5c:57:f8:f0:43:3e:a6:e1:bd:e2:79:0c:39:cc:31:
                    d7:b4:9d:f3:c8:31:ea:03:9e:1a:31:f0:7d:f5:18:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:A0:AB:08:2E:34:F8:58:F8:11:39:7C:E5:7F:B5:F8:0F:40:B9
            X509v3 Authority Key Identifier:
                keyid:69:E7:52:73:E7:94:F6:4C:2F:E1:3C:26:03:4D:09:27:0F:A8:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aedSc-eU9kwv4TwmA00JJw-oRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ec5ddc-4dce-4e04-9449-2c87589147c9/1/aedSc-eU9kwv4TwmA00JJw-oRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:62:1a:74:c5:14:a5:4a:f7:d9:f5:20:3f:0e:9b:32:91:
         d0:b0:3a:81:83:8c:9a:14:c8:2d:13:d8:05:2d:61:cb:82:ab:
         ac:0e:ed:10:68:4a:4a:87:07:05:a4:d5:4e:1a:ae:1e:cd:cf:
         6d:58:02:9c:8e:0c:19:e2:67:a7:07:62:79:5f:39:2d:79:ba:
         55:82:07:9b:8d:c3:cd:7b:5e:94:27:8a:7c:8c:bb:9a:b6:9c:
         0b:e5:31:40:f3:99:85:75:a4:a2:90:e0:8a:a3:42:ac:8f:9a:
         9b:7e:4e:04:ba:22:31:d6:4c:d1:82:fe:6f:44:7d:97:15:56:
         06:25:82:9b:87:25:f6:48:3c:72:0f:47:f9:e0:3a:d5:d9:d9:
         ca:cf:58:d1:64:64:56:37:44:9d:cc:df:c7:82:b0:23:50:fc:
         15:d7:a0:29:03:d4:a5:1e:86:e0:8e:e4:f8:2f:7a:44:d4:a4:
         77:f9:7a:5d:eb:b0:c0:5e:de:14:34:3e:18:c9:a4:be:b0:77:
         95:37:d7:22:a7:cc:40:23:91:83:d0:ff:dd:b8:90:f7:aa:a4:
         83:94:f4:77:bc:aa:b3:8d:82:d6:1c:d2:1f:f1:6d:0a:8a:4f:
         5c:36:04:7e:b1:66:cb:56:dd:f8:99:62:58:8a:bb:ee:c2:eb:
         11:3e:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:59 2026 by rpki-client