Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File:                     ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier:          annky+iixWyBEJAabowMglg9rKAMTh8mH1myDwTEylk=
Subject key identifier:   B5:75:A8:F5:CD:8A:6A:63:EE:E2:DD:6A:9F:21:0C:81:24:B7:61:B5
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer:       /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial:       019D27E0479CBFDD1991657D421A700F3BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number:          05C8
Signing time:             Thu 26 Mar 2026 02:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:42 +0000
Files and hashes:         1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: RP90T3L9TJhBffKNA0fKFG6lFbmtCxBNLAY2A11bVMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:47:9c:bf:dd:19:91:65:7d:42:1a:70:0f:3b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
        Validity
            Not Before: Mar 26 02:01:42 2026 GMT
            Not After : Mar 27 02:01:42 2026 GMT
        Subject: CN=b575a8f5cd8a6a63eee2dd6a9f210c8124b761b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:6f:8e:c5:21:1b:56:a3:50:c8:df:87:c0:
                    1c:c1:a6:01:24:af:c8:dd:50:f0:36:3f:01:ae:b8:
                    76:b2:ef:b3:6b:35:30:9a:a9:8e:46:59:87:8f:c6:
                    1f:f7:38:f1:f7:f4:72:13:c7:46:82:86:3d:b1:3d:
                    5a:b4:c9:2b:0c:7e:54:a2:e0:13:ef:88:89:9b:4c:
                    ba:5f:65:d4:35:c8:fc:aa:72:4e:c6:fe:7d:77:19:
                    d1:ac:6a:d5:c4:f5:fd:79:51:06:9f:f1:81:16:e6:
                    b0:77:8b:fc:14:c1:5b:0a:cd:64:2e:c9:db:d6:89:
                    e9:42:f5:90:28:ac:54:c3:31:94:28:ef:fa:41:9a:
                    ca:2a:e9:41:55:86:b6:8e:1d:61:58:bc:1d:3f:a5:
                    af:98:98:75:54:14:08:92:89:c3:97:70:4d:78:51:
                    14:e2:5a:73:b2:2e:9f:91:1c:5b:04:0d:6b:61:e7:
                    18:cf:76:92:f2:16:02:05:c0:59:da:d3:3d:1e:63:
                    b6:29:2a:e9:0b:93:cb:70:3a:47:5f:e4:3f:3c:7d:
                    b7:76:30:db:ad:f6:31:1a:0f:63:0d:c1:b2:b3:cf:
                    c8:ab:81:a8:a1:80:72:c9:7a:8e:49:2e:cc:c0:87:
                    c5:5b:13:e4:11:d1:f9:c5:87:61:79:5b:99:a6:04:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:A8:F5:CD:8A:6A:63:EE:E2:DD:6A:9F:21:0C:81:24:B7:61:B5
            X509v3 Authority Key Identifier:
                keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:01:71:8d:e6:6f:a2:4a:c6:46:78:b3:90:07:95:5c:3e:0c:
         3d:31:c9:46:e2:25:d3:01:7b:37:96:a8:99:6c:de:0d:57:17:
         a2:a0:b7:55:9a:86:1e:d5:b1:7a:55:0e:aa:04:81:9c:64:60:
         89:b0:32:c2:11:ae:5b:63:5f:e2:fb:f4:1d:f0:d5:8b:0e:e2:
         07:f7:5d:7b:bc:f8:c9:48:5c:b9:4f:88:a2:dc:76:16:0b:07:
         31:d8:be:4b:46:ec:9b:09:96:e8:f4:c6:9c:54:7f:26:aa:e8:
         28:40:e5:ce:59:24:2a:9c:97:5e:6c:77:76:55:46:b3:4e:73:
         90:e5:b0:d5:7a:04:af:b1:a3:ee:62:e8:80:17:e4:9e:3c:0c:
         0c:ff:d3:6c:d7:f0:7c:4c:05:ad:63:59:a6:93:d4:fb:8a:f7:
         6d:88:0b:e4:66:b0:e1:b3:0a:8c:09:89:86:65:38:33:59:46:
         70:1e:f1:5a:78:62:76:27:07:40:c0:c0:a6:69:2f:41:df:94:
         6d:a3:0e:38:33:c0:c6:ad:04:00:6a:d9:96:50:f9:a8:24:6d:
         f0:98:25:7e:ee:e9:8d:58:ee:6e:4d:9a:df:d4:50:00:11:24:
         c1:bb:fe:46:7e:ce:6f:d0:7b:a2:d1:46:10:fa:17:36:f1:23:
         86:78:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:42 2026 by rpki-client