Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
File:                     E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json)
Hash identifier:          TZ23MMD+nbGF6MS728JfHCryXWlhyNVY9e93NEnMMkY=
Subject key identifier:   91:9F:E9:33:99:D5:1A:72:62:88:B5:31:D7:27:37:33:F3:93:85:7F
Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
Certificate issuer:       /CN=13ec2551332a0c32fb7725d069582d6b50be369f
Certificate serial:       019D28F29D2D2AC5751916A75DEDAC2B8C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
Manifest number:          0B67
Signing time:             Thu 26 Mar 2026 07:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:21 +0000
Files and hashes:         1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: oCUvL7JeeKLGZg4s6VVLaBJpP2mhRA3y/Zr4dlu2kC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:9d:2d:2a:c5:75:19:16:a7:5d:ed:ac:2b:8c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f
        Validity
            Not Before: Mar 26 07:01:21 2026 GMT
            Not After : Mar 27 07:01:21 2026 GMT
        Subject: CN=919fe93399d51a726288b531d7273733f393857f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:9a:44:21:6e:c7:db:35:b1:50:ae:ed:cd:
                    90:cc:41:41:c4:ee:de:db:05:53:56:e3:d4:3f:8d:
                    33:71:00:ed:bb:04:6a:7d:f8:0f:48:bf:ee:17:b9:
                    f0:5b:b9:fa:70:02:7e:29:05:58:a3:ac:1a:a9:e5:
                    de:c3:25:c6:d7:2a:73:9b:41:54:7c:40:40:de:aa:
                    6c:07:e0:9a:d9:4f:7f:e7:22:17:6d:e1:9e:38:67:
                    20:49:40:79:26:98:f1:bf:c1:af:b3:29:cf:a1:78:
                    83:37:ab:c4:8c:55:31:60:6b:e9:21:25:d1:2d:6a:
                    f1:7e:3e:71:31:8c:64:2c:48:78:c7:0f:fc:2e:c6:
                    72:5a:9a:5d:d4:08:95:97:46:6d:0b:e5:7a:22:67:
                    0f:f1:29:e8:1e:a6:e8:16:b8:09:6a:56:a6:92:6e:
                    ad:6a:76:61:e8:a0:62:b1:75:0b:8d:36:c7:3c:ae:
                    ca:75:f8:59:00:ba:2b:d4:b4:e0:a8:de:32:6d:0a:
                    36:e7:7f:a7:3b:74:b7:d4:f4:91:c3:75:f6:2e:3c:
                    61:6c:69:a7:b8:d7:c8:66:16:cb:14:e6:0a:d8:e4:
                    b5:a7:b7:1b:1f:2b:dc:09:95:db:7f:41:d6:af:1d:
                    e3:4b:ad:52:7d:30:87:f8:76:33:76:39:d0:9e:23:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9F:E9:33:99:D5:1A:72:62:88:B5:31:D7:27:37:33:F3:93:85:7F
            X509v3 Authority Key Identifier:
                keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:93:f6:d3:69:9b:b6:41:49:48:5d:fc:13:f7:c9:3b:16:28:
         c1:ae:27:cb:ac:03:6a:0b:dc:81:25:c3:a3:2d:92:13:f2:bf:
         22:c8:d0:46:5f:49:04:14:81:27:47:50:fa:b6:58:82:25:6d:
         e7:12:70:54:66:61:a1:d8:f0:15:c7:f6:d2:c6:16:96:3f:ac:
         af:34:ec:36:dc:b1:39:7a:6e:58:ea:f2:f2:08:d9:ab:06:b2:
         d2:4f:4d:ed:15:d9:51:69:09:ea:01:3f:0c:4e:f5:84:7d:c6:
         e7:6d:c0:bf:96:9d:55:66:61:b0:6c:79:aa:44:39:9f:dc:57:
         1f:d1:aa:95:25:fe:ed:7e:66:77:fc:50:8e:ca:5c:5c:d7:5c:
         a8:3e:10:85:13:3f:6c:2d:c3:c8:39:33:9c:c5:c6:d2:29:dd:
         93:6e:1e:ed:aa:cd:5d:d8:4e:e0:e4:10:2a:7d:b6:fb:04:e5:
         bf:0a:41:fb:58:c0:17:f3:92:d5:d6:e0:66:71:c5:54:20:de:
         a4:4a:44:4b:d3:85:a2:d7:62:14:9f:76:1a:34:97:ff:5a:11:
         ce:53:fc:b3:d9:ce:d3:77:09:1d:fb:90:96:c1:88:4e:5c:cb:
         96:fe:92:45:77:38:c9:63:ec:33:cd:8b:4f:59:ec:11:b4:5a:
         2c:86:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:18 2026 by rpki-client