Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          TuxV7XQP3s0oIweNsS98Nwh49iH6X9vk88ulAs6Cgbc=
Subject key identifier:   75:E0:4E:14:0D:11:87:6D:0A:92:5D:8D:0C:99:02:62:AA:37:A2:86
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       019D2884A8E5A198180E0F81DDF5CA506237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0A0C
Signing time:             Thu 26 Mar 2026 05:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:15 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: xyGtsKnKflP7FQLLrWwIoR/1R9ZF4J7Fjih3ASWdp6Q=)
                          2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
                          3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
                          4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
                          5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
                          6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:a8:e5:a1:98:18:0e:0f:81:dd:f5:ca:50:62:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Mar 26 05:01:15 2026 GMT
            Not After : Mar 27 05:01:15 2026 GMT
        Subject: CN=75e04e140d11876d0a925d8d0c990262aa37a286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:78:35:87:10:4f:2f:fc:c4:7c:c5:59:13:
                    bd:05:e3:06:f2:21:3a:31:c3:da:f8:84:86:d1:a2:
                    44:38:1b:0c:44:46:96:61:76:2a:34:6f:79:58:5d:
                    58:fb:6c:02:e4:fa:b3:6f:44:44:b1:45:48:31:d8:
                    e7:08:45:80:06:dc:0e:05:cf:62:e3:02:b4:e6:8d:
                    3b:5e:23:fa:3f:88:98:3a:a8:f0:32:f4:ea:de:f6:
                    6d:87:4e:f5:51:ab:d7:38:e4:e4:a3:67:16:08:6b:
                    9c:b6:2e:16:f7:ff:69:d8:0f:a1:72:e2:eb:22:c3:
                    a5:9e:15:c3:08:0e:01:42:39:99:62:e7:95:86:c8:
                    44:46:09:00:85:3d:9a:9f:5b:33:ac:cd:19:fe:c0:
                    09:48:b6:c1:34:bb:89:2d:bd:6b:11:b8:bb:94:95:
                    66:a3:7c:d5:87:68:1f:4c:b0:d2:cf:40:f0:9e:6b:
                    89:ed:2f:68:21:70:84:3e:dd:ca:6c:22:6e:6e:c6:
                    00:d0:13:d8:13:07:85:7e:16:f4:dd:65:7c:ba:6e:
                    ef:a3:98:dc:51:ca:b7:da:84:2e:f7:09:bb:ea:07:
                    9e:f2:85:c6:10:cb:cc:f4:bb:88:69:25:bd:4a:32:
                    ca:4a:ac:03:5c:80:03:8d:90:fe:6f:af:5f:42:2a:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:4E:14:0D:11:87:6D:0A:92:5D:8D:0C:99:02:62:AA:37:A2:86
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ad:5a:14:5c:ad:6f:74:b3:1d:6b:79:e3:57:f9:f6:f5:4c:
         e2:03:4a:9c:ec:2e:8a:cc:5d:7e:d8:6e:d4:90:79:38:cd:d8:
         bd:10:d6:a6:dd:82:24:e9:1a:4a:13:9e:a7:99:48:ca:5d:32:
         67:4f:e9:b7:b7:4a:79:20:d8:77:33:e0:45:d0:cb:b8:fd:ef:
         4f:10:b7:96:1c:16:87:4e:0b:dd:db:1b:6f:30:e0:fd:36:5c:
         71:82:31:4b:b3:f2:d9:12:73:2c:55:d8:8a:58:1e:30:f6:2a:
         e3:53:e0:d7:dc:b1:5c:a8:f6:94:77:3d:4d:10:84:a5:c0:d9:
         1c:36:a4:38:2f:41:1a:43:8c:d7:25:27:53:d0:80:93:fc:7a:
         b4:21:b9:93:d9:12:6e:d7:48:6d:d8:99:c2:f8:fe:af:6e:43:
         9a:a2:8d:b3:db:65:28:7f:fb:b7:91:a2:1f:ef:9e:ec:9d:ce:
         b7:f9:3a:0a:c2:96:ed:8f:4c:a7:81:53:61:e3:4c:f7:b8:0f:
         ac:2a:b1:3f:32:1e:95:0b:ac:b4:4d:8e:57:d9:c3:a5:b3:7e:
         e9:ac:5d:12:a5:c2:c7:76:7f:0f:ae:65:13:fe:92:bc:27:ac:
         46:76:db:7d:a0:ca:e6:f6:6d:c6:6d:62:e4:ce:22:7d:50:ad:
         b9:0e:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:48 2026 by rpki-client