Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier:          loveMxXSu8CVE+oQ3mdVHKhPDbV6kiVQAlidfxq3odE=
Subject key identifier:   06:FF:D4:85:E9:47:21:08:6C:42:ED:CE:75:BE:24:67:C7:BD:1A:F9
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer:       /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial:       019D2583753FAD86BEABF2DDB970AD929364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number:          08DF
Signing time:             Wed 25 Mar 2026 15:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:05 +0000
Files and hashes:         1: IHQGYZycBDyAVTPAum8XIrj47kQ.roa (hash: S11IX6oJmfauUmzmopL+w4IEvy2f52JVhN8t0Q5+tAM=)
                          2: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: IOTbeskmKoM0jNc9nCrI9xc7M/zXYuno8FHlixVQ7NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:75:3f:ad:86:be:ab:f2:dd:b9:70:ad:92:93:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Validity
            Not Before: Mar 25 15:01:05 2026 GMT
            Not After : Mar 26 15:01:05 2026 GMT
        Subject: CN=06ffd485e94721086c42edce75be2467c7bd1af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:bb:83:40:24:14:55:15:76:3d:d2:8c:71:
                    f8:ca:80:0f:8f:77:90:97:db:13:8a:0e:14:21:69:
                    e3:17:de:e3:24:87:e0:f1:a1:05:d2:50:9d:fe:d1:
                    aa:4f:37:35:c6:23:b2:11:3e:de:02:64:a3:35:b0:
                    60:f8:19:ae:00:5e:7a:ba:3b:aa:e2:2f:d5:98:d9:
                    d7:95:22:7f:b9:08:fb:9a:bb:bb:5d:12:c5:e4:91:
                    e5:1a:ae:b6:b8:43:7b:2c:21:42:17:ab:b9:d9:67:
                    1e:47:f1:89:6f:05:8c:a2:24:8a:7e:1c:e1:76:b1:
                    38:05:e6:3d:18:fc:68:0e:d4:7b:11:90:50:94:7b:
                    f9:75:d3:db:dc:ad:e5:ff:d6:ab:cd:61:52:e1:ef:
                    76:dd:cd:a4:20:0f:d3:40:3c:ad:79:7e:3c:86:43:
                    c0:a2:5d:61:80:02:29:23:31:06:44:14:14:99:8c:
                    3c:d2:0b:31:89:2d:e2:74:04:7c:f6:97:27:ad:81:
                    95:81:c8:c3:01:51:cf:6c:df:d0:33:5f:1c:8b:5c:
                    e4:65:fc:23:8d:88:17:a9:6a:51:a0:ab:96:51:25:
                    09:e5:11:9e:8f:e9:fc:98:26:dd:79:4d:d6:ae:37:
                    8d:04:76:cc:3d:f4:24:d9:2f:34:fa:c3:50:2a:15:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FF:D4:85:E9:47:21:08:6C:42:ED:CE:75:BE:24:67:C7:BD:1A:F9
            X509v3 Authority Key Identifier:
                keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:a3:67:a3:03:89:9c:23:00:66:a2:fe:a2:df:fb:a3:2e:
         b8:73:a8:e4:fb:5a:d0:f0:b2:53:53:c0:25:aa:0f:87:92:74:
         db:4a:90:d7:51:b6:c4:bc:09:64:67:13:81:ca:4e:95:5b:e6:
         86:00:e3:de:d8:df:ff:c7:49:e5:f9:2b:ae:09:7a:6f:97:cb:
         b2:fc:54:38:8d:99:03:b7:f3:0e:32:65:cf:19:47:17:00:3e:
         22:ef:9b:5c:2d:43:65:11:62:6f:82:b4:c6:1f:3c:c1:a8:a4:
         51:d6:10:26:0a:53:6e:b6:71:6c:c7:55:63:3d:59:01:a5:03:
         53:3f:af:d8:42:7f:96:e0:87:7d:94:7a:34:db:4a:7a:e8:13:
         aa:4c:f9:a5:af:00:02:62:6b:b6:11:e1:c7:4f:86:63:7c:57:
         7a:4d:f2:be:6c:68:bd:2d:f8:7f:5d:18:be:fd:41:8c:84:4c:
         67:e7:30:76:ec:ad:11:88:ce:58:8d:bf:8f:b8:33:e2:c7:88:
         fd:8e:ad:83:0f:b9:30:27:91:f0:5b:9d:04:85:97:14:5c:29:
         42:3e:84:bb:11:ee:43:13:43:b0:bb:80:d4:3e:41:19:f8:f2:
         4f:7e:cd:cd:d5:0d:86:8a:42:53:2a:17:53:13:a6:23:8a:fc:
         63:41:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:25 2026 by rpki-client