Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          w4/BhU6wgeMBu4wFnAr0nmBhR9lMh8+pCz8GQmx9Lm8=
Subject key identifier:   66:6A:6C:DB:D4:7D:17:7C:DC:03:AF:75:6C:35:0E:4E:75:4E:C6:7E
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       019D277239FE7525CD537118DF0713FD20EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 00:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:30 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: CSh9IyCpKCLCduQLrS1WA0T1FSijgA8i78lu9XJh9xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:39:fe:75:25:cd:53:71:18:df:07:13:fd:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Mar 26 00:01:30 2026 GMT
            Not After : Mar 27 00:01:30 2026 GMT
        Subject: CN=666a6cdbd47d177cdc03af756c350e4e754ec67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:38:6a:17:49:9d:0d:95:f1:2b:ad:a7:31:
                    2a:fb:40:b9:37:28:f4:79:50:60:48:de:aa:25:52:
                    82:4a:8d:81:40:33:f2:c2:bc:cf:3b:ed:07:ab:37:
                    85:64:21:58:17:93:9a:f1:01:9b:4b:ac:fe:db:6b:
                    ec:20:2f:c4:54:bc:2b:9d:f9:41:93:87:f1:7e:af:
                    f9:1c:f0:90:e3:34:9e:cc:fe:fe:4a:9c:73:9c:5f:
                    25:0c:1e:d4:d0:ba:5d:19:ee:44:5c:e6:79:b1:7b:
                    38:4c:28:eb:a3:c2:4b:a3:93:2e:50:2a:de:15:78:
                    23:c6:f5:e7:c2:9b:56:09:7e:b6:53:bb:12:a3:27:
                    e3:3e:a2:87:f1:a9:99:cb:14:bb:33:66:e1:8b:7c:
                    92:a6:28:26:a7:15:24:cb:80:a6:85:69:14:a9:6e:
                    87:87:7c:4a:ba:08:b4:d2:d3:08:f0:16:09:c7:33:
                    ce:e4:26:63:5c:a2:60:b1:11:c5:dc:4f:09:37:42:
                    c8:0f:70:09:e8:59:91:af:af:59:6d:a8:1e:80:96:
                    2c:77:04:2c:09:26:f4:35:5e:97:a1:08:63:13:25:
                    f2:98:b3:0b:35:32:86:82:d9:ca:e2:4e:1a:6a:4d:
                    81:b4:66:0c:7f:bf:6b:04:6a:b7:19:12:40:d1:d6:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:6C:DB:D4:7D:17:7C:DC:03:AF:75:6C:35:0E:4E:75:4E:C6:7E
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:93:32:a2:d9:2b:e1:20:fc:59:20:e9:00:0c:44:44:85:
         88:a4:3f:12:12:58:9d:fc:09:86:98:05:c4:8c:d4:27:0a:7b:
         8b:b3:17:33:e3:a3:63:8e:dc:d1:e1:02:73:f0:40:c2:b7:8d:
         98:01:d6:20:0d:5b:1b:ed:ac:03:64:c2:5f:94:37:9c:8d:33:
         37:53:02:e1:75:94:81:c1:df:14:8c:94:5f:70:e3:62:bb:8f:
         b1:27:15:a2:71:44:ca:6c:d5:90:b3:6c:94:94:7d:19:92:f2:
         ed:bf:ac:6e:29:71:f6:9c:e6:68:f1:67:71:45:68:0c:4e:5c:
         92:33:5a:ae:cd:e2:2d:32:49:2b:69:60:e7:30:19:a9:fe:ab:
         21:b4:fb:16:ab:3f:50:1f:60:65:d6:b9:bb:40:6b:39:d6:21:
         83:9f:bf:74:27:52:6d:28:f6:14:4c:77:00:dd:bb:84:7d:1e:
         51:57:e6:4f:fc:05:d0:43:ce:67:26:d0:05:03:44:b5:47:9b:
         ba:26:56:ab:54:3f:86:bf:64:e0:aa:a6:2d:cb:27:36:26:41:
         db:93:a5:f5:70:db:b8:c1:54:09:3d:17:ed:88:f4:03:fa:87:
         fe:0e:16:69:67:c2:65:8e:77:8b:0d:57:8a:90:fb:6b:66:cb:
         4e:4a:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:31 2026 by rpki-client