Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File:                     e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier:          w3WLoOjTnWe73EFyrAEfhf3x/kUaj8ZAYv/7ze35AX0=
Subject key identifier:   0E:38:75:8D:46:06:C9:E2:A8:4F:94:63:62:07:58:98:B4:AE:C7:DC
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer:       /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial:       019D28F285EDB63AA18258651768137A8BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 07:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:15 +0000
Files and hashes:         1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: EDUSSj6Ta3NH5IdkBuTzF+3xgS/fpR6k2RRnn2G5atY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:85:ed:b6:3a:a1:82:58:65:17:68:13:7a:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
        Validity
            Not Before: Mar 26 07:01:15 2026 GMT
            Not After : Mar 27 07:01:15 2026 GMT
        Subject: CN=0e38758d4606c9e2a84f946362075898b4aec7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:72:32:27:b3:0d:06:02:5f:a7:de:de:6f:
                    15:f5:3a:55:c2:12:55:e7:c1:f4:1d:c7:37:f3:7f:
                    d0:9c:d9:26:c4:99:9a:d8:95:e9:b1:67:21:72:55:
                    23:4f:97:13:f1:5b:18:ea:dc:fa:c5:55:98:e8:27:
                    f1:1f:b3:c0:d6:af:66:db:de:4d:46:09:78:a5:b1:
                    7e:8e:e4:3b:b0:de:06:c9:f5:db:77:8d:ee:66:65:
                    98:40:c4:fb:ea:22:3b:c3:ad:65:ff:77:d8:e9:da:
                    a9:a0:cd:3c:39:6d:28:03:7d:d8:3f:b1:77:b1:88:
                    96:98:9e:2e:33:0b:66:9c:e0:40:97:a1:8d:7e:b3:
                    39:9f:2c:23:1e:43:37:a4:89:22:82:7d:31:03:4c:
                    b1:ff:c4:75:06:c7:49:6c:e9:c1:a4:ad:67:b5:c8:
                    78:0d:39:60:f7:24:97:eb:3e:c0:bb:be:92:d0:59:
                    51:eb:2d:01:e7:4e:59:b2:f4:a6:53:a3:95:93:68:
                    90:df:aa:30:a3:e6:2a:d6:d3:6f:3a:26:64:f4:ad:
                    90:99:c9:96:da:7d:f6:25:18:24:3d:cf:08:fd:d6:
                    07:4e:b7:80:9a:72:7d:33:4e:d5:0d:ed:8f:0e:cf:
                    58:b5:96:8b:b3:c9:55:d1:51:c7:a0:e6:2e:23:3f:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:38:75:8D:46:06:C9:E2:A8:4F:94:63:62:07:58:98:B4:AE:C7:DC
            X509v3 Authority Key Identifier:
                keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:ec:4c:57:58:51:09:d5:cc:6a:eb:20:9a:36:50:a1:de:
         9c:91:7f:b4:69:45:36:74:bc:8d:5f:b2:68:eb:5b:11:01:54:
         a6:0b:fc:a7:6a:3a:1f:2b:8d:c0:30:25:8a:2f:ac:2b:9a:56:
         25:88:df:3c:0b:b5:c2:f2:b4:3d:2a:87:70:c5:e6:d1:25:51:
         97:d6:f7:ca:c8:8c:cf:f7:da:ac:05:86:d5:71:ba:c0:51:03:
         af:14:ff:e0:54:ad:a0:b8:75:19:1b:5b:a0:b5:ba:33:f4:ad:
         0a:78:8f:34:60:95:74:ed:da:63:c3:a9:51:04:dc:e4:22:09:
         04:29:b2:e4:d5:1c:2c:77:b5:ac:49:ab:ea:61:1d:da:fb:ec:
         fe:95:f0:8d:39:b1:b4:8d:04:11:c6:30:6f:f2:af:ac:a6:a2:
         41:56:2e:bc:f9:a0:ed:55:50:28:8f:e7:14:9f:d7:a9:39:2c:
         6c:99:53:3f:73:9d:c8:73:8d:63:63:4d:f3:f4:7f:2e:f4:59:
         65:67:29:1c:5e:ee:a6:da:a8:34:9f:11:6d:a0:59:a6:a6:f7:
         52:80:35:ec:0e:73:92:6c:0e:a4:99:4b:78:97:aa:ec:ef:b4:
         7b:b6:5d:38:3e:48:64:1d:03:49:9d:fc:81:03:a5:19:da:75:
         87:68:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:36 2026 by rpki-client