Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File:                     OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier:          9db76RzMA8+cMy51IPr1KSWgGrpQnleyYQv/YyMHBvg=
Subject key identifier:   30:32:B1:9F:11:7F:B1:A0:62:8C:FE:5E:92:9A:10:B3:30:93:1B:01
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer:       /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial:       019D25F1F8CC90822AAC0EDAF12EAFC00594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number:          080A
Signing time:             Wed 25 Mar 2026 17:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:47 +0000
Files and hashes:         1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: OW34tvGbQqkOYwVf0mbJXdK2OJhGOMRo8pwL1JJDKMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:f8:cc:90:82:2a:ac:0e:da:f1:2e:af:c0:05:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
        Validity
            Not Before: Mar 25 17:01:47 2026 GMT
            Not After : Mar 26 17:01:47 2026 GMT
        Subject: CN=3032b19f117fb1a0628cfe5e929a10b330931b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:30:7f:14:ea:ac:1b:60:6b:19:85:ca:fb:
                    fe:52:89:99:73:a2:9d:fb:35:27:b6:f9:be:38:36:
                    66:5c:a7:48:b6:ee:c4:98:4b:48:c1:21:58:77:8a:
                    e2:79:5d:87:b9:8e:92:8a:3d:18:49:f0:61:ee:b5:
                    b1:ba:e0:c7:0e:83:23:26:2a:71:cd:ba:bb:a6:bf:
                    63:d9:f3:93:55:78:4b:c7:8a:ab:87:28:65:f3:0c:
                    0d:f8:be:a5:4e:c2:eb:e4:50:fd:fb:d3:13:69:d4:
                    9c:e6:e5:48:22:14:3c:26:1a:17:ff:60:ed:5f:26:
                    8c:a4:e7:4d:5a:cb:5c:12:06:f4:17:04:fd:c7:21:
                    b6:32:ae:7b:b4:37:c3:4c:84:53:11:91:f3:43:b7:
                    dd:9a:8d:e1:ba:0c:f7:d5:ee:cd:6c:b4:70:10:92:
                    21:e0:07:3f:a7:5a:06:a6:da:17:16:96:e0:04:47:
                    4f:b5:65:d6:86:db:69:e9:ab:d1:9e:60:19:00:16:
                    14:e5:a9:d6:31:3f:b5:e8:42:e0:74:5a:9a:12:60:
                    fb:48:42:c4:c3:cf:28:92:0e:1b:20:9f:2f:5c:02:
                    30:fa:4f:0b:a3:c8:b3:c7:e0:56:e0:8c:f4:5c:cb:
                    c3:12:78:d4:4a:c6:46:c8:a0:d4:8a:16:a2:5b:86:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:B1:9F:11:7F:B1:A0:62:8C:FE:5E:92:9A:10:B3:30:93:1B:01
            X509v3 Authority Key Identifier:
                keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:cd:4b:8e:3b:43:38:8e:d3:da:7f:11:6f:c4:8a:75:8f:
         b7:1d:94:68:28:32:d9:55:41:ca:16:a3:b4:77:49:bd:87:9a:
         cd:93:00:6e:da:36:9f:66:93:a4:0c:8d:5a:b8:df:68:19:10:
         70:9e:c8:37:41:8b:03:81:b6:5d:2a:f9:6a:d1:df:21:41:95:
         84:da:de:d3:4f:91:6b:c7:7d:b1:5f:3a:d1:e5:75:26:a1:18:
         f1:08:cd:56:6a:8c:ac:76:34:0d:c5:3d:36:06:b2:75:98:05:
         b9:f2:8e:86:25:e7:c1:58:44:59:29:75:34:df:ec:48:89:ee:
         6c:99:6e:89:e6:af:0f:10:85:50:57:5b:21:c0:19:10:b1:a9:
         f8:17:d6:6b:7a:38:d2:c5:84:b4:46:6e:b3:21:b1:3e:4e:b7:
         4b:50:ae:38:94:a7:ac:d9:47:bd:bd:1e:07:93:96:ca:58:fe:
         5e:06:f0:87:1d:21:32:f6:6d:ed:ed:83:21:b4:b1:a2:8c:48:
         f9:60:b5:81:f5:06:1e:0d:73:74:e3:5a:dd:c4:ab:72:6f:41:
         1e:29:b8:97:95:d8:ba:67:07:f7:0b:4b:69:f5:d3:5a:0e:15:
         fa:85:41:e3:5f:26:55:26:35:47:c8:75:da:30:2b:e2:75:23:
         18:b4:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:51 2026 by rpki-client