Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File:                     4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier:          5RgErmwITDT1cEAgEHTLXyJDGrQr1kLMBUo+Aa2OoVY=
Subject key identifier:   E3:EE:36:AA:FC:59:77:16:82:50:45:BA:74:6D:B3:B1:2C:EE:2C:2F
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       019D2628A0461524FBC8D3335A9D3D10EC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number:          0779
Signing time:             Wed 25 Mar 2026 18:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:29 +0000
Files and hashes:         1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: 3o6QJwmWuZ9fupQg4lNJ2wbaO7yPN5S61bVg5XH9+t4=)
                          2: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
                          3: wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (hash: hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:a0:46:15:24:fb:c8:d3:33:5a:9d:3d:10:ec:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Mar 25 18:01:29 2026 GMT
            Not After : Mar 26 18:01:29 2026 GMT
        Subject: CN=e3ee36aafc597716825045ba746db3b12cee2c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:64:ac:b0:d2:1b:c1:1d:82:20:a0:5a:ab:
                    f6:85:e3:21:d0:2d:5b:19:f8:3e:8f:a0:c6:f6:6c:
                    53:82:92:d6:eb:82:aa:fe:f7:e3:48:12:98:6d:10:
                    bd:bc:3e:7f:7d:da:10:11:c8:13:b0:2f:3b:d1:95:
                    4d:c6:5e:0e:aa:92:9f:ee:3c:3d:ed:a9:ab:8b:1b:
                    62:38:1c:b6:bf:d0:59:12:2b:dc:f1:ef:ba:22:cd:
                    0f:ad:7a:49:bb:77:6a:7f:ce:b3:72:f9:dd:86:94:
                    00:27:14:3e:2a:f4:5b:0d:4f:a6:3a:12:94:46:d6:
                    1f:be:c1:23:f8:f7:0f:34:2e:94:d8:3d:7f:c6:96:
                    ad:f7:51:f0:24:13:d0:9f:56:4b:d0:93:d1:eb:c7:
                    f4:d4:26:5e:78:2e:3e:20:da:6e:04:07:be:31:83:
                    88:ed:cf:a0:cc:e3:68:b9:7b:c1:12:7d:1f:20:45:
                    83:4b:45:50:71:64:71:5c:0b:f0:07:ed:c5:bd:91:
                    bd:ce:d7:c0:b0:59:e7:28:45:19:4e:aa:10:a0:fc:
                    4a:2c:48:95:f3:b5:7a:b8:b0:c5:38:e6:04:43:40:
                    ed:60:f3:fb:70:e5:39:b7:cf:b8:78:e9:c8:b6:8a:
                    5c:8e:d1:8f:48:b6:ab:a5:8d:08:1d:0b:1c:e2:dc:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:36:AA:FC:59:77:16:82:50:45:BA:74:6D:B3:B1:2C:EE:2C:2F
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:8d:63:55:0c:9c:d1:4d:94:9a:60:35:cb:86:17:d9:87:
         9c:72:56:43:31:15:65:ae:6f:be:e0:e8:b9:7c:2c:eb:0e:65:
         b3:a2:a2:6c:1e:c9:e1:d4:16:af:1b:7d:23:4b:b3:c8:c8:ef:
         28:34:eb:63:f2:d5:19:a8:5c:8e:88:24:0b:d1:8e:ec:97:d5:
         37:04:19:75:af:b4:3d:bb:82:a6:fe:bd:54:a2:38:e3:ad:c6:
         ab:e5:8a:1c:0c:21:ee:3f:13:98:ea:f4:c8:fe:38:9d:e7:b6:
         8f:28:ef:e3:f7:27:fb:fc:15:33:81:20:34:40:b7:ac:40:c1:
         68:1b:b3:02:97:ac:9c:b2:5e:db:d7:6f:f2:0a:b2:35:35:6c:
         a1:e2:8d:47:dd:b3:2f:b5:ea:5c:29:b9:1d:2e:35:2a:d8:bb:
         c8:fd:2c:be:ed:84:ab:0d:cf:e2:6c:3b:da:1d:0f:c9:a5:3a:
         ed:3c:97:72:8c:4e:95:b5:41:36:35:e1:21:e8:d6:5f:c9:a2:
         80:3c:a5:a4:01:88:9e:cc:fe:a1:2c:e3:ca:08:cb:26:24:56:
         64:1e:bc:4a:f3:c3:9f:55:0d:53:54:13:10:a6:87:c1:c8:dc:
         78:75:82:ce:d3:fd:12:0b:73:29:00:db:5d:ff:88:0a:ed:82:
         d9:a8:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:26 2026 by rpki-client