Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File:                     CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier:          +EIBV0xCWtj7YKYZPv37Kd0FMoOzVscG/naismTZ/nk=
Subject key identifier:   7E:02:A7:63:A3:A8:AD:0C:2C:D5:96:13:00:2F:25:A9:BF:C0:FC:4B
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer:       /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial:       019D27E06AECB105749AB94977467F19E131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number:          0615
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: thCGaxA7PyoYXUn7CPzyh4TOsMXqzopSOGEwLvuiUVk=)
                          2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:6a:ec:b1:05:74:9a:b9:49:77:46:7f:19:e1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=7e02a763a3a8ad0c2cd59613002f25a9bfc0fc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:00:ca:dd:bb:ce:01:50:63:a4:54:05:71:
                    0c:44:23:90:42:af:10:e4:48:9f:b2:c3:e6:70:5b:
                    e8:eb:8b:e2:f4:46:e4:1f:d7:50:2d:ea:a9:71:03:
                    cf:f0:17:72:45:db:d5:53:81:df:19:d2:ae:a3:c3:
                    37:ba:ee:73:e7:e8:8d:6d:8c:53:64:1d:f9:ec:9c:
                    95:46:b1:2b:af:8b:85:09:f5:f4:6a:0d:ed:ca:e6:
                    2a:de:cc:17:00:1a:9a:21:98:39:3e:de:4e:5c:be:
                    b5:31:9b:9c:92:d9:2a:4a:25:7a:8a:31:c2:04:b4:
                    b7:ca:b2:0b:20:c6:e0:96:d4:2d:d6:ae:af:40:8d:
                    7a:8a:b5:f7:b3:fe:b6:ac:43:19:92:a0:13:84:df:
                    0a:d3:31:5f:c0:19:72:fe:d0:27:6b:ca:86:ea:fb:
                    bd:d4:80:8c:f2:17:cf:29:03:85:fc:3f:be:e6:d9:
                    09:41:ab:c0:c8:03:f8:a3:b8:ee:45:ab:af:f6:ae:
                    ed:5b:97:22:a4:2e:09:f6:a0:32:dd:94:ce:5e:36:
                    a9:cb:55:d6:a7:59:90:56:b6:b6:38:6b:3e:32:b2:
                    33:62:a0:09:99:4a:d7:69:1f:39:5d:c4:27:e5:ba:
                    22:a3:be:b0:a5:2a:a2:fd:c3:77:dd:a4:01:1c:69:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:02:A7:63:A3:A8:AD:0C:2C:D5:96:13:00:2F:25:A9:BF:C0:FC:4B
            X509v3 Authority Key Identifier:
                keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:0c:e3:2d:01:dc:fc:bd:c5:d1:a7:9d:c2:93:e3:9e:47:
         0b:67:31:e6:e1:0c:80:0a:45:f9:f5:9d:d4:2e:d2:c9:c6:d6:
         b4:7f:76:2b:35:85:cf:23:60:85:9d:7c:77:9c:f0:b6:c3:cc:
         0b:f9:3c:a5:d9:fa:82:50:f3:44:8f:a6:1e:e3:81:28:fc:29:
         b5:c7:9d:9d:81:28:01:1c:a8:5c:45:8b:27:d6:a7:ae:9a:94:
         dc:ff:b1:8b:29:d0:88:04:27:da:e9:c4:35:87:10:15:04:50:
         47:ed:57:89:d7:d6:67:7f:1a:8f:7f:aa:5e:f6:30:28:8a:dd:
         92:fc:19:f1:23:06:2e:61:c9:92:04:69:d9:07:6d:93:7b:df:
         e3:4d:38:25:29:e5:46:f7:18:10:26:9b:49:c8:41:5d:eb:fa:
         5f:bf:8e:43:ad:b6:95:e9:16:71:2c:49:96:35:1c:fb:80:c4:
         4d:ff:ea:ee:f4:6e:ee:dd:89:2a:f5:bb:c2:04:70:fe:57:59:
         34:00:4b:0a:24:00:67:2a:1f:56:81:93:45:a9:05:32:c6:04:
         c2:d7:4f:b7:5d:aa:b1:84:2d:4b:b1:6a:c1:56:fa:94:3e:81:
         05:69:93:6b:9e:b8:7a:42:da:5d:57:35:09:84:15:9b:79:11:
         80:98:a8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GrssQV0mrlJd0Z/GeExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1
ZjkyNjgwHhcNMjYwMzI2MDIwMTUxWhcNMjYwMzI3MDIwMTUxWjAzMTEwLwYDVQQD
Eyg3ZTAyYTc2M2EzYThhZDBjMmNkNTk2MTMwMDJmMjVhOWJmYzBmYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00sAyt27zgFQY6RUBXEMRCOQQq8Q
5EifssPmcFvo64vi9EbkH9dQLeqpcQPP8BdyRdvVU4HfGdKuo8M3uu5z5+iNbYxT
ZB357JyVRrErr4uFCfX0ag3tyuYq3swXABqaIZg5Pt5OXL61MZucktkqSiV6ijHC
BLS3yrILIMbgltQt1q6vQI16irX3s/62rEMZkqAThN8K0zFfwBly/tAna8qG6vu9
1ICM8hfPKQOF/D++5tkJQavAyAP4o7juRauv9q7tW5cipC4J9qAy3ZTOXjapy1XW
p1mQVra2OGs+MrIzYqAJmUrXaR85XcQn5boio76wpSqi/cN33aQBHGmI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Cp2OjqK0MLNWWEwAvJam/wPxLMB8GA1UdIwQY
MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt
ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl
LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVYM4y0B
3Py9xdGnncKT455HC2cx5uEMgApF+fWd1C7SycbWtH92KzWFzyNghZ18d5zwtsPM
C/k8pdn6glDzRI+mHuOBKPwptcednYEoARyoXEWLJ9anrpqU3P+xiynQiAQn2unE
NYcQFQRQR+1XidfWZ38aj3+qXvYwKIrdkvwZ8SMGLmHJkgRp2Qdtk3vf4004JSnl
RvcYECabSchBXev6X7+OQ622lekWcSxJljUc+4DETf/q7vRu7t2JKvW7wgRw/ldZ
NABLCiQAZyofVoGTRakFMsYEwtdPt12qsYQtS7FqwVb6lD6BBWmTa564ekLaXVc1
CYQVm3kRgJio2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:05 2026 by rpki-client