Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File:                     28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier:          X1XIjX4Nx4IPJna7TE/yArpCT0Yu3fR2yIkFUkJMP9g=
Subject key identifier:   0C:CB:A0:8F:4C:CC:84:6F:81:B5:CD:14:88:96:18:93:0D:31:70:49
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       019D27720888112BD16581EEEE83D4DCB1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number:          175A
Signing time:             Thu 26 Mar 2026 00:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:17 +0000
Files and hashes:         1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: Og1EsBn0hVVtAz6Nk+EdLGDOVGcASpKmhaiA7r5qcsw=)
                          2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:08:88:11:2b:d1:65:81:ee:ee:83:d4:dc:b1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Mar 26 00:01:17 2026 GMT
            Not After : Mar 27 00:01:17 2026 GMT
        Subject: CN=0ccba08f4ccc846f81b5cd14889618930d317049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:47:97:1a:85:6c:dd:fc:70:11:82:d1:c4:
                    a9:1a:13:99:d9:6e:02:9c:2c:c8:6e:55:91:4b:39:
                    96:25:02:d3:81:2b:dd:16:ff:04:48:7f:6e:00:13:
                    f2:75:fe:bd:ab:05:22:6f:e2:5b:02:ce:23:e8:00:
                    75:b2:9d:0e:8b:f2:46:82:a7:c3:0e:a3:ed:9a:ab:
                    54:3f:a6:2c:2d:ad:b0:df:55:06:73:57:d2:c5:8a:
                    83:5c:48:dd:e4:3a:60:49:ac:d8:55:13:2a:d2:78:
                    b7:c1:19:fe:f8:82:ac:66:46:5c:f8:38:c3:1b:50:
                    fa:7b:8c:47:ea:40:fb:2e:ac:2d:b0:25:e5:b4:99:
                    ce:db:a3:7f:b4:9b:e1:4b:7e:57:9e:1e:1f:77:40:
                    1a:26:43:aa:4f:89:ba:eb:4e:4a:50:2f:c1:bd:8b:
                    25:6b:2f:f2:63:c9:6f:93:27:5b:73:61:2a:91:c6:
                    af:3e:4a:62:db:4f:af:b1:f2:14:a1:3a:83:08:2f:
                    7a:e9:7f:ff:e9:de:6c:7d:03:a8:12:98:06:a3:26:
                    50:be:d2:04:f5:b9:f3:73:cc:e0:00:3a:4e:8d:0d:
                    f2:19:3a:bd:5c:48:71:c5:06:a2:76:70:53:1e:3d:
                    e9:99:3b:71:ae:87:5b:be:05:cf:48:ac:7c:2b:90:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:A0:8F:4C:CC:84:6F:81:B5:CD:14:88:96:18:93:0D:31:70:49
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:d2:1e:89:0d:b7:96:76:4a:e6:fb:80:b1:81:00:bb:fa:
         16:10:86:82:bf:13:c0:c7:22:71:69:57:8e:fc:58:83:4a:a5:
         5a:e7:95:30:d7:1e:58:d3:d8:c6:ca:a2:d9:ae:d2:2e:15:17:
         b6:f9:e2:75:67:20:30:26:22:d1:26:0c:41:20:e8:28:6a:c0:
         b0:83:d2:28:54:f2:f0:70:7e:7c:f3:11:71:19:0e:69:18:67:
         44:79:4f:44:83:c4:38:c0:ef:9b:6e:e4:22:ed:00:bd:56:42:
         3d:40:b0:d5:3a:34:fa:97:af:62:d0:96:12:c6:f5:13:4c:48:
         68:af:12:8a:55:96:0c:be:09:18:fa:75:c5:da:73:b0:75:47:
         4e:f9:a6:ee:e7:c9:e4:8e:49:b2:b0:e0:86:43:b7:1c:db:17:
         32:d4:3b:e0:d0:c2:3c:d0:49:19:1b:0b:5e:03:69:f8:7c:af:
         27:d5:6a:e1:3a:07:b1:2f:92:3c:92:0c:58:23:17:13:22:d3:
         47:03:98:53:29:8d:71:00:1f:cc:ef:93:78:0f:c6:28:44:31:
         62:f8:20:ca:9f:39:b5:2d:21:05:7b:4a:5c:19:7b:3f:51:e6:
         d8:70:61:ef:1b:a6:ec:ca:e4:22:02:1c:ba:c6:ef:ab:a7:16:
         3f:da:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:38 2026 by rpki-client