Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
File:                     T1HrSeFu3RhEgrvMFjExdFOV9GI.mft (raw, json)
Hash identifier:          NTq26VVJzh7FVrltE1Qic5pH8ix4kw7dFo3Yc9WwvmA=
Subject key identifier:   4B:E3:24:6A:DA:14:1E:97:8E:28:0A:73:79:B4:57:5F:A5:6C:CB:D1
Authority key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Certificate issuer:       /CN=4f51eb49e16edd184482bbcc163131745395f462
Certificate serial:       019D3375CBD115BDDEDCA91158627E82DFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
Manifest number:          0E
Signing time:             Sat 28 Mar 2026 08:00:50 +0000
Manifest this update:     Sat 28 Mar 2026 08:00:50 +0000
Manifest next update:     Sun 29 Mar 2026 08:00:50 +0000
Files and hashes:         1: T1HrSeFu3RhEgrvMFjExdFOV9GI.crl (hash: m2y7Cjo0K43McuFcwZupVST47R9aYf2Zp6kyaDjgl8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:75:cb:d1:15:bd:de:dc:a9:11:58:62:7e:82:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f51eb49e16edd184482bbcc163131745395f462
        Validity
            Not Before: Mar 28 08:00:50 2026 GMT
            Not After : Mar 29 08:00:50 2026 GMT
        Subject: CN=4be3246ada141e978e280a7379b4575fa56ccbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:23:27:75:71:5b:fa:49:da:14:cb:b9:a7:
                    04:42:1a:9d:fc:ad:5d:e0:31:51:f4:52:e3:a0:64:
                    27:23:df:26:47:21:c5:51:9c:af:35:50:85:6b:da:
                    63:bd:ef:6a:92:fb:9f:eb:9e:9f:bd:8b:d2:e2:1b:
                    0b:f8:99:c0:af:e9:e7:f8:c6:03:d8:89:e8:a2:4e:
                    b1:8b:91:aa:9d:56:92:4c:e8:ef:fb:54:1f:48:8e:
                    b3:9f:7a:58:65:17:e4:2f:d3:c7:21:37:ff:d4:b4:
                    b6:47:28:bc:5c:bb:a5:f6:3a:03:b3:1c:c3:6c:75:
                    f2:4d:61:5d:52:76:aa:31:22:42:81:ec:81:55:02:
                    3e:52:87:92:04:ef:b4:4e:8d:91:70:95:63:be:a3:
                    7c:57:6a:35:e2:be:a6:aa:19:a1:ce:4a:70:89:5b:
                    86:c4:e2:53:bb:20:bd:ce:64:61:44:64:69:fc:69:
                    0d:5c:d0:ae:4a:7b:bb:8d:a8:bd:8c:9e:21:c3:b0:
                    11:51:2e:55:5e:5f:30:42:29:a0:02:8e:7a:01:fe:
                    fe:b9:72:24:f4:28:20:7a:19:76:aa:02:f3:a3:c0:
                    b0:1f:79:76:5d:aa:1b:c1:73:9f:73:b5:1e:3e:82:
                    ba:93:f2:89:77:4f:4b:74:04:e6:fb:0c:7d:ab:9a:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:24:6A:DA:14:1E:97:8E:28:0A:73:79:B4:57:5F:A5:6C:CB:D1
            X509v3 Authority Key Identifier:
                keyid:4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:92:8b:24:92:e6:da:4e:9e:cf:cf:89:c5:25:eb:d2:2e:
         68:10:26:b5:a6:75:1e:44:01:e9:79:36:ac:55:6b:24:45:54:
         ea:93:2e:59:0f:a2:51:dc:8e:8f:27:97:c9:8e:aa:c3:db:11:
         2e:a0:64:dd:1b:cd:f4:f7:d1:56:cd:2f:10:d3:2a:0e:3e:98:
         e7:5a:07:8e:cd:5b:9b:9e:f5:0c:41:80:48:af:3c:47:4f:e2:
         80:3b:a3:66:ee:6b:b2:7b:8c:15:53:3f:0b:ec:59:b0:4a:01:
         b1:60:57:be:69:c6:bd:1d:1e:8a:0b:d1:0e:e5:c0:a2:0c:5f:
         d1:f1:85:1b:37:35:2b:aa:4f:0a:d9:09:6d:1f:1e:49:f9:ba:
         3c:fa:74:ab:64:bb:c2:4b:a8:06:4d:b2:5f:81:c8:40:4b:d7:
         00:ee:87:a6:a9:1d:0a:fc:c1:8c:f0:99:fd:c2:9d:c0:76:e6:
         1b:58:87:88:b8:dd:3d:05:b3:1a:c1:4d:d0:a2:a3:6e:e5:8c:
         48:73:cd:2c:34:51:74:e3:16:2f:59:f1:cf:64:6c:23:2f:2a:
         18:1f:da:05:d1:4f:b2:d4:e7:e7:6f:37:4a:3f:47:b7:50:85:
         c3:1a:24:f9:2c:ac:5b:41:0a:0b:d8:57:d9:d8:46:eb:09:61:
         f2:54:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:08 2026 by rpki-client