Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          /uLGMX2ri3y3KDP+sVNAH/MdR8QNSmjSjUhaZvaGhgA=
Subject key identifier:   0E:49:95:1D:A8:93:65:A3:91:D7:F9:79:A4:EB:B0:FD:B5:26:86:E7
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       019D25F1653A1334637ECB66A07EE6F69476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          0751
Signing time:             Wed 25 Mar 2026 17:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:10 +0000
Files and hashes:         1: hKL5QitdPai5IwAtGM4Ywcw5ujM.roa (hash: EwiyCLBBZHnOEl+iUCVn9fJpMBkap4IApaR4l/qmt84=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: 37rdb9VDKjnD5tYdOIs+/SOcfGilFPMJSl90gcI4mdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:65:3a:13:34:63:7e:cb:66:a0:7e:e6:f6:94:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Mar 25 17:01:10 2026 GMT
            Not After : Mar 26 17:01:10 2026 GMT
        Subject: CN=0e49951da89365a391d7f979a4ebb0fdb52686e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:74:76:80:00:98:27:94:dc:29:ca:d6:09:
                    16:4c:e7:07:63:71:a2:cd:49:fc:27:1a:86:4f:35:
                    e0:2c:04:d3:1a:b5:df:96:1a:24:74:95:50:03:42:
                    b1:69:e0:d3:32:ce:87:fd:28:84:c9:c6:56:c0:85:
                    bf:f9:9a:4c:bb:f9:9c:f9:85:6c:7c:7d:41:d4:f2:
                    7f:33:18:fb:0d:04:48:1a:51:93:2d:3e:ab:2b:52:
                    92:b2:08:09:d8:b6:5c:46:e7:be:36:da:ef:b7:b1:
                    53:43:16:11:87:b0:3c:9b:ce:ee:f8:53:77:ea:79:
                    e4:cc:47:79:1d:83:39:d8:56:6e:7b:dd:63:ca:a3:
                    27:6e:19:e7:5a:81:4a:e6:e2:d6:c7:d1:72:b8:e5:
                    7c:64:66:60:37:d3:74:44:72:65:31:8f:d4:0a:e8:
                    37:0a:6e:0b:97:1d:db:75:5c:45:ef:4f:4f:e4:30:
                    59:b1:e9:35:5e:2e:55:d6:ea:8b:c2:72:d4:c6:38:
                    0b:84:ec:61:89:26:0e:d6:9f:54:80:c7:87:8f:52:
                    0e:26:2a:6e:03:bb:1c:4d:d9:56:34:a7:69:51:21:
                    03:47:3f:f7:11:b9:8c:19:6c:1f:3b:b9:9f:79:f8:
                    3b:41:4b:c9:24:58:dd:a4:9f:dd:cf:9c:64:e2:91:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:95:1D:A8:93:65:A3:91:D7:F9:79:A4:EB:B0:FD:B5:26:86:E7
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:86:37:10:59:d1:39:09:d1:22:8e:e4:e5:84:20:8d:a6:97:
         41:34:fe:fa:c1:17:f6:74:20:e5:c1:be:b5:bf:bf:a4:84:11:
         45:f3:d7:3a:52:7a:0f:31:a0:e2:4c:28:17:f5:8f:da:6e:59:
         cf:66:30:63:af:e3:0e:23:d4:6c:1d:ad:6a:1f:1f:b0:5c:d8:
         28:fc:33:89:fb:db:6d:6a:b2:7b:9e:85:0f:ac:df:0a:3b:af:
         a3:82:d2:b5:ce:fd:3b:d1:97:88:2d:35:4d:8b:fc:35:9b:da:
         89:53:03:9b:a3:ff:e3:97:6e:de:01:98:f2:3e:a9:a8:75:e9:
         ee:ee:64:40:b1:59:b6:19:f8:46:9f:32:02:e0:95:de:9a:34:
         90:24:d1:3a:1f:cf:91:2b:ea:be:11:18:26:c2:88:d9:7f:ee:
         e6:e1:cc:32:ac:87:41:0d:2c:34:94:e6:95:ed:a3:10:c4:19:
         9a:e0:e0:bb:62:54:be:e9:29:5e:f1:12:8c:ac:50:aa:07:0e:
         71:e4:16:4b:0b:61:e0:e7:bb:8d:f4:5d:d8:7b:56:b9:91:f2:
         15:52:f6:a6:44:77:87:4e:42:b0:f2:34:09:9b:3f:7d:ca:10:
         1c:03:7f:93:c4:f0:0b:32:6b:4f:75:4a:88:70:20:64:5a:0a:
         a3:4a:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:53 2026 by rpki-client