Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          GNftgDB6YNFgdc1jOzY1JIyiyjIEsKwHOjaihA3xhZU=
Subject key identifier:   D0:8B:CF:F0:40:01:01:41:FC:2E:81:C9:F9:17:84:66:AF:25:D2:55
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       019D34F5F40FB4106D7360AB7B529750547E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          07FE
Signing time:             Sat 28 Mar 2026 15:00:27 +0000
Manifest this update:     Sat 28 Mar 2026 15:00:27 +0000
Manifest next update:     Sun 29 Mar 2026 15:00:27 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: sy8ljH7Jjfyych6lv/5d8OaOcgPYxF45Gl2OdBPNiFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:f5:f4:0f:b4:10:6d:73:60:ab:7b:52:97:50:54:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Mar 28 15:00:27 2026 GMT
            Not After : Mar 29 15:00:27 2026 GMT
        Subject: CN=d08bcff040010141fc2e81c9f9178466af25d255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:b3:65:ff:7e:b2:a2:a0:ab:0e:cf:3b:68:
                    e6:1a:d2:b9:e8:24:50:16:ad:27:cd:5f:1f:41:31:
                    1a:cb:e2:28:b4:b3:2d:4a:7e:25:2f:f0:50:27:a9:
                    a4:0b:c9:49:1c:b0:a8:f4:64:c1:aa:93:38:f0:70:
                    7d:23:d4:ee:f6:cc:f3:ae:ed:83:e0:86:76:44:28:
                    bd:04:59:eb:06:8e:4b:72:b3:68:44:2c:82:c9:77:
                    02:b8:ea:bf:86:16:98:4e:00:ad:3d:f7:37:f3:bc:
                    ea:2e:a0:ad:ee:27:b0:bb:ec:4d:a0:d5:19:bf:6d:
                    95:78:24:b8:61:c9:22:7c:19:80:c3:2d:53:38:02:
                    8f:c9:02:d5:6d:f3:86:1d:1e:91:86:6d:fa:26:ea:
                    bb:fb:f8:6c:7d:54:b8:5d:30:17:6b:8c:d7:1e:42:
                    8f:eb:b1:6f:1d:4e:76:a8:c8:08:8f:e7:18:19:b0:
                    09:7b:dd:b8:f6:65:78:86:27:70:39:f9:80:ac:8a:
                    08:66:c2:a6:0e:d5:2e:d1:61:d5:9e:2b:bd:10:9a:
                    7f:46:25:40:3a:33:72:df:90:a9:bc:d7:22:4d:6d:
                    47:29:fb:11:5c:3b:51:6d:d6:be:c9:87:2b:4c:dc:
                    92:2e:ef:54:d9:53:6d:46:22:6e:0d:06:d3:ec:bc:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:CF:F0:40:01:01:41:FC:2E:81:C9:F9:17:84:66:AF:25:D2:55
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:39:29:2e:a3:c2:6d:1a:64:25:4a:c0:dc:eb:37:c7:5a:3d:
         37:25:a6:f5:51:60:2b:c8:4f:43:1b:62:3b:9e:b0:93:96:77:
         b4:20:3a:57:4b:63:7d:d1:1e:b5:78:1b:fd:19:16:2f:56:04:
         3c:2a:57:45:7a:7e:32:aa:2a:06:85:59:ef:8b:a8:0a:0a:1d:
         5f:dd:a5:b9:ad:8a:5c:70:60:8b:fb:ae:77:ff:25:7f:32:b8:
         c0:c5:c2:b1:c9:de:71:bd:2f:e0:88:ed:94:32:12:98:28:eb:
         79:af:4b:dc:0c:2d:5b:82:48:d6:9c:c6:33:25:69:53:92:fd:
         de:8c:f3:6d:bc:c2:dc:d4:10:ac:27:6e:f2:88:0b:31:fd:db:
         26:dc:1e:61:eb:11:2e:af:57:8f:ab:cf:59:04:9e:32:e5:ce:
         63:a5:2c:bf:4e:f0:35:a9:49:06:4c:8a:28:7c:39:04:d1:9b:
         cd:b3:8f:13:6a:42:e9:8b:da:1f:81:9c:c2:0b:0c:2a:4d:70:
         f0:77:e5:94:e0:be:86:9a:ac:a1:27:45:78:f3:6c:51:b9:9a:
         ed:9e:89:36:d1:2a:a8:78:93:91:ec:3a:b3:f1:e5:d7:01:41:
         36:9a:55:2c:92:0a:63:84:2f:d7:8f:be:88:7e:9f:30:ee:73:
         07:ab:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:05 2026 by rpki-client