Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          sF81ugbwYpfYoKC/Vm8lLMG33cW7gwKciI/RTLs1g3E=
Subject key identifier:   9D:2A:A7:CC:03:3E:DC:2E:54:C2:3E:47:36:35:66:C1:F1:8A:45:EE
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019D25F20B2BFBF0E01FE7EB981B09B7D99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          121D
Signing time:             Wed 25 Mar 2026 17:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:52 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: xcv1/QsTH3zicGi65Y82uPq2s+SqmYw6c4tnS3AdxPo=)
                          2: F_7qyDHqywNLF8a2Ln9h7egAvhE.roa (hash: IjqDhnh8x9qZZNGyBMM7Oq3knBWv4p+u6LpclmDjTsQ=)
                          3: c6e857IVOZYjl5N7fY8HNnzYA24.roa (hash: Q3SE15YAjAw2UrzA85zUtD+5MpRr2HDjWbZqQ2fn2Tg=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f2:0b:2b:fb:f0:e0:1f:e7:eb:98:1b:09:b7:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Mar 25 17:01:52 2026 GMT
            Not After : Mar 26 17:01:52 2026 GMT
        Subject: CN=9d2aa7cc033edc2e54c23e47363566c1f18a45ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:c0:95:1a:11:67:14:54:3b:66:41:b0:2e:
                    42:64:e7:54:d2:b0:81:77:af:88:94:4e:2a:62:1b:
                    ca:f6:fe:5b:bb:36:af:03:07:11:88:f7:e0:99:d0:
                    0d:8a:18:b6:ef:e7:57:de:c9:dc:e3:18:a7:de:c8:
                    fb:08:42:3e:67:1d:9e:bf:bf:23:3a:36:82:52:68:
                    2d:e8:f9:af:af:f9:55:88:89:d7:83:23:e8:a7:b8:
                    17:4d:a4:63:6d:a5:92:9f:b0:df:10:df:65:f3:d7:
                    a3:b0:5f:38:36:ba:c6:5c:0d:36:64:25:d1:a9:f8:
                    d8:07:99:28:f3:fc:ee:49:17:33:e2:97:4b:5d:4c:
                    ef:84:a4:9d:3e:92:b8:8c:36:08:d2:db:3d:c0:fd:
                    bc:d6:6d:df:b3:8f:68:08:09:3a:8a:a2:e5:7b:e5:
                    23:56:c4:ad:1c:74:7f:1f:68:93:92:11:42:37:ac:
                    3e:72:ce:c5:a9:6c:4d:d3:f9:ec:af:6c:1d:d8:b6:
                    13:2a:d7:bb:2d:19:8f:84:57:3f:bb:5f:5c:50:73:
                    b7:91:52:d2:26:7f:60:98:39:d9:2e:e2:27:51:7d:
                    9b:f4:31:a6:48:b4:90:13:19:2c:b0:3a:d8:3e:6b:
                    d4:30:d9:7d:54:01:0d:88:db:fc:62:35:aa:a9:8b:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:A7:CC:03:3E:DC:2E:54:C2:3E:47:36:35:66:C1:F1:8A:45:EE
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:d8:1f:6d:f3:cc:0e:2c:7a:05:56:e0:cc:51:28:57:58:
         4a:89:b6:8e:90:a0:a4:ed:b8:4b:fc:99:eb:de:13:ff:50:9b:
         5c:36:e7:14:bc:d0:49:9b:6e:2d:92:42:bc:40:14:f3:0b:86:
         71:7b:cf:2f:81:67:8d:1c:a1:0d:ac:b1:a1:10:9b:36:78:9c:
         fb:e0:bf:35:45:2b:3f:5a:01:59:ec:c4:9c:90:a9:7f:ea:ae:
         4c:df:16:38:24:b5:20:ef:29:cb:d6:f7:df:24:7d:01:c5:d2:
         09:81:e0:1d:42:d0:9d:fc:2a:c4:4b:87:b7:c4:d1:db:df:86:
         ba:c6:6c:7d:ae:77:0c:1c:53:54:d5:f6:a6:da:26:98:22:55:
         d8:03:60:d3:40:8c:55:2b:82:91:cd:74:ce:a3:b9:81:e4:59:
         34:83:8a:67:45:2a:4b:dd:57:b3:58:99:32:dc:96:b8:3e:b0:
         9f:d3:76:64:e9:fc:e3:0f:91:f6:73:cb:81:23:5c:6a:e6:59:
         3d:27:39:73:df:f9:90:67:e1:cd:e1:53:f8:40:b0:e5:69:59:
         70:9d:8a:73:d9:a4:84:be:98:07:7c:90:5a:fc:59:ff:ee:41:
         7e:c7:f6:35:15:b9:09:40:c4:a2:6c:bf:5c:a0:44:a2:3d:3e:
         a6:d8:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:54 2026 by rpki-client