Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft
File:                     rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft (raw, json)
Hash identifier:          PFQRYkYuSp7bkf64N9cI2G+l4jnHB3gTdvVl6jDg3is=
Subject key identifier:   72:A7:FF:20:9F:9A:C8:FB:76:BA:82:9D:23:82:5B:6D:59:2E:9E:18
Authority key identifier: AE:66:A6:2E:F4:73:1F:75:6D:76:1E:D7:9F:8F:73:0F:90:29:6E:72
Certificate issuer:       /CN=ae66a62ef4731f756d761ed79f8f730f90296e72
Certificate serial:       019D330870D04AC7DD865404F15AE03D761E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmamLvRzH3Vtdh7Xn49zD5ApbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft
Manifest number:          E5
Signing time:             Sat 28 Mar 2026 06:01:24 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:24 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:24 +0000
Files and hashes:         1: rmamLvRzH3Vtdh7Xn49zD5ApbnI.crl (hash: mJhJUQ4Zlc0aCl6rwMDMngdNK7JzTOh+L/t7us0vQ1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmamLvRzH3Vtdh7Xn49zD5ApbnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:70:d0:4a:c7:dd:86:54:04:f1:5a:e0:3d:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae66a62ef4731f756d761ed79f8f730f90296e72
        Validity
            Not Before: Mar 28 06:01:24 2026 GMT
            Not After : Mar 29 06:01:24 2026 GMT
        Subject: CN=72a7ff209f9ac8fb76ba829d23825b6d592e9e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:75:a3:74:34:7c:b9:36:35:42:42:e3:eb:
                    96:f1:e7:e1:d9:5b:53:96:97:77:9b:01:17:46:68:
                    e4:87:6e:39:f2:b1:8d:87:ca:b7:f0:86:56:54:6e:
                    d5:7d:76:c6:1e:00:4c:26:9d:45:cc:48:37:0f:9f:
                    7b:df:dd:6b:bb:86:11:cc:5e:15:80:a6:29:56:f5:
                    37:23:7b:1c:e0:c8:07:df:49:21:4a:cb:80:f4:70:
                    f6:c8:8a:ac:25:a4:c8:cd:28:0d:9d:99:f4:f3:71:
                    27:f8:2e:6f:fe:b3:ea:63:58:8a:5f:69:f8:b4:01:
                    02:b1:a7:b9:ab:96:be:26:b6:75:db:9f:53:ef:6b:
                    0b:78:5e:05:85:86:7f:0b:1a:ec:f9:6b:5d:00:29:
                    fa:f7:f5:dd:1d:8b:20:21:14:54:4e:cc:69:4f:f0:
                    51:ac:90:8c:99:a9:5f:1d:a7:79:f3:90:62:97:ed:
                    2c:75:07:aa:5f:19:ac:1c:c5:6d:02:40:43:4d:46:
                    29:06:c2:e4:83:c1:eb:80:77:fc:7b:d8:bf:8a:9b:
                    48:20:c1:43:2d:19:11:0d:37:05:29:83:49:9c:27:
                    52:6e:76:90:de:ff:87:a0:36:2e:12:95:a3:43:97:
                    a1:89:ab:18:2b:57:27:06:78:f4:e7:6b:c8:d4:b1:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:FF:20:9F:9A:C8:FB:76:BA:82:9D:23:82:5B:6D:59:2E:9E:18
            X509v3 Authority Key Identifier:
                keyid:AE:66:A6:2E:F4:73:1F:75:6D:76:1E:D7:9F:8F:73:0F:90:29:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmamLvRzH3Vtdh7Xn49zD5ApbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:25:f1:72:67:c8:dc:6c:fb:6f:e0:af:42:2a:e4:a3:4c:
         d1:78:cf:47:8b:4a:c3:49:d6:29:ad:d2:d1:86:b9:43:dd:df:
         d6:d1:f8:a5:3d:4c:bc:fc:09:9f:e8:4b:49:3f:ef:51:ec:d1:
         98:ff:43:b6:aa:c7:63:a4:0d:5a:3d:ed:73:66:11:3b:33:53:
         ba:78:1f:b3:b9:a8:ab:67:39:2b:27:3d:63:46:01:a8:ce:5e:
         26:f3:96:b7:c3:7e:6b:4c:66:2a:2c:7a:2e:e4:a0:43:a7:fa:
         a6:54:29:58:6d:1c:b1:1f:81:11:2a:26:6a:e8:b6:d6:5d:7a:
         f9:14:7d:08:85:e3:57:66:73:90:d5:1a:09:ad:99:99:18:7e:
         c3:66:68:e9:e7:65:56:6b:e5:6c:15:2f:2f:cb:18:8a:b7:0b:
         5f:d5:9c:e9:46:df:49:0d:bd:01:b4:7d:82:59:03:b0:ee:01:
         7d:b0:8b:55:68:99:04:80:3b:b8:16:28:7f:72:e2:ce:02:f8:
         d3:5e:e3:01:98:90:c5:00:17:13:fa:6f:23:68:1c:01:05:96:
         17:af:c1:cc:a1:6a:fa:98:af:77:c2:87:8d:6b:a1:96:57:7c:
         c3:43:7d:d6:70:49:4c:21:60:8a:60:61:a8:e7:4a:8a:9d:3a:
         e7:5b:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:42 2026 by rpki-client