Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File:                     9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier:          m6rAuazjgv5+huyTOkKj8QVRKj+FG5n9bTCyhiibUDI=
Subject key identifier:   FE:E5:7B:43:D7:68:28:CD:8F:86:35:5A:51:38:9E:9C:1F:C0:EB:7F
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       019D265ED410EAB25AA66EE1FA46C8BE136A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number:          0C67
Signing time:             Wed 25 Mar 2026 19:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:41 +0000
Files and hashes:         1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: y/nAV5j50qGgbomq3XnwUrpRGdyvrPK6AvrVAFK3zKo=)
                          2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:d4:10:ea:b2:5a:a6:6e:e1:fa:46:c8:be:13:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: Mar 25 19:00:41 2026 GMT
            Not After : Mar 26 19:00:41 2026 GMT
        Subject: CN=fee57b43d76828cd8f86355a51389e9c1fc0eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:80:92:8c:2a:15:f4:9c:1a:7f:a1:79:47:
                    0e:2a:99:7f:3a:73:d4:31:fb:36:80:a5:a4:88:73:
                    cd:00:ae:1d:f1:79:f5:2a:f3:e8:08:16:c8:4b:e9:
                    44:ae:cd:64:c4:cf:81:8d:66:b2:fa:62:7d:33:f0:
                    ff:12:bd:7c:ec:0e:8d:eb:86:5e:6d:61:80:63:37:
                    2a:7d:7e:52:27:aa:fa:6b:38:f4:fc:84:32:42:42:
                    a7:19:6c:4e:12:55:eb:92:89:5f:6e:c3:48:5e:67:
                    f3:b2:43:ba:6e:93:aa:6d:9e:bf:54:db:75:1a:0a:
                    88:a5:5c:bb:2e:fb:e1:99:0f:d0:68:dc:7f:e3:68:
                    14:c5:c4:8a:98:58:37:c8:c6:96:7a:6f:2f:e8:60:
                    dc:d6:18:8f:c5:de:7b:a8:32:45:90:d2:24:48:72:
                    06:69:98:a1:c6:e4:7c:bb:83:13:8b:51:c1:02:6d:
                    a3:2f:c1:f7:0c:83:44:3a:97:ea:20:e3:32:b4:8f:
                    ce:90:b9:56:31:13:b3:52:50:63:85:2e:e5:2c:7b:
                    ca:0d:aa:a6:49:1c:a6:79:08:0c:cd:64:25:1c:87:
                    cc:23:f3:dc:e6:9b:f6:8b:36:71:31:5c:f0:b6:9f:
                    b7:6a:09:57:28:02:b1:a4:35:47:c5:f2:f4:69:c0:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:7B:43:D7:68:28:CD:8F:86:35:5A:51:38:9E:9C:1F:C0:EB:7F
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:10:fe:dd:c1:f8:34:6a:8b:ce:f8:9c:cc:3a:50:06:a9:
         1c:9e:f9:74:4e:58:5b:3b:f6:1d:de:cd:52:86:8b:b7:97:a0:
         a6:c9:39:2b:84:c2:e8:df:de:b2:3e:2f:9a:6b:7a:b6:e8:38:
         9e:20:4b:6f:fe:d5:c8:67:f3:0e:1e:32:b5:6a:86:e3:d1:96:
         12:b1:32:e9:fe:10:92:4b:53:63:33:d3:8f:49:6a:02:6b:40:
         69:72:f8:d0:76:9d:e9:ac:2c:a3:ca:84:85:e6:1d:04:5d:a0:
         81:49:6f:89:bf:72:7a:08:09:56:2c:8e:7c:e5:a4:66:23:38:
         17:61:d9:1d:56:f0:dd:80:dd:2c:b0:ab:fc:c7:3b:5e:8c:d9:
         f1:17:ad:12:ef:c1:85:27:4b:1a:e9:1b:bc:7f:7f:7d:bd:42:
         e7:29:b8:a2:6d:90:62:60:28:79:b5:f8:52:b3:e4:1b:9b:78:
         e6:22:62:41:6f:cb:4e:3e:15:60:7e:16:ed:b5:07:3b:56:40:
         2c:a9:6b:e8:7b:85:21:e7:34:42:3f:9a:da:36:5c:09:92:6c:
         c0:44:cb:83:ad:cb:92:4b:03:7b:50:3a:6f:23:e4:a9:3b:60:
         a8:70:3d:45:28:53:c8:69:06:ea:ff:69:19:a4:9b:24:f0:d5:
         36:f9:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:50 2026 by rpki-client