Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          qJjcLWWWkSh7D/zXYy+ZZ839YBi4pc+rsY0SWOvp274=
Subject key identifier:   7F:5A:79:A6:CD:C9:E7:7B:6D:50:C7:82:C3:39:BA:72:45:D0:42:A2
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       019CAD5933B3114A8872866712DD3893C239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0D0C
Signing time:             Mon 02 Mar 2026 07:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:29 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: 3Unmg+g2FjsJntou5pWvx3ogiNXYH07lNfKPfzRaszs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:33:b3:11:4a:88:72:86:67:12:dd:38:93:c2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Mar  2 07:00:29 2026 GMT
            Not After : Mar  3 07:00:29 2026 GMT
        Subject: CN=7f5a79a6cdc9e77b6d50c782c339ba7245d042a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:62:f5:1b:62:c7:ee:d6:cb:36:dd:a0:a4:
                    60:d6:29:1c:41:f5:ed:31:69:10:c4:09:40:d6:47:
                    b5:41:ed:6f:f2:ab:4c:60:e0:26:64:ea:53:96:6c:
                    9d:46:da:59:5e:16:b8:72:6e:f1:f1:df:c4:13:6f:
                    a3:e8:fb:b3:cc:b7:f5:d4:ed:67:98:72:b5:9d:79:
                    63:67:9e:f5:cb:a5:2f:c7:bc:42:ee:14:08:de:6d:
                    11:2c:eb:f6:b9:87:61:cd:e4:1b:98:e9:de:5f:5f:
                    78:33:99:7d:53:24:3b:b7:bd:76:9e:b2:00:4a:bd:
                    f1:fa:24:39:f2:12:2b:19:d3:bd:22:87:73:c8:ab:
                    7a:d4:3f:a7:bb:b1:80:b3:1a:78:16:f9:7a:cc:3d:
                    c2:9f:d2:cb:58:6b:34:5c:17:6c:0a:5e:d2:59:41:
                    9b:3c:8e:72:aa:8c:05:82:2f:24:60:98:3b:e8:63:
                    e3:a6:9f:13:56:bb:13:14:64:26:27:85:fe:d2:9e:
                    94:41:6e:ef:a4:9a:fb:60:c2:ef:9b:42:45:79:8e:
                    2f:1c:f6:47:a5:a6:50:41:2b:92:68:c4:61:6f:d2:
                    4e:6b:2e:31:37:e8:83:a2:80:6f:fe:9c:9b:3b:62:
                    8f:67:c9:fd:8e:b6:cf:f6:ce:ad:73:3a:29:cf:b6:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5A:79:A6:CD:C9:E7:7B:6D:50:C7:82:C3:39:BA:72:45:D0:42:A2
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:1b:bd:cc:ae:88:3f:1f:5b:fd:1f:93:fd:a6:61:a6:cc:
         f5:76:58:cf:7c:33:18:2e:7e:34:b9:1c:e9:eb:f0:0c:a9:23:
         4a:cc:53:93:71:ef:1b:69:52:1a:6f:4a:1b:de:1d:9f:a3:94:
         87:37:22:54:68:17:e3:a5:b7:00:3a:e7:2f:0e:8a:4d:46:0c:
         08:19:95:15:6b:48:c7:54:58:16:d7:96:e3:c0:75:e0:19:99:
         d7:75:fb:5d:18:8b:d9:ce:fb:86:ca:ed:87:93:cc:dc:02:33:
         6d:6a:40:fa:cc:88:ed:0b:3a:e7:47:c0:b4:03:9b:a7:03:c3:
         f6:64:ca:12:1b:00:04:31:6f:1c:fe:55:5b:34:8c:ee:41:72:
         d2:f5:b3:f9:53:13:35:8d:41:08:3f:1d:c2:11:14:56:03:09:
         09:1b:96:8d:10:70:4a:c5:41:c5:02:ae:a0:73:39:c0:bc:ee:
         87:d1:6e:15:fd:40:9e:17:ca:99:55:54:83:27:b3:66:98:49:
         b5:23:8f:25:9e:44:85:5f:a6:3a:31:93:21:bb:2c:f5:f4:b6:
         e7:00:05:25:0f:07:df:9f:66:16:f3:78:34:4e:01:d7:55:38:
         d7:f9:6f:1b:85:2c:eb:e0:57:71:ce:8a:4c:01:ef:34:89:53:
         5c:4f:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:36 2026 by rpki-client