Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          x0htNX2M0eg3dqnrOsEnGRICWNHCmx/DnFimKz8DbEY=
Subject key identifier:   11:F0:89:8A:55:C4:38:36:C4:60:AC:A7:CC:39:CA:43:8C:5F:C0:43
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       019CAA8FE9DE9B9A446FB83F55A0FB88CA6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          042F
Signing time:             Sun 01 Mar 2026 18:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:24 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: XEfEhyzsQWCjIv44ahJSCQaPOsMFmi41O2i4W41e4n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:e9:de:9b:9a:44:6f:b8:3f:55:a0:fb:88:ca:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Mar  1 18:01:24 2026 GMT
            Not After : Mar  2 18:01:24 2026 GMT
        Subject: CN=11f0898a55c43836c460aca7cc39ca438c5fc043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:92:8a:80:29:c6:94:2a:6f:dd:30:b2:b7:
                    db:48:05:f5:89:41:61:93:6b:60:01:aa:04:7c:59:
                    ad:c4:92:01:23:33:d8:be:5f:55:32:b0:1f:10:63:
                    fe:bd:7c:9c:5e:62:77:9d:b0:ab:bb:3c:85:58:ae:
                    95:be:28:ce:dc:ff:21:14:bc:79:b6:a7:8e:07:24:
                    be:9b:69:21:b4:4d:2b:86:82:c7:8f:f5:c4:3c:c8:
                    52:08:36:a5:3d:27:f9:eb:ff:96:18:8d:b4:7a:42:
                    b3:28:de:7e:b1:38:21:72:89:20:94:8a:13:0b:38:
                    ed:99:ee:15:1e:63:01:68:39:d0:98:5b:ff:2e:f1:
                    62:31:8c:fa:ec:38:44:54:a3:24:c0:22:c6:34:b4:
                    30:34:e0:c4:b9:61:49:67:d0:0e:34:42:b4:58:13:
                    24:04:f5:59:19:d7:71:f6:a8:73:7b:d7:bd:73:64:
                    a5:24:ba:8c:f9:32:eb:9c:dd:fd:00:69:df:da:1a:
                    f6:2d:81:cc:1a:45:9b:ac:a9:fe:87:ea:cd:de:cf:
                    24:40:29:1b:24:f8:8f:eb:80:bc:7a:08:9e:3e:45:
                    97:93:fa:c3:92:88:ae:6c:6d:db:ac:ca:a6:18:9a:
                    58:f6:00:17:45:dc:34:dc:f5:cf:72:14:8d:d7:1a:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F0:89:8A:55:C4:38:36:C4:60:AC:A7:CC:39:CA:43:8C:5F:C0:43
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:b1:ab:5f:30:50:89:c3:dc:c8:0b:4c:28:78:9c:d3:83:
         b7:5c:d4:bf:bf:d5:2d:c4:76:7d:de:a3:f5:00:fa:c7:8e:11:
         4c:2d:62:62:88:81:09:d0:82:b6:8b:c6:8c:f2:92:45:52:a8:
         0d:6d:0a:97:23:5c:e3:c1:e0:bb:cd:07:25:80:08:75:e4:29:
         5d:4b:75:83:03:b5:2e:9d:e6:c8:29:cb:c7:02:a8:88:b7:ac:
         4f:73:88:4b:36:62:c9:ba:1f:01:21:5d:61:48:24:7f:ea:89:
         d7:4f:f4:60:89:30:f2:a6:99:7f:00:92:76:e6:64:5a:f7:bf:
         fa:cf:d6:39:5d:b9:53:d9:9d:1a:13:b5:58:cf:3b:e8:54:7e:
         0b:ae:41:ae:1b:76:df:1d:f5:d9:59:04:82:a4:99:c9:e6:c7:
         cd:c1:a0:5f:46:13:9b:c4:ce:84:20:eb:6f:cc:06:30:d1:63:
         db:16:0b:b8:c7:78:b3:03:69:1b:31:b7:83:84:d5:39:5f:2d:
         ce:b4:68:38:67:4d:16:32:ad:5e:f0:1f:56:d5:6b:94:4b:58:
         6c:30:0d:21:5b:6c:94:4c:f2:6d:a5:86:9b:ca:3d:83:3c:38:
         98:9a:d9:48:e6:0f:70:83:08:ce:cf:48:a4:2f:c2:a7:23:af:
         e4:fd:1d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj+nem5pEb7g/VaD7iMpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDhhZjc4ZTZmYmFkMmVlN2UyZDBjZWI4NmJhMzhiZmE1
NDhlMWIwHhcNMjYwMzAxMTgwMTI0WhcNMjYwMzAyMTgwMTI0WjAzMTEwLwYDVQQD
EygxMWYwODk4YTU1YzQzODM2YzQ2MGFjYTdjYzM5Y2E0MzhjNWZjMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV+SioApxpQqb90wsrfbSAX1iUFh
k2tgAaoEfFmtxJIBIzPYvl9VMrAfEGP+vXycXmJ3nbCruzyFWK6VvijO3P8hFLx5
tqeOByS+m2khtE0rhoLHj/XEPMhSCDalPSf56/+WGI20ekKzKN5+sTghcokglIoT
Czjtme4VHmMBaDnQmFv/LvFiMYz67DhEVKMkwCLGNLQwNODEuWFJZ9AONEK0WBMk
BPVZGddx9qhze9e9c2SlJLqM+TLrnN39AGnf2hr2LYHMGkWbrKn+h+rN3s8kQCkb
JPiP64C8egiePkWXk/rDkoiubG3brMqmGJpY9gAXRdw03PXPchSN1xqOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHwiYpVxDg2xGCsp8w5ykOMX8BDMB8GA1UdIwQY
MBaAFHjYr3jm+60u5+LQzrhro4v6VI4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDIt
NzM0MTQxZGUzNTc2LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDItNzM0MTQxZGUzNTc2
LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNixq18w
UInD3MgLTCh4nNODt1zUv7/VLcR2fd6j9QD6x44RTC1iYoiBCdCCtovGjPKSRVKo
DW0KlyNc48Hgu80HJYAIdeQpXUt1gwO1Lp3myCnLxwKoiLesT3OISzZiybofASFd
YUgkf+qJ10/0YIkw8qaZfwCSduZkWve/+s/WOV25U9mdGhO1WM876FR+C65Brht2
3x312VkEgqSZyebHzcGgX0YTm8TOhCDrb8wGMNFj2xYLuMd4swNpGzG3g4TVOV8t
zrRoOGdNFjKtXvAfVtVrlEtYbDANIVtslEzybaWGm8o9gzw4mJrZSOYPcIMIzs9I
pC/CpyOv5P0dDw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:21 2026 by rpki-client