Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File:                     13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier:          MjeyODGChD3IZHmSplHsJE7+qwb2kYI7MsFTRBgBtfc=
Subject key identifier:   9E:D8:9C:C5:22:02:2A:79:44:06:EF:7C:81:51:11:2E:CC:78:04:4A
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer:       /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial:       019CAC7DC1EE671ADCA405C8489C486C41AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number:          0860
Signing time:             Mon 02 Mar 2026 03:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:48 +0000
Files and hashes:         1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: S9Kf60ZTc1gORaIa7x1uhQikYkxzIIcuGtwWK9gI6YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:c1:ee:67:1a:dc:a4:05:c8:48:9c:48:6c:41:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
        Validity
            Not Before: Mar  2 03:00:48 2026 GMT
            Not After : Mar  3 03:00:48 2026 GMT
        Subject: CN=9ed89cc522022a794406ef7c8151112ecc78044a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:7e:c0:4d:16:1a:74:4b:01:e2:81:dd:87:
                    a3:18:49:01:e4:aa:fe:d7:1c:1a:1c:11:3e:76:b8:
                    a3:b6:38:35:49:3b:ba:de:40:55:4f:cf:a6:96:7b:
                    8b:7b:e4:57:ca:05:20:28:16:13:a4:89:05:30:33:
                    a2:e8:f7:08:07:a4:e0:1e:8e:f5:fc:09:09:18:f5:
                    bb:32:8e:2e:e4:b8:32:5a:bb:99:ca:4c:a5:3e:29:
                    b4:53:7c:2a:e4:64:c5:76:9c:72:85:6b:62:5e:a6:
                    e3:0a:31:5e:72:0a:15:e6:5c:a5:a9:58:b8:22:3f:
                    84:61:d2:b9:c8:6a:da:87:99:05:29:1d:ad:5c:52:
                    d4:f2:b8:30:2c:f9:ca:2b:bb:2f:53:4c:71:9a:33:
                    62:b7:22:1c:9c:1c:c8:9b:1e:a6:eb:13:52:5c:4d:
                    3e:0b:35:1d:47:3d:8a:ac:c1:1c:97:dc:24:36:cd:
                    7c:ca:c9:7e:ab:c6:a3:98:d5:b6:a6:6b:99:6a:93:
                    9c:91:66:20:af:15:96:2b:c0:59:06:a5:ec:a2:f1:
                    bb:28:e3:8d:19:9a:9c:06:61:28:45:1d:f7:04:0b:
                    45:99:7a:38:d7:71:6d:10:ed:ce:3e:7e:b8:ce:52:
                    bd:64:4b:3e:a6:0e:c8:10:9b:b2:5f:82:39:20:7b:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:9C:C5:22:02:2A:79:44:06:EF:7C:81:51:11:2E:CC:78:04:4A
            X509v3 Authority Key Identifier:
                keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:a4:31:87:d1:6c:dd:34:33:f9:37:87:93:fc:d2:41:9f:
         3d:46:c2:8d:2d:a0:f7:bf:eb:04:5e:2f:e5:d4:3d:a0:0c:a8:
         6f:54:88:50:a8:30:c7:43:fd:da:4b:36:97:bb:38:69:91:65:
         8d:11:ce:86:d3:b8:93:55:10:be:8b:00:ea:3c:e7:9c:4d:cb:
         61:25:57:7b:2e:12:d4:a2:8f:45:f8:dc:8f:0e:0b:43:b8:cb:
         c8:80:07:46:72:ed:30:68:0d:b9:60:09:c5:f9:28:2d:91:f8:
         36:7a:bf:b5:71:0a:5e:fa:06:cf:51:03:75:06:4f:ee:fa:63:
         9b:17:95:e1:e6:4a:b2:b8:e2:95:2f:9d:e4:39:dc:74:e7:6d:
         74:95:22:2d:aa:42:c4:0b:1d:34:af:18:41:e8:46:39:76:1d:
         51:46:0a:83:ee:c4:7c:a1:47:88:5f:2a:03:74:3e:d3:ad:9a:
         93:3c:38:49:f8:17:f9:96:02:be:5a:eb:2a:46:1b:05:54:29:
         4f:f8:1b:bb:8d:ef:d7:6c:26:a3:42:1f:d1:ca:b0:ec:71:73:
         d8:51:05:8e:c9:86:3c:e3:96:ea:33:f7:93:70:d2:26:fa:19:
         cc:39:06:07:01:e2:4e:86:b6:71:12:c2:62:9c:f5:77:63:25:
         c9:26:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:25 2026 by rpki-client