Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File:                     XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier:          f5pZGvB1b7cV0opsmsDcQ9X198FQB2mRmGjGIXJNpw8=
Subject key identifier:   14:44:B6:F6:AD:4C:28:AF:27:9F:87:4A:C7:FD:3E:CB:43:CC:E3:7C
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer:       /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial:       019CAC0FD35DFFB341444DDD98D3B7118BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number:          061E
Signing time:             Mon 02 Mar 2026 01:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:44 +0000
Files and hashes:         1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: 5qozi8cFhUucFVeFgAcdFPi7cKx8zr4Q5OkZDVNOEAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:d3:5d:ff:b3:41:44:4d:dd:98:d3:b7:11:8b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
        Validity
            Not Before: Mar  2 01:00:44 2026 GMT
            Not After : Mar  3 01:00:44 2026 GMT
        Subject: CN=1444b6f6ad4c28af279f874ac7fd3ecb43cce37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:96:db:1e:35:84:b7:bd:9a:89:b8:c2:71:
                    9d:9e:85:3d:59:e9:b6:27:e0:2c:6e:8e:de:b1:2a:
                    83:1e:b6:30:e8:82:75:c7:3a:6a:63:22:65:30:10:
                    3f:75:3b:22:31:38:1e:99:a8:5e:a2:f2:43:9d:56:
                    b3:a7:c9:36:64:05:c3:3e:51:3c:90:d8:36:ed:3e:
                    5a:d2:e9:57:aa:69:2b:72:67:b5:c3:6e:72:cc:e2:
                    f3:0a:4d:6d:b5:de:75:42:8f:ca:d7:a8:4c:1d:8b:
                    fe:30:cb:55:1a:70:65:b4:e2:1b:93:db:d1:96:97:
                    52:ee:f9:da:66:45:3b:e6:89:b4:15:9f:74:db:06:
                    c0:6e:91:9f:36:57:57:20:ad:6c:d4:60:cb:27:84:
                    34:d4:5d:73:37:d6:40:70:fb:b8:10:f9:8c:79:3a:
                    90:1f:24:3e:ed:94:13:9b:31:5d:f7:fd:0d:02:7f:
                    9a:be:8b:45:f8:b3:5e:88:72:d1:b9:89:2a:07:b5:
                    d5:45:68:28:cd:4a:6e:cd:f4:41:3f:8c:c2:65:31:
                    cd:8c:bb:a9:cc:64:dd:12:05:a5:7b:37:7b:07:8e:
                    e6:27:93:b8:1f:41:2d:1a:55:ee:8a:ff:6b:05:57:
                    fb:09:1e:0d:f3:fe:90:23:d4:86:4b:b5:16:59:8e:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:44:B6:F6:AD:4C:28:AF:27:9F:87:4A:C7:FD:3E:CB:43:CC:E3:7C
            X509v3 Authority Key Identifier:
                keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:5b:d0:7f:29:ac:2b:3e:37:6a:a7:f5:48:2e:62:dc:e0:
         97:8a:4e:11:b3:89:95:c1:33:84:1e:ba:f3:6d:45:9a:9b:42:
         1a:68:f4:72:46:81:9c:d3:fb:e5:e8:46:2a:7f:98:c3:ac:35:
         4a:91:78:6e:50:6e:4f:79:94:0d:4c:74:9d:f0:1f:2a:8c:88:
         91:94:84:95:51:d8:90:7d:c8:b1:56:c8:06:cc:21:61:f2:8d:
         69:de:48:3e:ff:be:48:e7:11:f1:74:69:0a:98:fb:5e:16:cc:
         20:17:f2:41:3b:73:34:c2:a5:12:1c:9b:e7:6d:40:5a:73:a8:
         09:00:7a:b7:c7:62:04:f2:36:7a:87:3d:30:18:4b:54:ca:c5:
         a0:1f:8f:bf:ce:83:0d:a0:e1:0f:14:bb:5a:ff:3e:24:9d:8c:
         8f:52:3c:49:27:8f:6c:01:6e:92:7f:00:5c:a8:a0:81:4f:47:
         0a:24:1c:43:5f:fb:9b:d5:5f:34:13:81:1e:78:d0:e6:6b:e0:
         2b:c2:e1:10:98:08:8a:00:06:97:3b:4b:91:ce:3e:35:36:97:
         cc:6f:e3:80:70:75:91:39:e5:de:63:48:3a:e1:1b:f6:29:2f:
         b0:43:15:ac:ea:6f:da:aa:cb:fb:f5:63:6c:13:b8:24:ac:54:
         3e:a6:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:07 2026 by rpki-client