Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File:                     cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier:          2g1wh2dT4V0UwEazXhcjzAsC8Zq3mafoYco/CEQb6Rw=
Subject key identifier:   D2:DE:34:90:39:39:FA:1F:22:91:2C:A3:E6:07:1F:1C:5F:E3:1A:B9
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer:       /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial:       019CAC0F9B718EBB24016079F8C031DD93FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number:          0917
Signing time:             Mon 02 Mar 2026 01:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:29 +0000
Files and hashes:         1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: ZJNMXLkUe739KtH7YgEU4w0lBsij73TOXAIwayzxARM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:9b:71:8e:bb:24:01:60:79:f8:c0:31:dd:93:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
        Validity
            Not Before: Mar  2 01:00:29 2026 GMT
            Not After : Mar  3 01:00:29 2026 GMT
        Subject: CN=d2de34903939fa1f22912ca3e6071f1c5fe31ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:84:d8:6f:ed:6b:c3:0b:81:94:f1:49:70:
                    2e:ff:81:4e:cf:cd:55:27:0c:90:6c:00:22:90:26:
                    a2:1e:f9:0d:eb:d2:dd:72:64:d6:34:ce:3d:70:e0:
                    d5:de:1a:3e:cf:90:16:4e:93:a5:a1:d0:f1:e8:8d:
                    ad:4f:1c:ad:53:bd:fa:95:c0:fa:62:c0:1b:8d:8a:
                    07:ec:05:d7:ed:0d:d1:38:a0:31:1c:44:fc:b0:fa:
                    14:23:ba:c1:3e:ab:14:f6:d7:40:53:0c:10:0b:ce:
                    32:dc:d0:0e:27:5e:8e:2f:b2:b3:15:ba:1c:38:19:
                    79:ea:6e:6e:da:88:1c:9c:27:6c:be:62:bb:bc:17:
                    57:a8:c8:68:5c:e4:89:a8:0c:53:f0:c8:13:01:82:
                    d7:7b:f6:0c:65:25:eb:61:c3:95:52:1d:3e:ee:4e:
                    a1:2e:68:e4:86:92:aa:25:97:78:4f:11:03:5f:db:
                    e4:e7:93:88:ef:0b:d3:ae:23:51:88:98:01:bc:8c:
                    72:95:9f:1c:62:24:97:bb:c9:5d:05:c1:7a:5b:57:
                    64:19:dd:68:f6:63:29:a8:1c:52:ea:d3:14:2c:0e:
                    fd:ec:8f:f6:19:eb:c5:0b:26:55:ff:ef:38:a3:01:
                    a1:70:91:ae:2f:08:1b:90:39:05:76:73:b8:49:f6:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:34:90:39:39:FA:1F:22:91:2C:A3:E6:07:1F:1C:5F:E3:1A:B9
            X509v3 Authority Key Identifier:
                keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:2e:12:b3:c6:39:89:e9:e3:8b:a3:bc:41:f3:27:5a:f6:
         83:d3:aa:d0:6c:e7:2e:22:c7:8f:c6:cd:75:23:95:fb:a1:f2:
         16:9d:73:f1:57:82:03:0a:da:c0:06:38:15:cf:ec:c6:5e:76:
         72:fa:bb:c8:57:96:b4:36:f0:1c:15:94:80:8b:f6:f1:0b:be:
         36:a2:b2:03:29:ba:b3:a6:5a:2b:b5:23:51:a1:48:19:e7:61:
         40:0c:b9:f5:c0:27:0b:cd:d3:72:e1:38:b9:30:0f:c6:d3:bf:
         52:91:57:24:98:da:50:d4:5e:e4:22:44:f7:ea:c5:dc:bb:50:
         0b:ad:71:2f:8d:98:24:e2:ca:b6:4e:fb:4e:cd:c0:fb:3b:94:
         90:2e:2b:5b:b9:c1:75:a0:3d:f5:ce:a6:78:83:36:a5:63:5b:
         94:2a:0a:15:ef:37:c9:2d:1d:a4:bd:c1:a2:b8:af:c3:5d:b0:
         14:b7:e5:c7:5e:07:02:71:af:5c:42:64:ad:70:75:fe:02:63:
         a6:24:31:48:4c:29:c9:66:60:98:b5:47:0e:e3:ae:71:60:b1:
         eb:14:f1:4a:dd:59:15:be:75:21:8d:6d:c3:f4:4b:87:bc:21:
         b2:04:f1:07:29:30:c5:33:4a:dd:98:75:da:76:7a:f4:9d:51:
         75:c7:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:47 2026 by rpki-client