Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          rIRyVLTjDVFz0so/5mlDOaqP1RPdhYAGGWWnomz3GrU=
Subject key identifier:   58:28:C1:A2:43:00:76:55:86:78:26:9E:30:73:F6:0C:ED:83:57:55
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       019CE55AA2BD2C9A519802A17EA1E275B111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          17AC
Signing time:             Fri 13 Mar 2026 04:00:48 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:48 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:48 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: drS2Vv/gU+ZBpoHmfUcR1tUe7gaNQeOptB9jsN2G74g=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:a2:bd:2c:9a:51:98:02:a1:7e:a1:e2:75:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Mar 13 04:00:48 2026 GMT
            Not After : Mar 14 04:00:48 2026 GMT
        Subject: CN=5828c1a2430076558678269e3073f60ced835755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:cc:22:50:3d:d6:66:b1:36:66:7d:68:a8:
                    14:1c:af:d2:bb:82:8a:d9:d3:03:ca:69:e3:00:26:
                    24:15:92:3d:39:25:6e:5e:10:7c:3d:b6:b9:68:1a:
                    f5:02:a4:fd:1d:80:07:a8:c4:d0:1f:a5:e6:27:f2:
                    e2:e1:32:cf:57:0d:6c:79:97:30:5d:fd:3d:37:dd:
                    f7:f4:2c:f5:49:4c:aa:ed:0f:3e:db:59:f8:fa:58:
                    98:5d:3e:8c:5e:a3:84:43:25:9e:95:ef:9b:50:03:
                    6e:de:04:ab:f8:2f:58:f9:48:67:d4:4e:ee:72:7d:
                    e8:35:6c:a3:02:51:77:b4:51:7f:6a:10:66:dc:81:
                    f2:67:5f:d7:58:f6:74:21:4a:0a:3b:f7:10:73:ff:
                    5f:5e:03:f7:5e:bc:6b:cf:c2:e0:b5:25:eb:9e:90:
                    75:c2:f4:8c:80:67:78:85:53:db:31:78:c3:12:b8:
                    84:e7:a5:78:0b:16:3b:5e:57:be:a9:c4:12:9b:dc:
                    b6:d0:ae:be:f1:18:1c:97:70:64:8b:f2:5b:cd:3e:
                    83:eb:81:2b:51:fd:e6:bf:6e:7c:d6:6d:02:ee:d9:
                    b3:90:35:4d:7f:05:1d:b3:04:8e:74:85:65:a7:c8:
                    0b:51:13:5d:cd:94:c8:ca:eb:f7:ab:da:18:1c:4b:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:C1:A2:43:00:76:55:86:78:26:9E:30:73:F6:0C:ED:83:57:55
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:2f:63:eb:ff:76:91:85:05:5b:47:e5:e0:af:30:75:8b:
         8c:5a:b1:70:5b:fd:ba:4a:a7:d3:7e:21:19:dd:b8:ab:7f:29:
         21:27:e3:20:42:25:2d:5e:a1:8d:f4:4a:57:48:2c:83:6f:2a:
         90:dd:1e:66:3a:57:19:d6:2a:30:62:a7:d8:83:1c:a2:55:16:
         fc:6d:79:1f:3c:1a:1d:1c:be:4c:54:b4:ee:2e:f0:c3:f7:f5:
         70:89:76:f5:6d:76:59:8b:30:4c:3e:a3:0b:b8:25:ec:b8:91:
         13:cc:a8:3d:1d:d8:a8:12:d4:87:f7:7d:97:3e:f6:c6:4c:69:
         85:0a:d4:27:cc:e9:5c:f2:74:63:a6:fe:ff:fb:15:a6:bd:9c:
         58:d9:5a:de:d0:31:e6:2c:53:12:5b:ed:16:57:83:72:8b:3d:
         89:c0:c5:b3:3f:8d:f2:b9:42:bb:0b:b9:b6:1d:b1:5c:96:38:
         5f:ae:f6:a8:e2:89:cc:dc:00:fe:90:13:a2:b8:98:0d:10:60:
         e6:f7:d2:8d:30:49:7b:45:a3:2a:de:b3:34:15:c8:a2:cb:ed:
         9d:74:65:14:c6:23:bb:26:11:b0:64:4d:54:16:b8:ca:b0:43:
         41:e3:00:29:84:ac:82:7a:fc:7b:6a:e0:3e:cf:54:1c:29:72:
         dd:ec:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:29 2026 by rpki-client