Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          o6A45YeTThyq2W8aNZwArCl1JL1MqqPL57SRDuMQnGk=
Subject key identifier:   93:4E:DC:94:B8:BC:95:01:1D:A7:7A:70:29:29:E6:0C:4B:56:F6:B3
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       019D382E2320699EED16CBF21903ADF98948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          0839
Signing time:             Sun 29 Mar 2026 06:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:40 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: aZAoWwWIWEUshBsKZREIiEJFxKDlghb96U7J+nCYqu0=)
                          2: 5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (hash: 9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:23:20:69:9e:ed:16:cb:f2:19:03:ad:f9:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Mar 29 06:00:40 2026 GMT
            Not After : Mar 30 06:00:40 2026 GMT
        Subject: CN=934edc94b8bc95011da77a702929e60c4b56f6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:99:d4:30:61:af:25:bb:0c:5e:d9:3a:e7:
                    21:c1:d9:8e:35:f1:fe:de:c7:29:e4:bb:00:87:e3:
                    76:8f:8b:0d:1e:55:7d:7d:50:18:4b:fd:7d:6f:15:
                    1f:17:01:d8:96:63:6a:aa:d7:d9:13:41:9e:01:46:
                    cb:d9:43:7a:ee:fc:a4:1f:e7:6f:5f:e6:ac:0d:bb:
                    6b:44:b4:82:32:f4:53:e3:ad:d2:df:3a:9e:30:7e:
                    ba:a4:64:18:f1:aa:1a:76:15:b1:d6:31:4d:59:99:
                    77:46:a0:01:3b:87:29:64:b9:17:0e:ab:65:d4:fd:
                    79:94:03:67:aa:a7:45:9b:89:20:f1:5d:de:9f:7d:
                    13:00:81:39:45:d6:bc:cb:4a:f3:0a:9d:50:f4:fb:
                    df:c0:35:dc:43:fb:06:f6:ec:b6:71:8f:46:71:5a:
                    4e:da:e5:97:3a:ea:20:9c:6e:96:11:62:2d:10:21:
                    ad:22:33:93:c9:6e:9e:6e:2a:b6:a6:a8:57:40:a0:
                    1f:e6:ce:01:61:6b:ec:1d:17:63:27:a7:ff:b0:aa:
                    6a:25:74:8d:4c:fb:5c:36:47:74:14:ea:fd:b9:93:
                    98:a9:9c:19:16:81:1f:48:4d:ad:78:66:3e:bf:5c:
                    e1:e9:3a:8d:fd:eb:93:46:51:0f:95:20:4c:40:7f:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:DC:94:B8:BC:95:01:1D:A7:7A:70:29:29:E6:0C:4B:56:F6:B3
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:61:5f:2c:13:00:25:53:17:ce:79:47:c0:41:e7:8e:81:
         7d:1a:7d:17:91:3a:56:16:4b:2e:f4:10:65:f1:7a:15:7d:c6:
         5e:88:a8:82:28:a3:03:4f:4b:24:ec:c5:31:2b:2d:a3:f3:cc:
         b7:f8:6f:1e:b6:88:2e:43:8d:f2:c1:0e:e3:2e:f3:00:79:e1:
         13:4a:23:e3:9e:84:d2:62:4d:f5:81:b4:66:ee:a2:a8:4b:f4:
         70:a2:65:e8:a2:ad:62:53:42:db:97:84:3f:76:9d:a6:ab:a5:
         f4:60:67:53:b5:d5:8b:18:a8:c9:6f:be:3a:c0:5c:5e:3f:d3:
         c9:1f:34:1d:5a:7a:eb:64:af:ca:18:37:65:1d:a6:f1:ed:9b:
         07:a3:da:b0:19:8b:27:ee:d1:48:71:b0:72:a9:86:c6:b4:57:
         c2:60:9f:64:06:70:3b:ec:64:2c:b7:c5:38:11:b3:a8:e1:65:
         79:d6:2c:f7:30:2e:47:0b:8c:50:02:12:db:db:3d:49:f9:79:
         64:96:8f:36:7b:34:1a:6f:a6:3e:fe:7a:8b:01:01:d4:3a:c3:
         b5:7d:54:33:60:d3:a8:29:1e:b6:b7:e1:a2:0b:fb:01:32:a8:
         1e:ce:16:fe:53:db:c9:c9:f2:a9:19:a0:81:8c:71:5c:60:83:
         5d:05:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:35 2026 by rpki-client