Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          Bx4jqMNdoo+8wK5FrHU3ITNjcQCtl+M/sNA9eBDLCCM=
Subject key identifier:   27:49:53:8E:FE:BE:05:23:19:75:D8:88:4A:94:C1:44:AA:A3:90:14
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       019D39780AF4BE802DC117EB98890E845E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 12:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:01 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: J/gbuylOEr98Ca3U+a2PbofHLs8Shbhge+e2Tbam0qo=)
                          2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:0a:f4:be:80:2d:c1:17:eb:98:89:0e:84:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Mar 29 12:01:01 2026 GMT
            Not After : Mar 30 12:01:01 2026 GMT
        Subject: CN=2749538efebe05231975d8884a94c144aaa39014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:31:ce:cb:a5:0b:a3:83:f5:2d:cf:06:db:
                    e7:84:f1:7b:d4:8e:de:86:c3:f3:cd:9b:79:e3:02:
                    5e:d5:78:7b:a3:10:6c:f1:4b:bf:11:b9:f1:66:3a:
                    62:cd:cf:ef:84:fe:97:8d:42:c2:28:4e:df:dc:1b:
                    46:5d:5f:a7:14:b3:68:22:ed:c9:6c:ee:35:7e:47:
                    0d:c9:fd:fb:01:4b:e1:41:e3:c5:64:c0:bc:33:12:
                    9a:44:f2:55:3d:d7:62:35:88:4f:12:61:2c:5e:2b:
                    78:55:1b:b9:25:d0:72:90:02:06:73:24:fe:63:33:
                    7d:81:b2:0c:dd:40:74:0b:8d:0f:2e:99:9d:66:02:
                    d8:88:8b:2c:89:ff:85:79:0e:c4:fe:7e:2c:b4:bd:
                    b8:e7:b9:75:6d:d9:39:0b:ed:77:a5:91:6d:ef:34:
                    c0:7a:83:4d:40:fc:f3:b2:27:5e:af:ad:50:e7:fe:
                    25:66:d6:3a:15:be:92:ad:03:4c:32:49:f0:af:81:
                    94:66:23:89:06:33:d2:88:08:32:e5:76:02:89:a9:
                    c8:19:6d:00:b7:89:9e:0f:8e:6c:1a:1d:8d:6c:79:
                    77:85:a9:35:db:35:d4:04:3e:16:e2:99:51:4f:18:
                    4c:4c:c3:0b:a9:9a:48:e0:e0:4d:ff:fc:78:55:5b:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:53:8E:FE:BE:05:23:19:75:D8:88:4A:94:C1:44:AA:A3:90:14
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:10:8d:d5:7d:70:32:7b:04:23:65:ac:1d:b2:da:11:b8:a9:
         e3:f8:b9:3a:01:32:40:46:8c:f0:12:d6:37:a7:e7:f5:af:19:
         83:a4:8c:e6:aa:74:85:ef:46:d8:61:82:79:49:de:50:f0:48:
         d3:51:26:aa:1f:92:41:75:89:53:87:92:42:8c:a0:34:89:ee:
         d8:4d:83:cc:8d:99:96:1f:96:70:4c:06:69:fe:08:c6:0f:fa:
         49:04:59:51:a2:6f:7b:10:9c:97:70:1a:f2:d9:0d:9d:79:82:
         7e:ea:ec:46:90:fb:a6:50:54:07:76:63:6b:98:20:61:a0:57:
         77:d5:ad:a0:87:29:57:f9:2f:cd:eb:ad:8c:46:66:6b:8a:07:
         6f:d6:c4:02:0e:f6:ed:08:ab:42:82:2d:30:79:6b:29:55:13:
         72:da:f8:66:bf:67:8a:4b:81:41:8b:4c:4e:86:bc:cf:ac:9f:
         16:09:a4:ec:3d:a4:5d:b1:d8:cf:68:99:f5:11:39:57:59:97:
         84:18:7f:f7:25:70:e6:a0:e2:28:9d:47:5e:42:01:86:8b:88:
         0f:4d:77:48:a4:dd:68:8f:1a:19:50:c7:86:e8:ae:97:b7:dc:
         93:42:8e:e5:60:86:11:00:a9:a7:e9:d1:3f:d1:a5:75:dd:b7:
         cb:d2:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:33 2026 by rpki-client