Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          w9FTXgSC06ghCHEFOfM/7BXBgc9Cj1mUqOhkutoHVbo=
Subject key identifier:   DD:C3:1E:54:CB:1A:B2:0D:04:74:7F:D1:A2:84:2A:E9:87:4D:40:BC
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       019D382E88AC08815F9495B90AB54F5044F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          181C
Signing time:             Sun 29 Mar 2026 06:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:06 +0000
Files and hashes:         1: 3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa (hash: VmbvOjv/8VA94bTsBK4HjtZFv7RcluBdGePjIzuzrpE=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: xQim+gVUnFFgm4Pz13pEXVONfWeHAverAOhDQuiz5CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:88:ac:08:81:5f:94:95:b9:0a:b5:4f:50:44:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Mar 29 06:01:06 2026 GMT
            Not After : Mar 30 06:01:06 2026 GMT
        Subject: CN=ddc31e54cb1ab20d04747fd1a2842ae9874d40bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:6a:b6:f8:b2:60:32:df:20:75:c8:83:29:
                    e8:5e:5e:3b:0a:46:cc:2c:7b:c7:90:10:ce:ec:99:
                    6a:54:96:67:34:51:83:bd:06:d0:af:c6:3d:e9:c5:
                    99:89:c5:6c:f5:01:d8:02:fc:10:a2:84:a0:5c:be:
                    3d:3c:36:57:6b:2b:20:52:97:b1:1f:1b:3b:9b:6c:
                    78:c9:7e:34:14:e3:76:c8:41:46:a8:5a:01:8e:e8:
                    d0:5f:43:29:a6:81:82:5a:39:81:54:20:f0:02:69:
                    86:bd:11:05:68:47:20:c3:13:f2:1b:ed:e7:5f:7c:
                    77:8f:94:70:bd:04:e8:72:fc:e5:f9:a4:c4:c0:d3:
                    0a:62:1d:10:a5:b5:ea:c0:57:81:08:1e:2b:5f:38:
                    13:da:95:a3:f2:4d:eb:0a:9e:ff:45:42:91:ff:af:
                    f2:ee:3d:36:5b:fd:9d:e0:0e:a9:42:59:71:5f:54:
                    b9:2a:b6:18:fb:c9:93:1c:5f:39:7a:56:94:08:36:
                    8d:09:74:67:05:b2:36:12:b1:8e:5a:29:94:77:01:
                    a5:c0:0e:97:07:b0:a2:aa:a2:5a:a2:c8:f1:c5:16:
                    bf:f2:e5:84:e8:db:35:e2:8f:3e:5e:19:3b:b6:1e:
                    16:3c:9b:45:b2:60:40:3e:2e:34:87:56:3f:e1:b5:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:1E:54:CB:1A:B2:0D:04:74:7F:D1:A2:84:2A:E9:87:4D:40:BC
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:d2:28:92:8e:f7:28:b1:c5:6e:7a:40:ad:75:40:7e:5d:
         76:2b:98:79:e3:1c:0c:82:36:0a:25:6d:42:06:77:97:0b:42:
         d7:8f:a6:16:db:4a:3d:c1:19:42:84:aa:48:50:0d:64:92:b3:
         b8:f9:14:b9:99:a7:9a:ca:0d:15:7d:76:01:fa:4f:0f:2c:f2:
         98:c1:d3:9b:54:e6:3e:52:ad:4d:f0:60:b6:73:e1:e1:1c:a4:
         32:52:5b:fc:1d:5a:e9:75:2d:12:e1:3b:e1:fe:94:cc:35:82:
         67:c0:31:75:ff:c3:66:8c:fd:6d:2c:29:59:d9:63:90:cd:55:
         7e:de:e4:11:45:64:08:bb:2f:6a:db:d2:7c:4b:70:a7:06:24:
         9d:ac:4e:4d:ea:7e:63:18:69:b8:fe:ee:3e:22:95:c8:8e:80:
         b7:8c:ad:34:c9:16:ed:e5:18:87:81:3e:6e:94:d9:40:f9:05:
         0e:5b:75:61:b0:b9:08:62:1d:32:db:c7:50:78:ad:d6:4f:16:
         f2:39:a4:bb:93:22:c1:53:46:72:54:c2:a1:7a:ec:35:fd:d2:
         9f:30:08:95:71:4b:18:96:89:8f:fc:aa:f8:a7:bb:f4:6c:90:
         a2:70:0b:63:98:dd:ac:72:10:6e:0f:a5:79:0c:ed:be:e0:a4:
         7a:00:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:32 2026 by rpki-client