Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          tuqeNaoVq8KAGlNi8cSrU6a/wHAWBX0OXNXnjpVIQKE=
Subject key identifier:   A1:CA:C6:5D:93:21:BC:71:BE:53:67:48:06:7F:88:99:04:6D:F8:1E
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019D2214FDBB5BA515B4CE2743D3DEFC99D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          1888
Signing time:             Tue 24 Mar 2026 23:01:34 +0000
Manifest this update:     Tue 24 Mar 2026 23:01:34 +0000
Manifest next update:     Wed 25 Mar 2026 23:01:34 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: yjy9HK9xC2rpiBA+mazsPy9u8jCqwHP8o29aK48g1Jg=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 23:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:22:14:fd:bb:5b:a5:15:b4:ce:27:43:d3:de:fc:99:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Mar 24 23:01:34 2026 GMT
            Not After : Mar 25 23:01:34 2026 GMT
        Subject: CN=a1cac65d9321bc71be536748067f8899046df81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:b1:e5:05:32:ba:77:5d:9f:65:25:71:e7:
                    23:c0:a0:c6:3b:0a:1b:a7:f6:11:2b:1b:9f:b0:d7:
                    8c:cc:0d:a6:34:8c:d9:67:0e:cd:0d:26:3c:ca:16:
                    07:44:1b:fe:a7:4b:53:10:34:85:ff:2c:79:0a:9d:
                    70:7d:e1:6e:4d:01:45:ed:88:70:94:40:ad:d8:16:
                    85:bd:72:b1:3c:bc:40:b2:3c:6c:24:aa:32:ec:c4:
                    7b:f6:17:f0:90:a6:a7:8d:93:9d:cc:1e:21:9e:1b:
                    22:26:af:23:df:c3:51:cf:0f:f4:ba:06:c0:66:13:
                    7e:f3:1f:8c:10:40:a4:34:75:26:17:f1:7d:9d:ec:
                    3d:ae:f4:ab:8c:cd:00:d3:83:64:97:e7:dd:6c:4a:
                    25:29:3f:4f:d6:89:3b:e2:54:f6:df:9d:39:fb:cd:
                    43:1f:da:6e:87:e4:59:7c:f5:fc:2f:7a:52:49:79:
                    bc:34:82:26:8f:5a:4e:97:66:ce:f7:71:23:4a:38:
                    01:68:ab:f7:2f:2b:89:a0:d7:f2:04:c6:1d:f7:a8:
                    e8:62:57:2e:bd:3a:14:64:9f:16:32:ee:07:57:61:
                    0e:9a:7a:66:7b:5d:9f:5b:db:05:c7:cd:59:2c:e7:
                    d2:90:96:e1:1b:78:86:9c:da:59:2b:f0:ec:63:2b:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:C6:5D:93:21:BC:71:BE:53:67:48:06:7F:88:99:04:6D:F8:1E
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:e6:73:98:da:43:31:bf:a6:69:59:7d:e5:87:04:13:7f:
         98:fd:85:df:c0:4e:c7:a1:4d:67:2b:8e:e2:9d:c7:ff:33:57:
         e2:b9:44:28:39:54:d1:bd:cf:64:44:da:19:0c:b0:bd:81:0a:
         8b:d2:06:e9:c7:9c:f5:e4:3e:25:f1:d4:7e:9e:30:03:f4:9d:
         ef:00:0f:ab:ff:6f:39:8a:2e:d9:06:b3:6e:be:22:b1:03:7b:
         38:1c:d5:cc:da:83:50:cd:9d:3f:25:f4:78:58:ce:80:57:dc:
         d6:85:b6:ce:ec:52:b7:83:c6:8c:1a:80:24:e9:13:c4:7f:46:
         c0:86:79:e6:2f:a5:4a:5e:2f:5c:77:21:79:23:02:09:8c:4b:
         a5:17:a7:2f:75:49:04:ca:ba:12:68:29:02:87:f9:d5:ff:92:
         3a:6e:96:d1:ee:9b:5c:22:9f:ee:63:15:9b:50:07:24:e4:e3:
         21:f3:51:8f:77:de:ff:32:61:97:91:82:fd:ee:bb:6f:7b:a7:
         61:dc:1e:51:43:6e:92:d7:b1:c6:22:58:a5:38:1e:9c:76:bd:
         4d:01:cf:93:61:49:51:65:be:8a:91:89:82:05:a8:32:b7:2e:
         b0:ee:7b:8b:92:31:e1:b7:a7:da:fd:03:09:67:45:c7:4b:3f:
         69:fc:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:56:42 2026 by rpki-client