Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          p/qI7yU2tJVeywN4qizuYZ4pTHkRF4H0SkEJX4RL3hU=
Subject key identifier:   A9:1E:19:3A:3F:6F:DB:74:3B:63:00:FB:C2:BD:E6:6D:F4:20:7F:51
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       019D38657280085F93584EAECE177717E278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          0973
Signing time:             Sun 29 Mar 2026 07:01:05 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:05 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:05 +0000
Files and hashes:         1: QGWyZMZEDWndXF66DUb-_cMUkV4.roa (hash: zrKxfGy5U0QaVBrkDGQlV7fiPOhFDa/FGROBClyRSz8=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: l6pSbsKxyY9VP3wTeXGRUEx97aoj5VNTzzdMHvziuPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:72:80:08:5f:93:58:4e:ae:ce:17:77:17:e2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Mar 29 07:01:05 2026 GMT
            Not After : Mar 30 07:01:05 2026 GMT
        Subject: CN=a91e193a3f6fdb743b6300fbc2bde66df4207f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:d4:54:73:9d:5a:3d:c8:6e:df:d8:82:2d:
                    06:b3:02:aa:73:45:8f:e9:a4:a9:9f:27:7a:c6:d1:
                    08:44:5d:0a:13:6a:55:43:20:31:f8:13:8e:30:2d:
                    d5:02:4f:3a:e2:a4:3c:05:d1:e8:2f:86:00:78:96:
                    0c:2d:4a:68:25:dc:e1:32:ae:7d:d4:6f:61:30:e2:
                    42:ec:db:68:78:f5:81:d3:85:db:df:ee:c4:d8:2a:
                    83:a4:d8:bb:81:9c:63:8c:2e:13:09:be:fa:1a:63:
                    df:8e:89:1e:16:8e:0f:f0:a2:a3:30:ac:d9:a0:56:
                    6f:18:c7:e9:d7:d8:ee:e1:1a:bf:24:a8:1d:b7:6d:
                    a1:f1:e2:a6:04:06:d3:8d:c4:ea:8c:87:37:0c:41:
                    a5:b5:0c:f6:a6:97:9d:f3:05:6c:92:fa:5b:3c:b1:
                    0e:f8:5e:27:ee:3b:28:f8:97:ca:29:11:fc:5c:28:
                    92:8c:67:55:7f:9d:02:16:03:65:b6:18:c8:6c:72:
                    49:7f:be:cf:0b:64:08:69:e3:25:a4:9d:80:47:28:
                    75:78:83:bb:9b:61:44:d5:b8:8c:9b:4c:a8:06:ff:
                    3a:b7:c6:b8:67:7e:fa:8e:72:74:27:55:92:63:b3:
                    92:9b:18:12:34:89:4e:79:6a:f8:c8:d4:68:b7:24:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:19:3A:3F:6F:DB:74:3B:63:00:FB:C2:BD:E6:6D:F4:20:7F:51
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:6b:e6:d3:aa:ec:8a:d7:08:15:b6:4e:5c:1a:df:f0:f7:
         ab:aa:36:7e:11:97:d8:31:6d:4a:3c:57:46:82:e7:d8:82:e9:
         ff:93:85:33:c6:9a:59:89:e4:12:c2:04:c5:03:31:f1:bc:f1:
         11:f9:70:70:4a:19:c6:48:38:46:5d:6d:82:9f:2f:1e:03:67:
         5d:91:66:ed:19:91:fe:90:6c:ae:70:5c:c6:44:52:05:5e:89:
         d1:9c:db:33:10:27:0f:7a:7b:3a:28:3f:bf:7d:52:2a:26:2a:
         1a:9a:22:d2:af:65:47:b5:52:39:eb:7b:83:9e:d5:7a:a2:d5:
         60:35:46:1f:a1:80:e8:d6:61:68:a9:db:ee:ba:93:37:bf:8d:
         66:ae:f1:e3:66:7d:42:2a:27:97:2b:d4:80:79:d5:90:b9:7a:
         c6:b5:23:b5:bc:a4:c2:05:97:df:38:45:c2:b3:11:e3:bc:e6:
         64:05:7a:df:72:10:5d:ed:93:c7:d5:41:cc:b3:78:47:8d:73:
         55:71:80:93:ce:f1:e8:56:cb:cb:ee:a0:49:94:f6:dd:88:c6:
         41:67:5c:00:b9:28:75:77:d6:60:2a:a5:e1:c1:b6:49:52:a1:
         bf:51:7d:2a:18:8a:d4:0f:99:64:82:29:42:cb:4d:4b:57:45:
         f1:ba:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client