Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
File:                     mGpc6Mx8vBzhNJbJgaibw0cufgs.mft (raw, json)
Hash identifier:          74lC+g8SCq4HVqmg2nyLgW5ES31aIQ9efb6QH9Pd8rY=
Subject key identifier:   35:D1:CB:13:F5:BF:59:7A:0E:E3:46:81:C5:C7:F7:20:C9:D5:DE:59
Authority key identifier: 98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
Certificate issuer:       /CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Certificate serial:       019D3789333CEBD5A2E5098DAB0CA4B51544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
Manifest number:          9D
Signing time:             Sun 29 Mar 2026 03:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:31 +0000
Files and hashes:         1: mGpc6Mx8vBzhNJbJgaibw0cufgs.crl (hash: YTYJsyd1NoHEFsuXPRrINWuBSRBHxFpUbsDOmznH87Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:33:3c:eb:d5:a2:e5:09:8d:ab:0c:a4:b5:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
        Validity
            Not Before: Mar 29 03:00:31 2026 GMT
            Not After : Mar 30 03:00:31 2026 GMT
        Subject: CN=35d1cb13f5bf597a0ee34681c5c7f720c9d5de59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:30:11:29:a7:bd:26:ae:2b:67:d3:2e:a5:
                    2c:4e:18:fd:d0:45:b2:15:32:79:53:cc:29:79:f3:
                    68:a2:05:ac:4b:1e:f2:3b:f6:2a:f2:0c:9c:df:f0:
                    c3:28:3d:dd:f2:9e:fd:7e:12:3b:56:20:e7:48:ef:
                    3f:7b:ef:4f:3a:65:35:af:5e:73:b3:9e:29:68:cd:
                    9b:db:2c:42:45:cb:ba:76:11:32:de:5d:b0:2c:e1:
                    d2:ef:62:a9:7f:22:57:02:5d:35:75:4b:0d:0e:ff:
                    d2:bc:44:7e:b5:79:78:a7:51:20:99:78:2b:1f:d9:
                    61:b5:6b:a4:6d:11:7a:1b:40:db:22:99:8d:3e:c3:
                    bf:b9:c7:63:9a:93:72:cd:c7:07:5e:cd:0a:a7:df:
                    38:39:68:87:8d:7a:bc:83:66:70:08:a0:ed:35:f8:
                    5a:5f:12:ed:ea:3f:e4:e4:3a:7e:d7:63:78:9e:86:
                    62:8a:43:74:6f:30:19:36:66:d7:ce:79:ac:7f:28:
                    ef:5f:89:22:83:49:fe:5b:74:f3:1d:64:79:92:02:
                    fc:62:d6:96:d0:75:70:81:a6:ce:69:6d:3a:00:cc:
                    69:b6:b7:6a:0f:77:54:d2:5f:92:03:11:11:a2:3e:
                    46:a5:a8:09:41:15:97:e3:61:65:8c:68:6b:bd:2d:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D1:CB:13:F5:BF:59:7A:0E:E3:46:81:C5:C7:F7:20:C9:D5:DE:59
            X509v3 Authority Key Identifier:
                keyid:98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:ae:17:e9:d3:d5:3d:b3:de:0f:32:ee:96:77:08:9e:68:
         c2:18:7d:75:b7:9d:93:7a:18:5b:46:e0:9b:f7:69:01:c4:52:
         28:3f:aa:18:10:98:27:58:9b:61:6f:70:e4:97:49:fa:fe:ef:
         2b:79:ec:fd:8f:13:8c:a1:88:69:42:d0:49:8a:2e:98:44:1d:
         70:3b:a7:ae:ac:f2:65:73:25:c5:1c:be:ba:90:43:10:ca:53:
         4a:83:f2:a1:c3:c9:9c:45:29:39:35:eb:b1:1a:dc:7a:5a:0c:
         fe:29:aa:a1:09:89:03:6e:22:16:cd:32:aa:dd:5c:82:ca:c4:
         2e:ff:e5:de:2d:fe:dd:45:7b:a0:5c:3f:06:48:c2:7e:3d:08:
         ab:e8:2b:04:5a:99:b7:ad:3e:b5:56:2a:56:1c:40:18:9f:18:
         cc:7f:8c:69:5c:72:5c:55:d9:78:83:5f:66:dd:26:4f:bc:3e:
         68:13:61:55:8d:00:ac:70:1d:21:b8:5e:6d:83:98:55:38:bb:
         e1:37:38:50:ff:54:70:f8:97:6a:a1:80:b4:e7:92:76:ed:ee:
         55:6a:8d:df:e4:ff:38:5b:97:0d:06:f5:72:07:81:39:08:7f:
         22:19:4c:80:7e:1f:d1:de:94:ec:e8:98:4b:56:fc:0a:b2:73:
         c6:95:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:41 2026 by rpki-client