Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          YpIOD56WO4xtge26qhThqzNCxZCpDzNJ+/mV2Qo8H+k=
Subject key identifier:   15:27:E3:CD:5E:01:0C:85:FA:B5:FB:61:2B:9F:A7:74:0E:B2:50:A6
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       019D37C078C94F4CA2867484599D2B46BAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:53 +0000
Files and hashes:         1: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: x2T/b9RYUquoEApL+e4gjKTQm7GGCehzcCJR9jCbDbw=)
                          2: lgIUW8G50NhfEaMYgvBurmVi0fo.roa (hash: 8Sm4Fx2OSuy7zWVA+5U4vNXiPTfelyxgWJbPkH4L0bU=)
                          3: p91jRhgPPPPCD8AUVVRLrLT2tSc.roa (hash: VHDy7CGzOsa6Fe1X3O2C9FkcWyn52HsGJPVnDhyYsx4=)
                          4: qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa (hash: /ilDb7HMvOlm/UTTWTM8BFNf5LLlJsVssBSKgu7I4Do=)
                          5: xWBiJmvWmusSflJu9_V6W7XfYmc.roa (hash: Skb1BGsT8j6jKgXJRquu4p4R1kYLRXUsM6g5LOMdMrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:78:c9:4f:4c:a2:86:74:84:59:9d:2b:46:ba:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Mar 29 04:00:53 2026 GMT
            Not After : Mar 30 04:00:53 2026 GMT
        Subject: CN=1527e3cd5e010c85fab5fb612b9fa7740eb250a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:71:97:d8:ff:79:5c:4f:4e:c3:76:55:24:
                    14:fe:4d:10:9c:76:4e:35:fe:48:dc:68:eb:dd:1b:
                    88:58:3d:a7:be:5b:27:ad:a1:5e:dc:6b:73:39:9f:
                    dd:4e:67:22:4e:5d:69:20:81:4b:f2:75:b4:5d:e8:
                    c2:5f:2f:dd:6b:08:c7:c2:1c:81:57:c7:df:99:9e:
                    d2:91:24:dc:74:af:78:d3:35:83:4a:fa:6d:93:6e:
                    80:5d:d1:0c:82:e8:45:6d:8f:80:6f:dd:e8:b0:89:
                    0c:77:e1:9b:e2:2d:2d:51:6d:52:c7:78:09:1a:8c:
                    bf:11:85:94:89:1e:94:c9:19:c8:84:b6:9a:b9:68:
                    e8:55:03:21:e1:8a:d4:e8:7e:88:73:fe:ad:ca:e6:
                    80:29:ee:29:af:52:4a:2f:fd:b5:6f:d2:56:33:01:
                    7b:55:4e:56:bc:f7:f8:27:32:8b:9f:a9:ed:fa:12:
                    6c:33:de:47:c3:47:91:97:fe:eb:29:ac:5f:21:ba:
                    4f:46:d1:b7:b8:72:cb:0d:9f:33:76:0e:02:dc:82:
                    1a:05:51:93:8a:68:31:75:14:a2:06:22:02:12:20:
                    0c:69:ae:1a:f9:4b:5d:de:c9:e1:ab:56:13:af:fd:
                    61:ea:04:d5:3f:b0:ef:9b:3d:9a:42:18:2e:ac:0a:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:E3:CD:5E:01:0C:85:FA:B5:FB:61:2B:9F:A7:74:0E:B2:50:A6
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:ad:9b:bc:cb:7f:5c:29:bc:97:23:6d:52:11:4a:82:2f:
         cf:95:8b:00:55:eb:8f:55:99:52:ad:21:3a:8e:8c:b9:7d:7d:
         e2:55:4d:0f:4d:3e:eb:2c:f2:11:23:3f:92:fd:36:d1:45:28:
         0e:79:5a:92:28:28:27:a7:fc:8c:a0:14:c6:86:9e:02:a0:b7:
         b9:1b:f1:0c:64:15:89:32:d9:08:43:16:76:93:3a:da:0f:91:
         d5:9f:1c:5e:07:4b:4f:85:c5:05:63:4b:6a:92:ec:6d:2d:c3:
         c9:52:09:b4:eb:e1:dc:b4:49:67:e8:2a:f4:60:35:c6:55:36:
         fe:b9:76:fa:3a:a8:f2:3e:4c:44:54:e6:9b:ea:8b:67:3b:64:
         d7:6d:fe:bd:d0:94:0f:f5:d8:09:31:0c:b8:79:a1:3e:e8:c4:
         b6:ff:e2:f8:e6:dd:6d:61:64:da:9e:d0:7f:7a:aa:a9:00:2d:
         9b:73:b2:6f:7a:aa:db:0b:e1:59:15:e3:0d:45:50:2b:57:d1:
         b3:7e:eb:7a:2a:96:02:b2:86:18:17:fc:b2:63:53:0b:b2:6b:
         50:c6:77:bd:ba:6d:87:06:6e:6f:75:b7:45:e1:03:07:40:62:
         17:01:d5:4f:ab:3a:40:fb:f9:fe:d5:ac:74:af:a5:73:7b:eb:
         ef:56:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client