Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File:                     c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier:          uYJv/UHPiz5pJpCBoTFMB56HLJYhfAD0+6YH8js1gDg=
Subject key identifier:   99:21:88:D8:5E:A1:A2:6C:55:1C:A9:58:83:C8:08:55:2A:30:B4:59
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer:       /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial:       019D37C0E3D518B0FBBDD053220EDE25C3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number:          024B
Signing time:             Sun 29 Mar 2026 04:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:21 +0000
Files and hashes:         1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: 6SUfRj8AX1HYfOcRsYQBaVKdu1qJ2YaIBd9TpFJUZEU=)
                          2: p1a-a2lNsvZGVhwRB5Q8-ie2Sjw.roa (hash: 5afAFR5HkwJfwI8pIXHWdqB0CsCFJkUcufN96ASqJRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:e3:d5:18:b0:fb:bd:d0:53:22:0e:de:25:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
        Validity
            Not Before: Mar 29 04:01:21 2026 GMT
            Not After : Mar 30 04:01:21 2026 GMT
        Subject: CN=992188d85ea1a26c551ca95883c808552a30b459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:48:c1:5a:7e:89:55:7e:bd:80:76:08:4a:
                    f8:2d:87:a3:4e:0e:92:6b:3e:95:31:19:07:1a:0c:
                    19:fe:1f:6a:a1:86:dc:36:3d:63:46:b7:7b:3d:48:
                    df:3d:e0:9e:87:d7:a6:71:32:20:fb:cc:10:33:64:
                    5b:83:2e:f7:cb:b3:df:66:7c:20:be:27:c6:aa:ea:
                    ca:ea:b3:33:ea:08:87:ae:87:6b:f6:b7:88:ae:87:
                    a8:a0:b7:92:c7:83:84:1a:f3:86:ed:c1:ed:b0:fd:
                    24:f5:20:ba:2c:a1:34:c1:2b:b1:8b:05:bc:e9:77:
                    a2:d0:db:2c:b8:bd:b0:85:ab:1f:ed:25:da:36:9c:
                    7e:47:06:f7:93:ff:69:6d:2f:c2:f7:72:51:c7:ae:
                    bf:9c:01:79:73:1b:14:6e:4f:75:bd:c3:a1:a6:83:
                    91:61:10:97:2c:19:80:d7:fc:9b:f0:0c:94:8a:38:
                    24:62:40:91:f7:95:f1:39:f9:0e:d0:73:e4:15:e0:
                    87:13:ca:ae:28:e3:b3:1c:3d:af:1e:69:cc:36:0f:
                    40:a1:7d:01:a6:d8:88:de:67:5d:63:ce:7f:da:ae:
                    5b:8b:f3:8c:57:68:25:e2:2a:a1:ca:ca:4d:ab:e7:
                    26:00:2d:ce:ca:fd:91:ce:ec:26:32:8b:32:b9:e1:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:88:D8:5E:A1:A2:6C:55:1C:A9:58:83:C8:08:55:2A:30:B4:59
            X509v3 Authority Key Identifier:
                keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:b1:97:01:33:ed:7c:e4:f2:b0:3e:ea:dc:30:9e:e0:2b:
         ad:f8:5d:c4:d1:59:6f:34:39:ec:8e:3c:0f:2d:ae:bd:3a:82:
         0d:6e:0f:28:62:53:62:87:e1:a2:c4:3a:94:81:44:6c:03:8a:
         05:17:ee:11:38:ad:ea:2d:8c:0c:a5:37:f4:1c:e5:67:7b:61:
         52:af:3a:c2:17:8f:a2:88:db:6a:21:e0:0b:42:61:1c:9e:51:
         c3:17:8d:91:03:16:f2:c2:aa:86:d8:ef:b5:f1:1a:45:5b:b9:
         33:bd:6d:d8:ed:47:87:6f:6e:04:f8:f0:a4:ed:83:ad:35:fc:
         d8:16:29:43:36:a9:ec:b7:25:21:92:69:4c:f6:61:f7:34:00:
         33:b0:7f:1f:fa:c5:52:29:1a:24:a4:71:3d:e0:21:6d:0a:01:
         a1:07:0c:dd:50:c4:97:dd:02:fc:ff:4c:93:07:fe:c5:ec:0c:
         39:ca:01:b3:84:b1:04:c4:c9:ae:b1:97:f3:a4:c7:8d:0b:50:
         b3:62:85:cb:d4:f6:41:23:11:4a:13:f1:95:f2:85:ca:d6:47:
         9b:de:02:ae:0a:97:f6:e9:58:03:5a:7c:92:ca:8b:d7:81:a4:
         f0:5a:41:04:01:88:17:62:14:43:a4:8e:99:cd:7c:d2:19:da:
         bc:19:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:35 2026 by rpki-client