Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          bD9RtrHVd8wCedufgJE5BN5Unp8CEI1QWlrS02nfu08=
Subject key identifier:   B2:32:5B:2B:CC:00:38:8F:4D:83:E3:D9:ED:E1:C7:BA:06:6F:DD:CC
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019CECA67A5EBC288E51BB9D7F79B854DE7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1778
Signing time:             Sat 14 Mar 2026 14:00:59 +0000
Manifest this update:     Sat 14 Mar 2026 14:00:59 +0000
Manifest next update:     Sun 15 Mar 2026 14:00:59 +0000
Files and hashes:         1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: SvBHKlbFPfzm3n4Ft82x9Nq+TG06OV88IzYLIMeJM0g=)
                          2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:a6:7a:5e:bc:28:8e:51:bb:9d:7f:79:b8:54:de:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Mar 14 14:00:59 2026 GMT
            Not After : Mar 15 14:00:59 2026 GMT
        Subject: CN=b2325b2bcc00388f4d83e3d9ede1c7ba066fddcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:a6:ef:94:79:70:a8:7f:1c:d1:b3:96:74:
                    f6:83:ab:1e:14:35:da:1f:d6:7d:1b:b2:0e:02:cb:
                    78:1a:35:8e:dd:85:fe:17:a4:30:2a:2b:d7:1f:9a:
                    7b:fb:e1:c9:4c:d5:b3:8e:67:3f:49:6b:c6:08:52:
                    5b:97:8b:33:21:5a:c1:98:5d:f0:d2:79:41:60:dd:
                    86:78:9d:6f:0e:35:e2:d9:31:c9:08:16:83:4f:3a:
                    39:60:7a:78:f5:93:2a:02:b2:dd:76:79:9b:bc:20:
                    aa:26:d4:9e:e6:6d:11:87:67:5c:ad:56:c8:2e:98:
                    fd:b7:05:8d:c5:bf:00:9e:cc:1e:6a:74:00:1d:99:
                    88:87:cf:68:47:21:4f:7a:06:13:43:60:49:2f:9c:
                    74:fd:6d:3e:9e:a4:ef:81:d7:50:9b:aa:a4:90:19:
                    6e:0e:70:60:66:64:cb:21:1e:91:fc:31:49:9f:6f:
                    1a:6d:bc:c4:d1:1b:5f:0f:ab:9f:c4:c3:77:f5:58:
                    79:25:40:5a:9f:52:6f:a8:2e:61:14:69:c6:20:10:
                    dd:7c:6d:2f:ab:44:92:0c:53:d1:fb:53:07:d7:77:
                    28:f0:ec:41:19:d0:5f:ea:9a:92:36:4d:05:24:eb:
                    97:f1:90:27:d2:42:d0:a6:ed:eb:c8:da:84:38:66:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:32:5B:2B:CC:00:38:8F:4D:83:E3:D9:ED:E1:C7:BA:06:6F:DD:CC
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:f8:83:cb:38:75:f1:5b:df:42:f5:7d:21:ad:37:27:07:
         ad:ae:f9:ba:3e:4c:be:84:6b:91:d0:9d:f6:23:06:63:c8:f5:
         7b:a2:ae:37:af:2e:7e:a9:a8:ca:0a:a6:2c:5f:f0:75:52:6f:
         b2:d8:f5:8c:d9:1e:29:48:bb:06:a6:47:84:41:e8:a6:0d:66:
         ae:47:fc:ea:a6:d6:50:6c:7b:a8:72:28:2f:cf:f1:d8:39:e3:
         84:1a:57:b5:12:56:85:ba:43:5b:33:f5:a6:97:04:c9:40:9c:
         94:46:70:89:b9:e0:c8:2c:c3:9a:36:e5:78:3c:e7:82:71:2a:
         e2:7c:ab:28:4d:1b:18:78:3d:00:6f:3e:df:6e:1f:34:4e:57:
         6c:ae:2f:11:c5:34:f5:29:a3:20:88:f1:23:e0:60:9e:26:43:
         2a:3a:68:5c:0d:bd:ef:2d:cd:49:17:59:a4:71:1c:f1:4e:67:
         b2:3e:d8:ef:8b:4a:b9:13:94:b8:4d:94:4f:89:8a:ba:9c:f2:
         cb:87:ef:d0:09:93:e6:06:62:2b:05:b6:5e:c1:61:4b:ae:b1:
         6b:d5:04:92:f6:94:90:1f:26:c0:f4:d8:38:0f:d7:87:ef:22:
         b7:33:66:7a:22:c4:a1:19:15:5d:3e:bb:28:8d:ad:11:0f:bf:
         e9:9f:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:39:18 2026 by rpki-client