Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File:                     RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier:          /fyi+UvBZ2BB6a2+0QoIMUccyVcBngpNQgo5uNKRm3g=
Subject key identifier:   AC:BC:75:51:1B:CF:A6:F8:9F:7D:C7:FE:40:50:CA:3B:39:AA:15:63
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer:       /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial:       019D389C4AA7314557763F3F952FCDB8DE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number:          179F
Signing time:             Sun 29 Mar 2026 08:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:59 +0000
Files and hashes:         1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: xG/NvjeJxnRUMaIukKHYXqSBQHAgJTV0+2G1JE6+8fg=)
                          2: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (hash: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:4a:a7:31:45:57:76:3f:3f:95:2f:cd:b8:de:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
        Validity
            Not Before: Mar 29 08:00:59 2026 GMT
            Not After : Mar 30 08:00:59 2026 GMT
        Subject: CN=acbc75511bcfa6f89f7dc7fe4050ca3b39aa1563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:b7:46:b0:fa:50:02:23:ba:de:93:ba:56:
                    6d:3a:38:ed:db:23:5e:41:36:f2:df:4d:a4:27:1e:
                    c1:ce:cc:99:9d:a8:18:14:9b:f4:89:1d:f7:7a:a5:
                    1a:09:7c:10:16:8c:60:cd:04:37:5d:77:e1:72:11:
                    16:97:fe:9a:a6:83:1b:bd:19:54:07:01:3a:be:84:
                    0d:ee:7e:ee:d2:41:e6:66:06:c5:ea:c5:8f:d4:43:
                    18:7d:e4:63:6b:0a:65:1a:a4:85:0c:e3:80:a7:e5:
                    9b:94:50:18:e6:23:ca:c7:cd:ed:5b:3c:11:8f:33:
                    e2:3b:9e:b6:af:48:ed:9d:c0:45:66:6a:8d:de:b4:
                    71:05:0f:7d:8e:f6:7d:b4:b2:ef:eb:2f:f6:ee:cb:
                    ea:93:6f:e3:07:af:58:f1:74:9a:e2:13:49:9d:56:
                    47:30:1f:ae:77:b0:38:86:f4:88:77:25:7f:cd:ac:
                    bf:a2:2f:aa:af:50:e1:12:50:4f:9b:da:03:9e:fd:
                    65:ad:7d:ed:01:22:44:80:75:48:dd:06:8c:32:8d:
                    44:75:1c:3d:bc:1f:82:05:88:06:51:62:26:39:47:
                    bc:18:71:c1:fa:b1:6e:fe:5a:01:bd:ef:a3:8b:41:
                    5d:e2:a6:61:be:9e:91:59:d6:52:32:43:1a:d7:4a:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:75:51:1B:CF:A6:F8:9F:7D:C7:FE:40:50:CA:3B:39:AA:15:63
            X509v3 Authority Key Identifier:
                keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ac:d0:92:95:ff:98:90:9d:81:84:43:88:ca:8c:47:3f:3d:
         5d:e1:9e:ab:ac:5f:d6:dd:c4:dc:8d:cf:de:ee:75:a7:e9:31:
         9f:1f:79:fc:56:be:10:51:e3:55:34:54:bb:b3:ec:66:41:c9:
         4c:50:43:73:a8:2c:95:46:42:03:11:52:83:3a:91:32:f3:80:
         cd:cb:8e:0b:1e:b3:ea:63:0d:79:2e:95:23:62:31:71:c9:5a:
         d6:02:7a:db:cf:03:85:51:3a:21:d2:b5:52:d4:d3:82:b5:04:
         2d:4a:ff:48:b0:3b:ed:ba:2d:0d:ec:06:8a:e1:0e:98:52:a8:
         69:15:b1:b8:0f:c6:be:a5:0b:bb:d2:0f:e1:e2:32:fa:fb:89:
         96:12:3d:cc:3c:e8:b4:96:dd:64:61:c3:52:b9:6f:30:98:ec:
         de:fc:e8:a4:da:60:74:f4:44:6b:5c:bd:ae:51:7d:85:76:d1:
         44:47:33:7d:98:55:04:9d:ed:85:df:01:bd:09:13:e7:86:2c:
         dc:8b:13:c3:f7:e7:5c:f8:b7:10:33:fc:b8:95:0a:0e:a2:b4:
         a4:1d:f6:5c:25:9e:8c:a2:97:bb:33:4e:74:4f:b8:5f:c0:b0:
         54:81:62:55:c7:7b:0d:f8:b7:ca:6d:2f:bb:14:05:c4:82:72:
         e8:1e:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:10 2026 by rpki-client