Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          r3R0TU14RQv817ZYI6uCoC8FCMiVYWlGgp6wUkA2Sr4=
Subject key identifier:   6F:A7:9C:B4:E8:E0:A3:D5:D7:6E:BE:3D:37:A5:27:12:46:97:8E:67
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       019D37F6EBEFB39FE2073F861B0646FB8B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          105A
Signing time:             Sun 29 Mar 2026 05:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:22 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: 2Xyil880oTNn+JVP597bJyLG0Lv6fu8cKhSV04Nh78E=)
                          2: bwUes-crYnDaWmfkSgjmaGPderc.roa (hash: X7axPRZQ+Fy3248GsJnvoTWbu+uAo3jc8nap7n2R83o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:eb:ef:b3:9f:e2:07:3f:86:1b:06:46:fb:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Mar 29 05:00:22 2026 GMT
            Not After : Mar 30 05:00:22 2026 GMT
        Subject: CN=6fa79cb4e8e0a3d5d76ebe3d37a5271246978e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:52:29:89:51:fb:51:86:16:60:e9:5a:6e:
                    d4:ce:a8:f7:5d:97:c9:a7:8e:d3:45:b4:d1:91:85:
                    bf:29:d9:df:71:8f:76:09:e6:c9:7f:c2:64:1b:49:
                    91:24:d5:5c:ba:1f:5a:a9:59:c6:20:60:9d:90:ce:
                    cd:4f:17:5e:7c:db:4d:65:00:3d:9b:ea:9e:6e:6d:
                    ed:99:fa:a9:47:b2:7b:37:1d:0a:a8:c8:ff:a1:51:
                    5c:8d:35:a6:77:fd:1a:d1:a4:0e:92:23:76:57:04:
                    94:6e:a7:c0:54:b8:70:28:86:6b:df:92:af:a6:e9:
                    f5:c1:ac:6f:72:1f:2d:0b:a5:e3:f8:e6:2c:82:92:
                    98:3a:7b:da:75:bb:77:46:46:c6:d1:6b:fc:1a:9f:
                    db:f3:32:de:a2:57:55:1c:7f:97:31:8c:b6:07:83:
                    66:56:63:68:5a:b4:42:a3:41:e3:92:56:76:29:c2:
                    17:df:fe:9c:d7:f0:ad:f9:1f:cb:e1:99:3a:00:88:
                    1b:e8:9d:48:7c:af:a1:15:27:88:19:c5:97:7b:d3:
                    e9:87:ba:5b:d3:b4:07:ce:39:78:d9:a5:88:20:7e:
                    d2:45:e2:b8:45:57:02:e8:3e:ff:c4:4e:a2:4e:eb:
                    8b:5c:90:5c:03:44:45:fa:c1:01:18:1f:29:dd:55:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:9C:B4:E8:E0:A3:D5:D7:6E:BE:3D:37:A5:27:12:46:97:8E:67
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:68:44:2e:1c:31:f4:a6:2e:bb:83:1a:8f:61:42:bd:7d:26:
         9c:cb:b1:a4:2c:29:6a:4e:27:4d:df:08:52:a5:7f:af:34:ef:
         dd:c6:e1:13:59:09:c5:c4:3e:40:c0:a8:ea:24:1f:0f:2c:2e:
         ff:a0:58:3d:45:44:94:dd:63:39:25:98:0c:17:3a:97:65:38:
         a5:fa:80:69:68:f4:01:f6:68:2e:e4:06:6e:cd:aa:9c:1f:b7:
         df:c7:e4:ac:ac:d6:6c:2e:d0:42:0f:39:11:d8:9c:7b:67:8b:
         be:cf:72:eb:a6:60:e9:cf:c7:af:b2:86:4a:f4:54:f4:c4:3a:
         02:d6:ab:3d:28:b4:b7:8d:40:6d:70:2e:53:8d:d2:30:cc:b9:
         92:31:20:a9:82:7a:5f:7e:f4:7c:0b:ae:8d:3b:a9:44:94:78:
         64:c5:01:b8:55:c2:8e:47:d6:f4:63:14:17:78:34:eb:71:28:
         37:3c:3c:c0:e2:4f:a0:4e:0f:86:74:9e:b0:f5:b4:99:20:f1:
         87:fd:91:58:2a:f8:d1:cf:94:b0:da:6e:fc:51:cb:a5:0c:ac:
         f7:01:7e:a8:49:bc:42:81:12:f5:21:d7:f2:ec:86:22:b7:88:
         09:7a:eb:9b:1b:41:f3:85:7d:ff:a2:2f:7e:25:21:da:72:59:
         ed:2c:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:46 2026 by rpki-client