Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File:                     MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier:          qABpO2/tuxKq/dH4X/DIR/w5QW18EVNdvpBqp9SZQvs=
Subject key identifier:   9E:6F:15:32:9E:CF:D8:AC:5E:C1:64:66:B4:4C:A5:2F:44:95:85:6F
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer:       /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial:       019D37C051BD2C01277D01EE973515E3A0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number:          148E
Signing time:             Sun 29 Mar 2026 04:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:43 +0000
Files and hashes:         1: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: a1Oos3u5pZq/47Hls7WjFt3BlPkhmzhhIZe1dIuzA9g=)
                          2: eHtaTNEahZIqEQ5NQhbqNOgkte8.roa (hash: MNC6u/UzUFisfjBXSx9RpaJq0ODx2gNTOpYSp6+HJcc=)
                          3: okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa (hash: DLxr6CGIcuVxZVonr1XOEIfUiCddhAdND4Lz/E80A58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:51:bd:2c:01:27:7d:01:ee:97:35:15:e3:a0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
        Validity
            Not Before: Mar 29 04:00:43 2026 GMT
            Not After : Mar 30 04:00:43 2026 GMT
        Subject: CN=9e6f15329ecfd8ac5ec16466b44ca52f4495856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:41:59:48:af:13:2c:04:6f:1a:49:47:3d:
                    e1:bc:24:10:5c:d0:32:39:f2:e8:8d:3f:c3:4b:02:
                    97:fe:3d:05:e9:72:59:e0:fd:f3:c3:a9:b0:2b:29:
                    da:bb:96:1c:ec:45:b0:d6:3b:85:4f:7d:c4:ad:fc:
                    50:ed:51:de:38:d6:93:87:be:7c:f0:7f:e4:d4:e3:
                    79:b5:e8:c8:39:2d:71:9a:bd:33:9c:b2:1e:4c:ad:
                    7f:a5:ab:d9:ad:1a:d6:69:8a:ef:34:ea:8f:e7:65:
                    4a:17:7d:f4:fa:38:eb:d3:2f:d4:f8:6b:f2:b3:c6:
                    fc:1c:2c:8e:2a:8a:99:80:fd:0b:0c:6c:9c:b9:46:
                    8e:7e:c7:af:86:f7:5d:ed:74:0b:41:53:e1:19:8a:
                    96:30:fb:7b:e9:56:28:a8:c9:48:75:79:d1:b7:89:
                    77:c4:1f:87:0d:49:3e:44:7c:78:79:c3:f1:1f:05:
                    a5:32:c2:8a:88:b8:74:b3:36:ee:ae:cf:fa:8b:42:
                    e5:87:9e:00:37:f4:ba:88:20:02:37:14:60:cf:97:
                    3b:ca:09:10:d6:93:14:90:e2:5f:f2:52:ec:fd:a1:
                    cc:7c:e8:60:a6:93:cb:ca:e2:f8:8a:f3:e2:8c:e6:
                    7d:16:2e:c7:11:8c:ed:94:01:3f:c2:56:96:9b:9a:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:15:32:9E:CF:D8:AC:5E:C1:64:66:B4:4C:A5:2F:44:95:85:6F
            X509v3 Authority Key Identifier:
                keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c0:65:87:f1:aa:ba:99:3f:3c:a4:a4:90:a6:02:93:b0:3d:
         c6:1c:63:e6:6f:7a:8a:69:d4:33:6c:ba:fd:c3:8a:66:aa:bd:
         d1:ae:8e:54:a0:ac:0f:89:41:ee:97:c1:79:26:13:6b:0a:ac:
         7e:dd:91:e3:fa:09:be:18:39:03:cc:ba:fd:df:26:08:7e:71:
         bb:37:62:5e:37:df:61:95:1f:09:8e:62:62:0a:5a:33:84:dc:
         18:de:a2:a8:51:5a:71:32:61:0c:1f:5d:c1:bf:3e:e3:b0:96:
         b8:97:77:dd:6e:75:d4:c9:82:61:4a:7d:66:05:86:c0:63:69:
         c9:85:4a:b6:2f:37:2e:02:9b:b4:62:05:f3:c1:4f:e8:c6:ab:
         59:77:d0:c4:40:8f:2a:38:19:e8:d5:e3:27:14:c5:eb:31:3f:
         4c:c6:2b:07:61:4a:02:81:45:51:8f:de:6e:ad:b0:54:46:1b:
         08:63:17:f4:4b:56:6f:64:75:8f:3d:19:87:8c:94:a5:88:99:
         74:a3:ea:cb:a7:e8:93:c7:a5:6c:bc:e2:70:1a:f6:74:ed:4c:
         0d:4f:54:3d:6d:46:96:bc:6d:07:72:c5:b7:db:65:c5:9d:7a:
         d3:69:c7:13:01:b9:cb:e7:8c:88:94:21:13:c5:a9:ff:b5:0c:
         e7:d6:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:31 2026 by rpki-client