Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
File:                     Myrs0kO-9YfIebv-H-TFpb6zNFU.mft (raw, json)
Hash identifier:          J8E7OQ7yiIwg3JXDqMmbE2djTY034PwObOJl0UGLEc4=
Subject key identifier:   E8:71:65:8F:C2:09:12:AE:97:DD:B2:E6:0D:D0:D7:34:AC:6C:E6:80
Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Certificate issuer:       /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Certificate serial:       019D35644C33777BC355229A63DFEF3926D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
Manifest number:          0237
Signing time:             Sat 28 Mar 2026 17:00:58 +0000
Manifest this update:     Sat 28 Mar 2026 17:00:58 +0000
Manifest next update:     Sun 29 Mar 2026 17:00:58 +0000
Files and hashes:         1: Myrs0kO-9YfIebv-H-TFpb6zNFU.crl (hash: CgxZHbFVBCgfF1ox2v7H1KL5JpP4YrK1PQ53IDcHym8=)
                          2: nCoIFZk2MnhEIDZZRukVQPEaSeY.roa (hash: SANVNvbHmnLZfOlrmAKYjLVvJPKFlkAkCF90MWF7jrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:64:4c:33:77:7b:c3:55:22:9a:63:df:ef:39:26:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
        Validity
            Not Before: Mar 28 17:00:58 2026 GMT
            Not After : Mar 29 17:00:58 2026 GMT
        Subject: CN=e871658fc20912ae97ddb2e60dd0d734ac6ce680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:75:5d:6b:33:bb:a4:c0:ab:80:55:54:6a:
                    60:1f:36:31:21:e1:36:8f:89:4f:19:a0:c6:3b:59:
                    dd:89:c7:67:7b:14:25:a4:4e:cc:25:4b:68:a4:61:
                    cf:cc:df:ba:9e:63:8b:bf:8a:82:39:4c:19:99:e3:
                    27:32:5f:b7:b9:14:b7:70:cb:fe:a3:da:c6:ba:ee:
                    52:00:53:6c:07:93:74:94:db:3e:c5:ce:df:d4:2b:
                    8c:36:13:6c:f4:21:4e:ee:bb:43:46:8d:ed:5b:f1:
                    4b:ce:d3:1e:99:f5:6b:7e:a6:3f:2d:71:19:6b:78:
                    02:63:74:72:9b:dd:23:f0:cf:ab:e2:37:30:e5:ef:
                    52:b1:12:bd:cc:1e:79:c0:fb:b5:df:ca:bf:53:01:
                    15:98:01:0c:fa:46:fc:6f:38:33:ae:b4:c0:73:f1:
                    d5:4f:fb:da:ad:4a:1f:b2:ca:98:4b:63:36:1b:28:
                    70:34:9e:fa:3c:68:73:5f:dc:cb:a3:e1:b3:58:e0:
                    6b:bb:7b:ea:0b:60:9b:7f:54:5a:58:96:6c:46:c5:
                    ad:25:93:2e:20:85:6b:a6:1d:15:ce:db:b8:31:95:
                    70:7e:b7:1e:06:95:a3:84:d5:20:51:68:d0:b3:a5:
                    32:cf:45:31:b6:d8:4c:07:7a:1e:99:4b:d5:ae:63:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:71:65:8F:C2:09:12:AE:97:DD:B2:E6:0D:D0:D7:34:AC:6C:E6:80
            X509v3 Authority Key Identifier:
                keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:25:7c:be:4e:b1:95:f0:a3:6f:c5:80:46:3e:64:78:d6:
         8b:37:19:3a:45:29:6f:ec:4e:f3:66:34:b0:d2:3d:d1:b5:4b:
         63:8c:1e:ba:9a:ab:14:b0:01:b2:c6:f5:40:0d:da:2a:ff:fe:
         97:6f:8a:b1:69:eb:dc:bf:ce:f5:9c:92:cc:e5:28:11:11:d4:
         cd:98:21:7d:71:18:1d:dc:46:4f:9e:f7:f5:68:bc:f9:3c:16:
         97:85:4f:41:bb:9c:04:98:27:2e:3d:10:62:76:6b:17:eb:f8:
         fb:4a:3f:eb:3b:bc:95:85:9f:3a:4a:45:a9:de:a6:cf:7f:55:
         74:03:1e:c1:0b:9a:cb:41:3a:fe:d5:e5:d1:a9:b3:e9:c1:20:
         cd:bf:2b:0a:d1:86:2e:de:c6:6c:50:7e:5b:c1:f6:5b:b8:99:
         ef:e3:c4:4a:cb:74:16:be:b2:b7:5b:b7:58:1a:3d:c1:c0:0f:
         e5:e7:d9:48:57:99:0f:87:3a:bf:90:74:b0:4b:04:d4:52:05:
         95:69:a4:0c:2b:9b:06:a8:1c:1d:f9:9e:d6:d8:fb:9b:00:98:
         57:d9:5c:d1:f1:8a:68:c5:30:6d:c4:60:ec:9d:14:69:18:36:
         fd:af:7a:51:7d:c3:d6:bb:e8:f4:fc:3a:7c:2d:9c:29:72:86:
         52:b8:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 23:15:51 2026 by rpki-client