Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
File:                     IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json)
Hash identifier:          2RTaAPz+cHI35eOSxoHWHSp4G7TQjEGg5Ul0iQe7PiM=
Subject key identifier:   34:7A:B6:DC:D1:DB:7F:56:6A:16:2B:24:36:A5:33:6A:AA:80:81:B1
Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
Certificate issuer:       /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Certificate serial:       019D39418FB1DFBFE39DB0AFF494A6391594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
Manifest number:          01CC
Signing time:             Sun 29 Mar 2026 11:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:31 +0000
Files and hashes:         1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: FFX+NtRsY++L3dlKAizsnq3YD4eDikoKyYbpsxkILUs=)
                          2: __gU18kn96xEQP-dgqv4pCY4F3M.roa (hash: iyyh1hfdSStH6dbQTlmWYSXkFzAYSbU1VEOsURfS4Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:8f:b1:df:bf:e3:9d:b0:af:f4:94:a6:39:15:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
        Validity
            Not Before: Mar 29 11:01:31 2026 GMT
            Not After : Mar 30 11:01:31 2026 GMT
        Subject: CN=347ab6dcd1db7f566a162b2436a5336aaa8081b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:e7:ec:38:cb:7d:4b:81:c7:dc:89:2b:8e:
                    70:87:45:d7:6d:d5:93:c9:51:2e:ae:f2:7a:2f:e8:
                    10:5a:3e:e5:09:41:e2:42:b4:1e:17:78:6b:d4:9a:
                    7a:25:1a:bd:5c:ed:03:69:f5:5b:d2:dc:58:a4:40:
                    b8:c7:4d:77:50:3c:cc:16:a4:29:d3:e5:06:42:bc:
                    e7:74:6a:85:0b:87:75:28:72:d2:f6:77:ac:a6:ae:
                    7a:71:ca:67:74:de:d0:26:5a:96:ac:46:37:30:eb:
                    60:8f:05:01:05:b2:95:4c:1e:ce:01:e9:16:90:ab:
                    29:a7:e8:75:72:09:7f:d0:b3:9a:53:ed:83:7a:d4:
                    3d:b8:fc:39:8b:ff:82:1d:bf:94:ae:3b:5c:68:1f:
                    73:82:f1:9a:7a:9e:50:7a:03:47:7c:4b:5e:8a:8a:
                    60:c1:e6:5d:91:69:7b:11:23:68:99:40:c3:f4:d4:
                    97:67:d2:ea:14:e4:3d:93:c1:95:c8:27:95:80:8c:
                    20:ee:93:83:b1:e3:9f:40:22:7e:10:9c:71:fd:2d:
                    d9:fe:33:60:ef:38:8a:42:32:3f:b2:10:f6:5d:6f:
                    ec:ff:d7:da:85:22:34:d4:c5:45:5e:5f:35:50:b4:
                    8f:99:5f:98:67:17:47:e8:b6:38:16:d1:04:4f:7b:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7A:B6:DC:D1:DB:7F:56:6A:16:2B:24:36:A5:33:6A:AA:80:81:B1
            X509v3 Authority Key Identifier:
                keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:8b:74:8d:bf:65:f4:bb:b3:23:5c:f8:33:f2:3e:0d:99:
         4e:12:d0:0b:22:1b:cc:1b:74:8b:d7:e6:21:bf:97:01:a1:71:
         c9:1c:e0:26:5b:02:08:76:9c:3b:3f:2d:03:02:48:95:b8:5b:
         f9:e4:43:0d:d6:bb:0c:ea:09:3a:45:b3:6b:07:0a:cb:7e:fa:
         63:8d:d6:88:13:19:30:30:c2:db:02:f6:95:3f:9e:9e:3b:bb:
         fa:8e:a4:69:d7:07:51:f7:73:b0:69:70:4c:76:f9:57:af:07:
         60:17:79:e3:4d:98:c3:16:dd:a2:03:8d:a6:63:e8:fb:c4:b9:
         ba:3c:45:eb:a7:6a:68:cb:75:2b:a5:b1:ba:ba:b7:68:24:38:
         ae:29:ee:00:03:09:11:4e:db:05:bf:8a:05:5e:58:28:9d:69:
         24:b0:43:22:2f:9f:5c:15:10:e2:bb:ba:0f:65:ff:30:74:52:
         e8:a1:21:17:4e:48:5e:50:f3:fc:71:8f:d8:97:10:7e:e4:21:
         8a:39:1a:18:7a:e8:7a:38:3a:9e:bf:5a:ff:1e:94:29:54:e8:
         e0:14:16:d8:28:f9:d5:4e:ea:4e:66:71:6b:81:01:e7:f4:24:
         8a:2f:0e:6a:80:1a:66:23:48:06:a0:67:72:cf:35:b9:cc:c2:
         20:41:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:30 2026 by rpki-client