Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File:                     30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier:          kifdzEIABPEwtj0Okzlfin7QJBL/JnWRJBBB9Uvc7YQ=
Subject key identifier:   9F:03:3D:1D:C6:06:5C:22:32:4E:49:F6:7C:2D:17:1F:9D:44:92:C6
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer:       /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial:       019D394088860B0E72C77C675FF4ADF062CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number:          1523
Signing time:             Sun 29 Mar 2026 11:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:23 +0000
Files and hashes:         1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: O2pPM2jLT6JEjYLuEcNtkxUDb5jxvq+BYLcirnsAZrg=)
                          2: 8eV-81_uKeNIQWi-RnISNeIm1sI.roa (hash: bt3ZIycIoVzzyCmbp0HGbKzeee+aV/KSNimrY/6lCo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:88:86:0b:0e:72:c7:7c:67:5f:f4:ad:f0:62:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
        Validity
            Not Before: Mar 29 11:00:23 2026 GMT
            Not After : Mar 30 11:00:23 2026 GMT
        Subject: CN=9f033d1dc6065c22324e49f67c2d171f9d4492c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:65:c5:6e:02:b7:9c:26:c9:4f:86:9f:9f:
                    1b:14:e7:61:64:92:5f:84:b1:5b:d3:7f:27:31:b2:
                    3b:2b:e6:b7:ac:78:f0:45:27:87:d2:d2:a9:df:89:
                    64:52:15:07:57:71:3d:a3:e2:5d:74:53:97:fd:f7:
                    53:31:47:f1:c9:0a:af:08:bd:39:f9:2d:19:5e:c4:
                    05:64:97:65:9b:8b:b8:6b:66:42:66:6e:48:c4:b6:
                    2a:24:44:45:d2:a6:30:7a:f6:0c:28:9b:ba:bf:34:
                    28:33:a7:3f:03:a1:d5:eb:78:fb:7a:41:5d:79:bb:
                    0f:46:3b:8b:8f:73:c8:38:7c:48:2b:8f:f9:ee:f0:
                    28:1d:d2:6e:42:8b:84:04:35:eb:b9:93:8e:23:43:
                    c1:20:02:85:dc:ab:6d:53:44:7a:21:f6:c7:b6:06:
                    f9:e2:08:8b:72:b7:ef:96:8d:23:be:1f:8a:ed:d0:
                    ef:c8:86:d3:67:5f:1e:03:8e:1b:30:6e:9f:ce:a9:
                    85:64:78:a5:60:91:53:0a:dc:7d:da:96:b9:2f:34:
                    be:47:75:0b:25:bb:ba:1f:be:39:05:6a:73:11:68:
                    f9:0b:24:68:4f:23:42:85:f7:f5:75:fb:3a:d4:54:
                    fb:ce:4c:14:3f:62:43:f0:24:3b:56:f3:d6:36:58:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:3D:1D:C6:06:5C:22:32:4E:49:F6:7C:2D:17:1F:9D:44:92:C6
            X509v3 Authority Key Identifier:
                keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:cf:2c:3f:31:f7:4c:21:8a:52:96:7e:d9:3f:09:a2:30:
         be:a2:97:fc:25:09:f9:5c:3b:02:60:ff:2a:b2:f1:81:8c:40:
         84:17:d4:d9:8c:86:c4:21:d7:4c:e3:ae:a8:71:55:76:4f:97:
         93:34:65:e2:54:dd:e9:88:ae:39:33:b1:81:e7:0e:e3:18:26:
         94:76:e7:c4:c5:e0:45:e6:d4:c8:52:45:5a:8b:9f:f4:d6:66:
         13:37:93:73:c6:9d:f2:a6:98:e6:66:37:e0:f7:92:e9:65:9c:
         35:23:71:de:f4:76:f0:4b:55:b4:91:fa:c0:7c:11:fd:f7:3b:
         ca:83:24:47:ef:af:62:bd:55:dc:d8:26:ba:ed:b1:6f:96:6e:
         60:dc:62:1e:df:7e:53:aa:11:52:75:f8:74:5c:0e:0c:43:15:
         2d:44:3a:47:e1:56:8e:60:db:21:ab:03:1e:80:20:9e:0e:44:
         6e:40:2b:a6:47:a5:5b:8e:76:84:ae:59:eb:19:fe:d1:a9:f4:
         7d:5b:32:dd:63:63:24:a8:00:52:b5:85:ab:d2:83:ce:ab:57:
         09:f5:e9:20:5c:73:29:34:f6:10:1b:6d:c9:7c:aa:37:79:b1:
         c2:6b:19:82:bd:45:ae:78:2b:ba:8e:67:05:a3:49:9a:49:b1:
         ad:8a:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:15 2026 by rpki-client