Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          8yfQakn7SetlHZBO/v7V872euCQ4io38wIcdpCTuCzg=
Subject key identifier:   92:24:5C:F8:3F:93:A7:0A:51:02:37:55:09:42:DE:52:1A:30:83:EE
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       019D38D2A98D5355CF61CEDC134E1935F04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          0995
Signing time:             Sun 29 Mar 2026 09:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:23 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: ylneLF+LdZT2AAXAPY8RdIW0tlchPdxb2K147Zt3g9E=)
                          2: eVj64BxPgdpZYIG5W1ljjTuae3o.roa (hash: zrORB1Deyk73TZ1PJXjaMlmq49Me4EZER6HYarPhgjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:a9:8d:53:55:cf:61:ce:dc:13:4e:19:35:f0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Mar 29 09:00:23 2026 GMT
            Not After : Mar 30 09:00:23 2026 GMT
        Subject: CN=92245cf83f93a70a510237550942de521a3083ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:83:7f:48:e7:f8:da:6d:d0:76:7e:38:eb:
                    1c:c4:74:9f:1d:f9:92:01:fe:f8:df:75:59:81:3e:
                    25:52:3e:f5:81:74:17:be:ee:d6:5a:49:36:b6:1a:
                    ea:93:e2:ea:21:c1:3f:5a:a1:72:16:21:85:ee:90:
                    79:5b:d9:bb:86:41:b0:f0:03:b3:1e:e0:f4:62:d2:
                    1a:1a:1f:15:c9:a3:8b:ea:de:e6:57:f8:d6:3b:5f:
                    fb:d8:1c:41:d2:9c:35:f1:ff:48:2d:1c:ef:9b:6a:
                    84:db:52:16:f4:51:1e:80:ff:6d:72:9a:6f:06:a0:
                    4c:85:53:eb:7f:53:ac:ba:70:23:30:52:ee:ac:85:
                    e6:f2:41:2e:70:df:94:c3:3a:53:31:23:6b:d7:2e:
                    cc:a3:34:e8:dc:37:79:7b:70:1d:15:c5:6f:92:8c:
                    16:a0:3b:6a:33:fe:73:40:b4:ce:1b:9f:93:ad:0e:
                    56:26:f8:07:93:89:4c:71:41:3e:2a:f9:a4:73:0d:
                    ab:11:1a:78:96:b2:5b:ba:74:5e:ab:cc:7d:a7:35:
                    b6:85:88:fb:88:cd:34:ce:9e:d6:19:7c:a2:7a:8b:
                    5d:19:67:53:3b:30:aa:e9:1b:d4:63:29:6f:a6:5f:
                    09:ae:94:f7:d2:2f:87:20:30:a2:b4:0e:c3:3e:6f:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:24:5C:F8:3F:93:A7:0A:51:02:37:55:09:42:DE:52:1A:30:83:EE
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:3c:44:6b:04:85:d9:1c:1f:02:6e:3e:8a:88:89:89:b4:
         28:92:ac:b2:97:f1:8c:9f:dc:51:b1:20:25:65:ed:be:de:b1:
         87:86:a8:bd:9b:eb:03:b3:e0:af:84:72:d0:7d:0a:5b:c6:82:
         1e:b1:3d:73:92:35:cc:a7:fa:5a:74:b3:32:06:9c:1f:27:d5:
         5b:e1:ac:46:bc:65:51:37:62:f8:a8:78:f2:f8:cb:84:32:0c:
         e4:f6:d3:0f:bf:17:6c:42:35:45:35:fb:9e:55:ce:cd:75:c3:
         da:af:10:ac:32:5a:cc:ab:0d:bb:6b:11:48:8f:00:da:83:39:
         f2:22:1a:c1:0b:b8:81:bc:1a:b6:bd:f4:74:eb:e7:9f:d5:d4:
         49:62:08:ee:ab:cc:2c:dc:08:ba:c4:8a:fd:a2:9f:fb:16:b9:
         0c:d6:00:16:cd:fe:63:88:9b:f1:af:d7:01:30:51:7c:3c:e9:
         e1:2a:e9:61:d3:90:75:2b:97:ee:0d:ce:35:f1:f5:16:cf:22:
         6d:03:39:85:00:c4:a1:66:96:99:d9:5f:69:5f:cf:b3:eb:d1:
         2f:c6:28:83:29:f0:62:0c:35:98:84:17:48:6d:de:07:3f:1d:
         b5:55:a2:7a:4c:20:47:fe:77:7b:ec:fb:0c:82:26:2b:94:eb:
         7f:d0:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:11 2026 by rpki-client