Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          sx7XgMGGwoKTB7H5yTLGOv0bjLNYtfa9QJeLvJ9MAB0=
Subject key identifier:   88:66:22:95:66:6D:62:04:C9:45:B8:B9:1E:1B:1B:07:AF:C4:3F:EA
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019D3909DE23321FD835EE988E854BFE79AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          34
Signing time:             Sun 29 Mar 2026 10:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:41 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: 8znpOxzvAeWVK2rKrJEvTs5AiMeCKf7xwi0HQEbEIbg=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:de:23:32:1f:d8:35:ee:98:8e:85:4b:fe:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: Mar 29 10:00:41 2026 GMT
            Not After : Mar 30 10:00:41 2026 GMT
        Subject: CN=88662295666d6204c945b8b91e1b1b07afc43fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:64:d7:b8:f1:29:65:03:44:7d:20:d5:70:
                    e7:cb:8b:c3:da:49:fe:97:d3:bd:80:fc:e1:e2:bc:
                    17:c4:87:7f:7d:e2:dc:b9:18:b7:6e:4f:3e:1d:e8:
                    82:a9:8c:57:34:4e:ec:88:8e:db:7c:f5:3c:6a:3a:
                    86:ab:71:13:f2:2c:01:07:6d:a4:be:06:a9:ca:ee:
                    b0:8a:f2:29:bf:44:8f:bf:ea:a2:47:4a:4d:90:b9:
                    99:e7:47:93:d8:5f:fb:f7:ca:74:5f:53:ef:c8:05:
                    3f:6d:77:71:c4:55:7b:b6:7c:d2:94:c3:26:70:97:
                    12:90:5a:97:ba:cf:3e:74:96:93:09:1c:d7:84:92:
                    f5:5d:5d:0c:52:a5:7f:6e:ac:f4:9e:e4:0e:f0:ae:
                    b4:d7:5c:ee:2b:ce:1e:28:fc:6b:87:e2:b4:bf:48:
                    b2:3a:f4:44:26:50:0d:72:2e:88:02:f4:d7:bf:76:
                    33:0d:eb:8a:b9:72:57:37:26:82:ae:95:1a:bf:c5:
                    f4:61:d4:16:df:64:0c:49:3a:a9:97:3c:76:b8:1b:
                    22:3b:45:58:37:41:36:a4:a6:7c:ed:ff:7f:4d:0e:
                    32:63:64:30:da:ba:53:b7:97:27:ba:6b:75:c8:e0:
                    b4:19:5d:fb:ec:11:6d:16:a3:f5:e3:a5:cf:09:45:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:66:22:95:66:6D:62:04:C9:45:B8:B9:1E:1B:1B:07:AF:C4:3F:EA
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:48:2f:42:3b:bd:84:9e:7f:22:7f:ef:9a:5b:fb:2d:a3:a5:
         e2:85:ab:ca:b0:9f:ec:35:66:80:29:53:d0:1a:bf:79:79:60:
         78:1d:05:ed:ed:c7:b6:07:75:20:fa:21:93:2d:40:60:e5:81:
         01:9e:c6:7b:e3:04:85:c5:b7:e9:11:17:3b:4e:af:01:2b:5e:
         95:43:88:bf:d0:2f:75:79:b9:97:3c:27:d7:14:d6:85:61:f8:
         6e:b8:db:e6:11:50:cc:b7:29:7d:8c:d2:c4:a8:98:67:73:f1:
         2f:ad:f8:e2:57:9e:92:23:19:8c:7d:e3:a6:8c:f9:cd:a7:a2:
         01:36:37:53:3f:2f:16:df:79:01:d2:87:cd:be:82:99:83:ef:
         6f:0f:91:b6:4e:6f:d4:4d:4b:09:d2:ad:b1:1c:4e:f3:e4:06:
         cb:93:57:58:7d:20:d5:27:01:9a:4a:da:8a:f6:3a:d4:97:45:
         a7:40:1b:05:1c:d7:c3:57:8c:00:73:21:0b:9d:f8:08:5d:d1:
         68:82:27:aa:65:31:ce:43:da:b2:ff:89:62:00:d2:74:c8:94:
         2a:24:35:0b:a5:81:28:45:ca:44:38:19:62:4c:44:a6:d4:3e:
         40:4f:20:43:e6:f5:eb:47:59:e7:8d:38:9e:b5:f7:4f:62:7f:
         18:39:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:54:14 2026 by rpki-client