Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
File:                     80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json)
Hash identifier:          7Px6WcOYefMlDVdq804tcsWZUkESiT2GoFkNs4qjiDI=
Subject key identifier:   A6:A2:C6:D9:03:CB:BD:B2:C4:48:EE:D8:E9:DC:03:9F:C5:E6:14:0B
Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
Certificate issuer:       /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Certificate serial:       019D37F71EF83B9A1D69E31ABED825B9326C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
Manifest number:          0C78
Signing time:             Sun 29 Mar 2026 05:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:35 +0000
Files and hashes:         1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: a+JDWPyvVwJH9Z606HtdXuG9mo9cE8PR8sCXDBGHh1A=)
                          2: nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa (hash: V73akF511kFqlwWUk+buaBhxPXu4PPDC0iD4dONZGKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:1e:f8:3b:9a:1d:69:e3:1a:be:d8:25:b9:32:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
        Validity
            Not Before: Mar 29 05:00:35 2026 GMT
            Not After : Mar 30 05:00:35 2026 GMT
        Subject: CN=a6a2c6d903cbbdb2c448eed8e9dc039fc5e6140b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:b5:3d:fa:a1:bd:15:2c:3a:80:a4:22:61:
                    75:61:f1:85:1e:c8:79:eb:e9:a8:ef:29:45:55:39:
                    45:63:41:24:71:ab:07:56:a1:6b:be:fc:42:40:e3:
                    d3:86:34:39:7c:bd:89:48:dc:e0:3d:94:9a:b6:96:
                    4b:ec:d1:08:7d:2d:f3:bf:b8:61:f1:45:48:7b:ef:
                    f4:6e:76:b7:d0:31:bb:89:e7:6d:a5:21:87:34:18:
                    76:d0:a1:05:1c:23:83:97:32:4e:6f:f6:33:96:ea:
                    e5:fb:fc:de:44:6e:b8:26:4a:a1:c0:14:24:ed:2c:
                    e1:89:86:44:bd:68:39:90:be:fc:44:22:ba:a1:b6:
                    84:15:26:fa:40:69:de:a7:ac:14:99:83:35:d5:86:
                    82:5b:21:61:14:1c:46:43:ae:84:cf:39:b0:c0:f7:
                    ad:82:80:b2:2b:c1:f2:09:a3:ce:d9:aa:4f:77:8c:
                    d2:48:a0:a2:a2:96:ac:24:c1:8d:28:86:b3:09:98:
                    61:76:49:fd:76:79:a8:78:fe:ce:45:5a:24:33:c6:
                    7c:ae:6d:46:a5:43:a4:91:55:7d:fe:7f:9c:c4:56:
                    28:4c:4e:64:30:02:a1:c4:72:d3:4f:e6:4e:1c:cf:
                    2b:ae:28:88:dc:79:ae:7a:76:c6:21:04:8c:ad:38:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:C6:D9:03:CB:BD:B2:C4:48:EE:D8:E9:DC:03:9F:C5:E6:14:0B
            X509v3 Authority Key Identifier:
                keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3f:72:a9:b5:06:3d:66:6c:67:77:9d:05:51:6a:b1:f5:c8:
         8c:fa:01:f3:a3:dc:3d:dd:27:a9:f2:35:82:63:a0:73:90:73:
         29:48:65:c6:e9:0d:bf:c3:86:2e:3c:99:8f:d1:76:c9:c4:68:
         39:6c:80:3d:4c:d7:39:44:90:0d:1c:7c:66:6f:60:fe:90:90:
         35:05:7f:68:eb:0b:61:a4:a3:20:a4:7c:6e:45:43:66:83:a5:
         92:66:94:dd:40:3d:1c:99:4f:8d:f5:a9:c0:87:78:19:98:19:
         47:1a:16:40:28:94:2a:ad:f0:aa:d4:94:b1:11:2d:87:97:55:
         aa:9d:91:a4:4b:19:f2:ce:4b:37:f6:85:4a:20:cd:62:4c:2c:
         1b:12:37:f2:5d:b9:3f:49:dc:e9:2b:ec:9d:1c:f2:c0:8a:b4:
         b7:8a:d7:74:1e:7a:5b:93:a8:7f:0b:39:28:2d:de:da:08:d0:
         c0:f2:13:1b:41:11:ba:8b:58:69:ca:03:00:16:ea:dd:3f:07:
         03:1a:e1:2e:ec:df:1e:a9:74:5a:ae:01:8b:e9:0f:df:ab:20:
         11:bd:04:49:e8:01:53:d4:fc:a8:12:c4:e7:b0:5d:a1:ca:01:
         11:0b:e6:2a:f0:be:72:c2:0a:9a:3b:e8:58:e5:fa:7b:6b:82:
         6e:54:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client