Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File:                     danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier:          cSCGMf9fONAfY3or7mMKLhbEkY1gOzA1Hs9qIgATMfA=
Subject key identifier:   E2:F7:F5:BA:E5:21:5E:98:F3:CF:27:D6:87:17:82:F7:E1:72:01:4F
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer:       /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial:       019D386608928361EBD66624DD16344C6BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number:          0560
Signing time:             Sun 29 Mar 2026 07:01:44 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:44 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:44 +0000
Files and hashes:         1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: zFE+GNVuRAhPVcPlA1tSjY/NFJSyj+lF8QIPCyDx+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:08:92:83:61:eb:d6:66:24:dd:16:34:4c:6b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
        Validity
            Not Before: Mar 29 07:01:44 2026 GMT
            Not After : Mar 30 07:01:44 2026 GMT
        Subject: CN=e2f7f5bae5215e98f3cf27d6871782f7e172014f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:fb:79:3d:c2:43:db:cc:71:61:df:d5:b3:
                    21:0d:51:71:8d:45:6f:23:01:92:c6:f8:c8:8b:44:
                    ab:d5:1f:f3:bd:da:57:5f:a8:4f:95:8b:e7:e4:91:
                    96:b3:f5:ab:16:c3:e5:db:55:4d:dd:c7:e1:aa:db:
                    78:90:3c:0a:11:59:3d:44:59:3c:00:b3:1e:46:47:
                    5a:fc:7b:32:55:d5:b5:a4:d4:81:67:f2:61:70:5b:
                    b3:d3:52:64:ba:7a:31:ef:a7:78:9c:85:e9:3b:ef:
                    27:2f:98:b9:fa:ff:34:10:ca:5e:65:d3:e0:95:d3:
                    e3:dc:6d:00:ea:f7:2b:27:8d:8a:d1:0f:3e:65:d0:
                    9b:dc:93:9c:e2:5b:41:d0:69:c7:98:21:57:a7:8f:
                    eb:b3:5b:9e:5f:fc:d5:9c:7e:9d:b1:4f:61:fb:3f:
                    4d:ba:9a:f4:af:9d:11:f6:85:d4:71:00:fa:8f:ef:
                    2f:97:dc:4e:af:b3:88:45:f1:ff:34:ad:97:61:98:
                    90:b1:07:26:77:1d:1a:6c:09:57:c1:53:35:fd:d3:
                    a6:72:78:a9:c0:c2:f7:d0:3a:f2:c3:73:22:98:08:
                    59:f6:35:51:fe:e9:d3:61:ce:48:2b:74:da:0a:25:
                    51:f9:88:70:bb:40:da:28:a4:65:0e:20:fd:07:2d:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:F5:BA:E5:21:5E:98:F3:CF:27:D6:87:17:82:F7:E1:72:01:4F
            X509v3 Authority Key Identifier:
                keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:5b:49:34:37:ae:ab:5c:ba:f9:06:7d:d9:bc:59:24:eb:
         0b:2c:dd:81:4b:e8:fe:71:79:5b:cd:7a:0a:a5:c6:95:84:75:
         f9:7d:e7:43:70:8d:0b:4f:a9:a0:24:b4:83:40:1f:1c:3a:ff:
         1c:84:8d:97:e5:a5:01:50:30:41:6e:e5:eb:14:7e:ac:0d:75:
         ca:d6:6c:cb:c5:b2:f5:4d:ae:28:8f:9c:f5:e5:e8:db:a0:9d:
         28:d9:08:1f:fd:b4:5e:6e:4e:21:ba:fc:a7:5a:87:73:ae:ee:
         03:5d:5b:ce:5a:c6:b6:d0:da:16:31:e3:9e:fb:8e:57:7d:ff:
         11:d5:12:7d:a5:6a:58:1b:00:45:b7:ec:b4:e6:d1:64:b5:5c:
         61:fc:a9:ed:8a:ce:f3:b1:8a:ad:d2:37:54:f7:9a:20:58:d0:
         73:c1:67:06:89:e5:05:af:39:cc:da:d9:72:cb:95:81:36:e3:
         b7:a2:67:d7:a5:e6:5b:a0:f3:42:cf:91:8c:68:2a:90:a0:99:
         a6:98:8b:fe:84:9d:e6:14:ed:92:24:07:6d:33:c6:e3:30:f6:
         69:90:cd:cf:46:fa:b6:41:e3:74:3f:09:28:14:46:c7:0b:5f:
         e7:69:f3:25:f2:da:17:02:0a:89:59:22:88:57:dd:f6:34:55:
         ba:08:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:12 2026 by rpki-client