Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File:                     04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier:          2u0WQX7j10oHSYMtxLYCvMmOTpg4ERzbruZmXXJaEwE=
Subject key identifier:   E1:2C:58:78:CC:60:FC:81:BE:45:C0:9E:F8:F8:E4:E7:6D:65:C6:DB
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer:       /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial:       019D39E5C899ADF98D42AE4C974A58E83E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number:          0590
Signing time:             Sun 29 Mar 2026 14:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:53 +0000
Files and hashes:         1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: uXUgvQt5OstQOuh068dP725y/RPxFFHXrrLijj1vRmg=)
                          2: WJ8RC-1511gAcgP7V2qvF3pMn2U.roa (hash: dIBhT1tAUbW7t5HBxfGi3Z3u9jhu8zIjbsn+nKs3E9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:c8:99:ad:f9:8d:42:ae:4c:97:4a:58:e8:3e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
        Validity
            Not Before: Mar 29 14:00:53 2026 GMT
            Not After : Mar 30 14:00:53 2026 GMT
        Subject: CN=e12c5878cc60fc81be45c09ef8f8e4e76d65c6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:24:ac:b1:19:64:84:1e:a6:a2:6d:e3:6d:
                    3f:77:ee:03:20:7d:b0:d0:85:9c:db:ac:b2:82:dd:
                    07:9a:78:32:15:dc:fc:b6:7c:94:72:84:2b:31:2d:
                    0a:00:84:e4:d1:62:ea:cc:11:8e:5c:f7:2f:7f:69:
                    15:87:c4:f0:af:37:d2:9e:5a:a8:ed:f7:4e:0a:cf:
                    97:2c:5d:d3:1f:1d:82:d2:a1:8c:f3:6d:cc:07:79:
                    5f:63:0e:dc:d0:17:54:6a:cf:1b:36:c4:38:11:1f:
                    34:f6:8a:ca:fd:e8:35:c3:2d:4d:74:ed:7a:59:02:
                    5d:df:48:9d:ac:24:10:20:45:bc:16:83:a8:ea:b5:
                    c0:05:63:06:29:53:24:bd:5d:98:13:98:eb:91:74:
                    a7:25:04:29:34:99:d6:1d:60:c6:fe:f6:8b:97:97:
                    27:11:c3:c9:4f:e0:dc:88:7d:30:10:a0:34:20:19:
                    c3:c8:b2:ce:4e:c8:b6:c0:d9:b0:89:c4:3e:16:80:
                    9e:03:88:bc:3f:57:db:b5:13:d7:61:7b:d6:72:07:
                    e9:d4:ca:84:6f:73:c7:9c:81:0b:7d:48:2f:cd:51:
                    e9:aa:38:70:14:4a:7a:ac:dc:62:dc:94:72:99:88:
                    02:a6:3c:c5:ee:4d:eb:22:4b:c7:5d:67:89:a5:2b:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2C:58:78:CC:60:FC:81:BE:45:C0:9E:F8:F8:E4:E7:6D:65:C6:DB
            X509v3 Authority Key Identifier:
                keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:9d:70:ab:41:be:3d:3c:02:43:61:18:e7:92:00:fb:c1:
         6c:7c:ed:22:eb:82:0d:52:ca:04:55:22:39:72:64:72:8d:44:
         6a:14:99:2e:37:d7:33:54:2d:75:6e:a3:a5:8c:91:27:c7:9a:
         a8:4e:f4:99:97:83:36:96:a0:69:94:74:4d:55:81:ff:c8:4b:
         ad:4b:36:62:58:df:3d:c7:58:f7:90:22:50:b1:b1:6e:67:9d:
         e3:e2:82:4a:74:e5:9b:bf:ba:3d:4c:c2:87:0e:67:8e:56:36:
         8d:0d:49:33:53:9a:cd:ad:5f:f9:5d:d1:90:08:00:e8:6e:4c:
         02:d0:38:10:8d:cb:89:98:df:3b:19:b6:00:97:12:af:fd:9d:
         cf:35:ba:fe:e0:6d:33:37:aa:a7:a4:0e:59:2b:db:d0:b0:80:
         00:1c:54:52:0c:16:ee:79:b2:dd:e2:f8:d1:76:d5:3f:3b:ff:
         ae:5b:e7:08:2b:f8:b8:eb:7d:ba:0b:51:6d:75:47:b6:dd:57:
         89:53:2c:cc:e4:bf:26:1c:cd:2c:10:5f:d0:6b:3b:6a:d8:02:
         50:6c:9e:9d:16:89:dd:c4:18:d1:78:22:b2:08:84:18:8d:85:
         6d:ce:8a:d0:d5:05:88:ad:5b:4a:14:8b:28:fa:0a:77:39:bd:
         2d:bb:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:03 2026 by rpki-client