Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          7kGe3Qwse95JY8TDvfz93LIhLim0CnvFaFCqI57S7OQ=
Subject key identifier:   60:E7:7D:CF:B3:55:AD:41:A1:34:8D:30:F6:69:88:99:76:55:B0:B0
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       019D397818BBC0C066B872B9031D43CAE522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          082A
Signing time:             Sun 29 Mar 2026 12:01:05 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:05 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:05 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: mw1pjVKnvpo5GfS+pZveW44uYGP1v9lIY7FHULZDrvc=)
                          2: n44f7QSdRCQiunlcmqHdl3w15uE.roa (hash: AjuubWqF9PqvZ/rZA7q3KWYt0VtrOQcS6lypZ6/PGG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:18:bb:c0:c0:66:b8:72:b9:03:1d:43:ca:e5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Mar 29 12:01:05 2026 GMT
            Not After : Mar 30 12:01:05 2026 GMT
        Subject: CN=60e77dcfb355ad41a1348d30f66988997655b0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:1b:bf:68:05:f5:c5:9f:aa:38:29:8d:42:
                    b2:9c:57:bf:73:ee:48:ac:bf:0a:a7:34:7c:bb:35:
                    3e:43:3c:d8:7e:45:2d:c4:f3:f9:18:2f:a2:04:c8:
                    a0:f7:d5:e8:0a:1b:9e:e5:26:86:c6:bd:e3:e9:28:
                    c4:71:c5:3a:83:5d:85:0a:cd:4b:74:a1:1a:72:13:
                    ee:d9:8e:b5:e7:da:ff:05:56:05:9d:73:60:22:1e:
                    81:69:d9:9e:54:ee:01:b0:98:4f:93:9c:88:c6:55:
                    c5:70:32:cc:2c:68:1a:97:78:2a:bf:0a:07:5c:27:
                    ef:48:e0:96:fb:2b:f9:8a:5e:01:3f:0f:5c:78:e4:
                    1d:1a:aa:39:ff:7c:a5:fd:e2:c1:5f:3f:e4:f9:dd:
                    1a:14:2b:15:ce:30:64:1b:75:fa:2f:c5:a0:16:e6:
                    15:a6:9c:3d:0b:29:ba:d0:e4:54:fd:86:c2:e9:3b:
                    7c:13:04:43:0f:cf:2e:de:f2:b7:e4:1e:94:e7:26:
                    c2:e3:16:4a:fe:98:c5:f1:33:62:ab:09:fb:36:ad:
                    1f:07:f5:da:80:b9:5b:1f:21:9e:74:c9:70:96:fc:
                    af:d3:24:a3:f5:9a:ae:91:1c:18:dd:86:64:4d:e1:
                    8b:71:31:9c:99:d0:75:af:d6:3f:7b:40:e7:e6:22:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E7:7D:CF:B3:55:AD:41:A1:34:8D:30:F6:69:88:99:76:55:B0:B0
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0d:bf:6b:4c:c8:61:b6:95:80:7b:74:f2:33:66:7a:8d:78:
         aa:f3:12:23:df:67:bd:64:e2:94:b4:6a:a8:50:54:e9:cf:6a:
         06:c1:65:bf:6e:df:a8:01:e4:f8:12:e3:42:1f:c6:cb:aa:c0:
         4a:df:15:31:c1:78:38:7d:de:28:5e:4b:56:bb:89:95:18:c7:
         af:d2:24:d3:ff:4c:ec:6d:b9:ae:0f:b3:02:3f:1d:ce:13:80:
         61:96:3b:61:e5:82:8d:84:30:5a:64:42:fd:5e:e4:67:e0:de:
         43:52:67:05:90:51:b6:24:60:10:88:76:88:0f:b7:df:93:46:
         73:41:ad:aa:cb:6d:d2:09:03:d0:33:16:43:c4:e9:76:91:01:
         fe:f1:15:b3:c3:fe:58:2a:0b:e6:5d:6d:34:f6:b7:0b:d7:a0:
         23:ec:ef:35:cf:9d:55:66:5b:fe:d2:92:31:ca:61:f1:41:50:
         aa:2d:3a:97:ef:85:68:9d:46:d0:a0:c2:37:00:b3:26:0e:c0:
         84:60:10:5e:df:40:b4:74:da:b0:ad:f1:c5:31:21:1b:98:60:
         d8:52:a2:8d:65:ab:f2:eb:1e:eb:ea:2d:4c:3c:19:ae:87:a5:
         be:e2:20:1a:97:ff:41:3c:e4:f9:f1:fb:6d:39:50:a2:2a:86:
         1b:fe:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:13 2026 by rpki-client