Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          XvOwa+V21/ueuKV3Zdktu9ljMkh/T8qaaavM2FCuX8A=
Subject key identifier:   41:6C:B7:E1:E7:6C:6F:61:16:17:B0:4B:25:A8:1D:47:A1:97:8C:3A
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019D2E1890B91E97B1BE6EA3AAABFC07E70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          181D
Signing time:             Fri 27 Mar 2026 07:00:54 +0000
Manifest this update:     Fri 27 Mar 2026 07:00:54 +0000
Manifest next update:     Sat 28 Mar 2026 07:00:54 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: Ql+XptbyZpZMObanVuEjqkK2d6cmmcKPYMCkrwhSPwc=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:18:90:b9:1e:97:b1:be:6e:a3:aa:ab:fc:07:e7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Mar 27 07:00:54 2026 GMT
            Not After : Mar 28 07:00:54 2026 GMT
        Subject: CN=416cb7e1e76c6f611617b04b25a81d47a1978c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:7b:dc:c6:57:ac:ee:15:48:24:ad:e1:e5:
                    a7:1a:eb:e1:81:13:b5:56:78:61:7f:2f:f1:3b:54:
                    7b:b9:35:d5:86:78:3b:3b:f1:9a:06:fa:dd:2c:e0:
                    fa:a8:3e:e8:d7:61:78:c6:03:5c:1b:1e:57:ec:44:
                    e9:6e:8c:69:cc:e6:0c:eb:9b:19:87:85:04:4a:f0:
                    26:22:20:0f:f3:79:a3:6a:82:8b:c4:c3:cb:8b:d8:
                    a9:e5:7f:9b:6d:52:c1:d2:3c:79:ec:bb:a8:b7:6b:
                    e0:72:38:f9:61:9a:61:95:d7:69:26:5a:80:26:4e:
                    57:95:d6:97:0b:59:40:3e:3d:e8:28:ec:c5:5a:01:
                    75:be:07:85:a3:81:e2:9f:d9:87:68:a3:78:0b:a1:
                    60:74:dd:97:e2:0c:37:32:ff:ef:07:e8:ba:d8:be:
                    66:e8:34:89:a2:4d:da:d3:df:f2:52:c0:80:a5:d1:
                    4b:34:47:14:28:bd:c8:48:a7:84:27:2c:09:2a:15:
                    17:dc:49:c1:03:a4:fa:cc:ca:06:53:07:2b:8d:e2:
                    ab:8a:30:bd:58:65:02:34:89:9d:2e:a0:dd:36:49:
                    84:cd:28:b5:ea:ab:99:b9:00:e2:08:7b:9d:cb:f8:
                    ee:5c:34:d7:24:66:01:ce:90:66:26:8f:4a:0d:80:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:B7:E1:E7:6C:6F:61:16:17:B0:4B:25:A8:1D:47:A1:97:8C:3A
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:a7:c0:c9:ab:75:d2:a2:7a:e9:97:c3:82:f6:16:10:eb:
         ce:04:71:c9:41:f7:59:09:f9:fe:cf:20:1b:e3:b3:9a:42:a3:
         73:ca:28:92:19:b7:97:be:ed:1b:3d:49:2d:96:90:ae:dd:0b:
         67:b7:0c:2e:b4:e1:eb:d0:69:be:9d:48:2e:1c:8c:3b:bd:f9:
         cd:fd:3a:2a:fe:ba:98:79:e5:8e:83:18:89:fa:9a:31:b8:d5:
         1e:45:1f:1e:8c:c1:53:57:ff:df:8e:ea:f4:09:81:17:d5:d9:
         b1:b8:e9:ab:06:3d:38:d9:8d:48:99:34:8d:a9:b2:c4:8b:47:
         cd:bb:89:f3:ee:61:fa:72:a3:15:14:59:e9:5c:d9:5b:dc:8e:
         6d:1a:f0:dc:85:03:70:f4:d5:49:bc:98:35:0c:55:d3:ae:eb:
         f3:e0:ee:ce:c1:a6:97:9e:2f:d7:74:4e:f3:07:ff:d4:11:41:
         5e:37:6e:f6:b2:cf:b9:97:7c:0f:20:c3:18:d2:a3:41:88:a1:
         54:09:ba:3d:21:cf:33:6b:6c:5c:4a:eb:55:22:22:29:46:8d:
         c8:c6:ea:74:94:9c:75:00:01:6e:e7:b9:1d:82:d2:68:08:64:
         8f:df:3f:5d:72:0d:d2:b5:5c:30:e5:07:6d:f4:58:24:b4:5f:
         c0:71:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 14:00:40 2026 by rpki-client