Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File:                     dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier:          3D+4M7DKGqmsMuAy9uz4s3IfHl9c6iXm8/tdDWGH9h4=
Subject key identifier:   A2:7D:00:B9:D5:70:8F:39:7F:1E:61:23:CF:95:A5:31:3F:65:ED:57
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       019DFB72BC1115360E23D67E9274720F09A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number:          171C
Signing time:             Wed 06 May 2026 04:01:33 +0000
Manifest this update:     Wed 06 May 2026 04:01:33 +0000
Manifest next update:     Thu 07 May 2026 04:01:33 +0000
Files and hashes:         1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: gSR8FV/0M93ArSO6b2Lxn70y7cUdIg0sAACdmQqTl64=)
                          2: r51G36-SetuHZD_3jiNwB4dx7Wo.roa (hash: V4MD7ZgRQakaXzVvC+xHIbnQN7EcZaGY5X7pj9GMtGk=)
                          3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
                          4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fb:72:bc:11:15:36:0e:23:d6:7e:92:74:72:0f:09:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: May  6 04:01:33 2026 GMT
            Not After : May  7 04:01:33 2026 GMT
        Subject: CN=a27d00b9d5708f397f1e6123cf95a5313f65ed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:fb:8f:e9:87:1b:bf:28:28:3f:94:60:53:
                    5e:b7:6f:12:e3:e9:db:62:ee:57:85:f1:cc:c3:c0:
                    b9:69:77:95:ab:84:6e:bf:71:49:8a:e3:5f:46:7c:
                    bc:20:e4:12:f8:90:b5:f6:21:c6:36:00:84:30:4c:
                    5a:3e:2a:45:dd:dc:b9:5a:82:30:37:04:e8:09:a7:
                    bb:c0:f9:df:7d:d8:c2:03:38:90:87:65:8e:b6:91:
                    c3:df:94:86:c3:4a:22:6f:ba:bb:53:ee:fb:04:ed:
                    6b:c6:ca:e6:f4:5e:84:99:99:93:12:6c:f0:52:63:
                    ff:67:0b:a0:26:e2:36:3a:d7:95:c3:83:83:5e:18:
                    10:cb:35:de:7e:44:ff:79:91:74:6f:90:81:75:05:
                    66:a4:00:6a:44:ba:77:2d:87:cf:07:ee:38:16:b6:
                    6f:48:2f:fc:1b:1f:3d:fe:d5:9e:d9:e6:4d:71:20:
                    25:71:2e:ad:c7:cc:c5:66:a9:f2:62:24:ab:3f:a9:
                    56:cc:b1:18:ee:19:c7:24:bd:63:66:00:54:37:6e:
                    08:5c:84:46:b4:1a:dc:06:d0:23:1a:f4:49:fd:27:
                    a5:ff:0f:d4:9d:8f:29:96:17:f3:95:68:13:35:23:
                    a0:05:f4:0e:8c:6d:09:55:a4:d7:41:ae:16:18:93:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7D:00:B9:D5:70:8F:39:7F:1E:61:23:CF:95:A5:31:3F:65:ED:57
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:30:95:d7:4b:e3:ef:db:6c:a0:c6:2e:7d:de:0a:37:3b:4b:
         e8:05:c9:d2:ee:89:69:d4:09:78:f0:1e:50:64:00:31:19:dd:
         1b:5f:b8:2b:74:8a:22:1f:3a:30:7b:c6:50:d7:c8:b4:92:97:
         dd:3f:82:4e:52:04:f8:c6:ed:04:0b:31:bf:9d:91:1c:de:e9:
         24:33:a5:61:96:2f:6d:34:4e:59:1b:23:dc:b5:01:58:34:cd:
         f8:b3:04:85:bd:e2:e5:03:35:f0:7b:f5:57:0a:38:5e:22:dc:
         7b:ab:be:90:ce:5b:fe:55:b8:d7:39:e1:36:00:df:7a:7d:d5:
         ab:de:c6:96:68:57:b0:25:be:8f:e7:7f:ad:6d:ef:cb:3e:e3:
         9f:90:03:17:f1:36:39:84:87:ab:73:13:02:cc:dd:95:4d:7b:
         ec:89:cb:85:79:cd:7e:a1:ad:11:94:b6:64:e8:66:27:0c:09:
         82:b3:35:c4:fd:0c:33:68:7c:66:97:af:c2:11:da:63:f9:2a:
         1d:3a:46:aa:99:6f:89:ad:bc:4e:ff:2b:9b:c0:af:04:b7:f2:
         82:79:a5:0f:49:ec:a5:ab:a6:36:4a:d0:a8:3b:0b:f1:18:e2:
         72:3a:31:87:35:e8:a4:60:c3:0d:3e:da:d8:30:8f:8d:3f:a3:
         81:1f:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:26:07 2026 by rpki-client