Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          YjFgCNAHstycYIe2bcZtUatm/EgCQDl8XsApfFydJSw=
Subject key identifier:   3C:05:C0:4D:9E:CD:DC:68:F5:5E:EB:36:2D:CB:67:21:52:51:87:24
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       019D38D2E1EE3F799FAF946C99579472A6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          1094
Signing time:             Sun 29 Mar 2026 09:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:37 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: qht3dB/whXR45XuRbomVe8u9U5QuIAsRHGH9cIyTgZM=)
                          2: i76W5DkDxFqXL1U4LEioLLQPWHE.roa (hash: wjKq780qwNn7oCMWX/g2VF2AWfHDNkvvk88MaGruKxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:e1:ee:3f:79:9f:af:94:6c:99:57:94:72:a6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: Mar 29 09:00:37 2026 GMT
            Not After : Mar 30 09:00:37 2026 GMT
        Subject: CN=3c05c04d9ecddc68f55eeb362dcb672152518724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:59:86:ee:5f:90:4f:d1:00:44:44:0c:6e:
                    96:17:4a:f7:10:41:91:8f:ad:b9:2a:eb:c7:c7:ea:
                    0d:79:4c:91:05:8f:18:47:db:a6:c8:ca:e5:99:e8:
                    46:80:f8:96:44:e7:3f:45:fe:44:e1:90:5f:56:84:
                    2b:e5:2a:b4:a2:c5:48:2f:11:98:1d:8f:e7:e5:4e:
                    ac:ac:d6:08:9e:60:a2:e6:7f:8c:00:c2:c6:03:6a:
                    6b:e0:82:f2:77:68:aa:ca:c5:7d:fb:e8:64:2e:4d:
                    35:40:34:32:db:a6:6c:aa:15:6b:cf:aa:3c:85:d6:
                    79:a5:a0:9d:47:a2:0e:12:a8:9d:ea:b9:7e:04:77:
                    dc:d5:76:71:a2:0d:3f:d9:0a:ff:9f:8f:6c:09:8f:
                    39:2c:1c:00:27:b5:d6:0b:b1:a9:98:14:fa:b3:cf:
                    dd:9d:07:ad:d8:ee:11:e2:af:d8:39:eb:f5:4a:85:
                    9c:c2:2f:e8:20:78:37:2a:7b:96:16:64:42:7d:1d:
                    1a:89:82:51:e8:e6:60:ad:26:c8:f2:c3:cc:77:00:
                    aa:1e:5b:35:80:98:d7:cc:06:bd:ad:3e:8e:40:17:
                    fd:36:fb:b1:72:1b:b0:aa:f0:2b:a0:3c:ba:c1:34:
                    34:7a:a1:5b:49:e5:0e:c3:81:16:aa:8e:66:c3:0a:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:05:C0:4D:9E:CD:DC:68:F5:5E:EB:36:2D:CB:67:21:52:51:87:24
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:33:d6:fa:9b:b2:aa:99:20:6c:4e:e1:90:ad:ad:93:4b:
         66:b3:05:53:31:48:02:c5:d1:ef:6f:2b:39:bc:d2:f5:dc:ef:
         28:13:9c:10:56:5b:80:bb:91:5b:b4:74:3f:df:ac:9f:c1:69:
         64:e1:e2:a8:c1:78:e0:b8:fd:ce:65:87:f7:84:3b:cb:9a:b8:
         16:ae:82:fa:0c:00:3f:04:ab:00:23:dc:11:a0:ab:90:34:f0:
         ac:b7:45:e0:0e:fb:3c:f7:b5:0c:8e:c8:e5:fe:b7:0c:7b:de:
         06:4a:fb:3b:42:40:b2:35:c2:1d:d6:55:5c:fc:84:56:46:0f:
         16:95:02:06:1b:ac:48:bf:a6:14:2f:b4:11:58:45:61:2f:eb:
         bc:1e:3e:84:18:ef:6f:42:80:a5:61:04:07:3b:4d:8d:bb:17:
         29:68:47:5b:29:2d:c6:57:10:84:c1:96:5b:68:56:e2:5c:b5:
         2d:55:1f:e3:40:cb:a7:c6:95:d5:e3:f0:71:5d:b8:b4:b8:de:
         43:79:e2:2e:e3:ef:36:63:06:71:91:5f:5f:0b:c8:70:5c:92:
         a5:15:7f:82:bf:83:f7:89:05:84:5e:16:54:7c:9d:10:9c:e1:
         4c:ee:bf:cb:15:88:27:ca:c0:d8:dc:14:b4:65:71:ee:b5:88:
         8d:f2:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:35 2026 by rpki-client