Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          ItV5fw/vgN2fkE8Wz/EqHp8cQhfx/Zkbl9yDLO/5PFc=
Subject key identifier:   48:FD:4F:93:DF:DF:09:05:B3:E4:36:FA:5F:32:91:08:D0:62:25:46
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       019D37F76055C26828994FB44850E9B846BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 05:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:52 +0000
Files and hashes:         1: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: K73qFHnvB3jkTJphw0yIRioe3Uyh/XpW5UiusWMJxWQ=)
                          2: vHNaMxjl_jxvOB7TUQY7frZB4BA.roa (hash: tPeRf17Q/t/ooDmwNWzZrhi14ldaBDrCWvBhdfbsIYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:60:55:c2:68:28:99:4f:b4:48:50:e9:b8:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Mar 29 05:00:52 2026 GMT
            Not After : Mar 30 05:00:52 2026 GMT
        Subject: CN=48fd4f93dfdf0905b3e436fa5f329108d0622546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:6d:1e:37:b4:ee:98:5c:47:60:e3:5c:6f:
                    cd:6e:10:a6:91:1b:d6:cf:97:fc:79:92:a2:b1:0f:
                    c7:9f:e3:c0:97:f3:00:48:0f:7e:d0:37:e7:37:93:
                    30:0a:1f:d2:87:cb:f9:98:a5:6d:6f:a4:f4:d1:9f:
                    99:f2:5f:3d:da:52:a2:5f:b1:20:6b:b5:81:ab:51:
                    76:af:85:d0:04:de:1e:29:bf:92:9c:6a:07:5e:8e:
                    c7:c1:c1:67:c7:38:40:c7:95:87:52:bf:87:dd:d1:
                    90:11:96:7a:ed:38:c3:36:a9:41:53:da:b1:0e:66:
                    0b:7b:c8:93:4b:47:17:3b:99:f9:52:55:4b:9a:46:
                    8a:00:31:87:ae:85:26:e6:d3:57:5c:c7:7c:d2:d5:
                    a7:75:55:a9:d2:70:8a:79:06:57:e1:fa:90:cd:4a:
                    b5:be:b9:51:b1:7c:b3:50:70:7f:9e:8e:1f:fd:bb:
                    32:fa:45:4f:45:12:9f:4c:b0:9e:e0:a7:88:28:9b:
                    35:25:26:89:55:c8:a9:f3:93:cd:1c:7b:f1:90:bb:
                    bd:c4:90:8c:44:26:a9:bf:89:d8:55:1f:04:1e:45:
                    c3:b0:8b:74:93:7a:02:68:63:61:fc:c5:9d:4b:51:
                    01:31:ad:61:dc:e1:ab:73:fe:d3:d6:c8:fc:44:10:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:4F:93:DF:DF:09:05:B3:E4:36:FA:5F:32:91:08:D0:62:25:46
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:04:43:9c:b6:cd:e4:c2:4a:ef:c0:82:26:63:5d:e9:47:8f:
         e4:bd:28:b9:63:49:6f:62:41:c8:7c:21:55:eb:7f:9a:8e:85:
         bc:ac:9f:47:79:9f:1c:ad:d5:a0:6d:e3:4b:bc:b9:f9:2a:86:
         f2:83:8d:16:c3:32:f3:e8:fc:91:1e:7c:9f:63:a8:6a:45:45:
         04:25:c1:9b:db:f8:ec:07:5f:84:2c:d2:de:cd:9f:23:57:83:
         34:be:ec:1f:77:49:10:10:dc:fa:a4:fa:4f:47:f0:2e:17:85:
         b3:a3:68:6f:c3:f2:1b:cf:68:6b:5c:67:b7:c9:1f:64:9a:00:
         16:80:f9:15:48:8c:95:67:9f:a3:ac:1a:e8:49:45:73:bf:b5:
         83:6b:b0:0e:5f:13:e9:6a:32:d2:33:7d:51:8d:1f:c6:74:66:
         55:ff:c3:30:f5:b3:4e:fd:cf:57:ba:99:fd:bf:68:27:50:6a:
         b7:13:bc:87:99:d9:66:c5:19:87:e5:29:c4:5b:3d:49:7b:b8:
         33:25:17:44:8a:dd:b9:69:bd:90:fc:3d:33:16:5d:d3:b0:2d:
         6f:e9:57:b8:87:5b:95:7b:1a:b0:09:b8:4f:c9:ce:4a:d8:4e:
         0d:93:2c:11:18:37:f5:38:2c:ae:a4:a6:3f:69:80:8e:4a:73:
         c7:ff:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:25 2026 by rpki-client