Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          wjPDZRscuZWcEYxbHBUtCsGi1p8o3fw1N6zL2zWB/js=
Subject key identifier:   F8:D3:F7:1F:AA:E9:38:F5:7E:96:79:EF:DC:12:A8:3F:08:3D:44:F3
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       019D38D2D7A58043840D0DA3AE3D9DA938E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 09:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:34 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: QzwDzPTHJHWE9yvRlAddCPYJImBIbRm9SVDVQ6vtU54=)
                          2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:d7:a5:80:43:84:0d:0d:a3:ae:3d:9d:a9:38:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: Mar 29 09:00:34 2026 GMT
            Not After : Mar 30 09:00:34 2026 GMT
        Subject: CN=f8d3f71faae938f57e9679efdc12a83f083d44f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:d3:68:5f:ee:74:ac:01:e2:44:c9:15:ba:
                    47:e7:61:4e:39:14:11:ac:bc:f8:31:b9:59:34:b5:
                    69:e4:a7:a3:2b:7c:41:a6:d8:be:9d:7d:4c:60:ac:
                    6f:8a:ac:fe:f7:a1:62:e0:13:27:04:0e:4b:4c:8c:
                    8e:de:d2:5a:3a:df:95:f3:f4:39:c4:93:9a:c0:3f:
                    07:f3:b2:b8:9d:21:80:1e:8a:6d:b7:4a:5a:8d:67:
                    54:bb:25:86:ce:37:db:80:48:e4:ac:f2:0d:ec:a1:
                    f2:70:69:68:e7:54:44:de:24:f2:65:4d:e6:ca:b9:
                    51:70:28:6f:1c:54:98:0c:3e:4b:97:cb:f6:b6:6d:
                    85:44:85:e0:5e:03:c1:5e:69:9d:18:4b:26:31:67:
                    86:10:10:9e:13:e2:7f:f7:1d:13:a6:08:4d:77:dc:
                    2a:08:a1:1e:9b:db:0e:23:fe:c7:fd:5a:cc:2d:50:
                    c3:9f:fe:ab:b3:1f:12:51:7b:60:86:04:1d:cb:4d:
                    bb:32:d5:c6:3b:9c:78:14:7d:b6:af:d9:37:13:90:
                    54:b6:48:76:5e:97:bc:0e:c0:3c:20:0e:74:0e:dc:
                    80:bc:98:76:9f:ff:5f:27:c4:5a:66:f1:dc:6a:42:
                    0d:8e:88:13:f1:2d:38:6f:7a:2a:79:dc:c2:dc:cb:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:F7:1F:AA:E9:38:F5:7E:96:79:EF:DC:12:A8:3F:08:3D:44:F3
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:8d:dc:6a:c4:ad:68:56:11:63:d6:d9:75:ac:86:7e:db:
         f7:fa:10:bf:e6:ed:7f:6e:3b:4a:d4:02:3a:21:e2:09:fb:f3:
         9c:cf:ce:c9:7d:2b:0a:68:7f:ae:92:31:17:b8:05:f2:72:d4:
         8a:5d:66:aa:a2:c0:ab:c0:db:14:e0:b9:69:cb:e4:68:50:8b:
         42:5c:76:df:7a:fd:9a:a4:eb:68:3f:d9:74:86:33:15:bb:cb:
         8e:c2:30:42:fb:63:18:14:dc:9f:b0:8c:98:89:3b:2d:8e:e1:
         55:5d:18:fb:c4:8c:9b:a6:95:7f:54:f5:aa:70:51:dd:e4:3a:
         93:0a:a0:45:1d:4f:f2:1d:90:65:b9:79:6a:94:63:6e:cd:a6:
         26:54:a2:4b:c0:f3:7a:24:db:84:1e:22:cb:30:8b:0b:b4:5e:
         cf:63:75:b6:67:2f:02:e5:3a:13:b4:57:02:16:90:50:88:cf:
         86:3a:03:86:74:3e:42:c2:d6:6c:57:7b:15:86:11:e6:13:82:
         a7:13:bc:28:ab:f6:17:9e:e0:df:21:1c:23:6c:6d:de:37:33:
         53:3d:ef:30:29:95:f5:6d:1d:d9:e1:00:5d:57:83:1e:56:19:
         b2:9b:79:c7:97:80:dc:41:40:6e:91:49:d8:f0:94:39:8b:48:
         5e:24:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:04 2026 by rpki-client