Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          U3pAfqeC1/GQ68HKKufIjq9548eQ8EZwTQ0S5z2K70Y=
Subject key identifier:   E3:24:85:10:36:01:16:15:1B:AF:8C:3C:1A:7E:8B:A9:01:9C:7F:00
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       019D382E8F150258E16F9E44D181BEE1D379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          075B
Signing time:             Sun 29 Mar 2026 06:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:08 +0000
Files and hashes:         1: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: C8QH4lDk2FCRmz2+a44BBOLQRHQlaPJczhFNF2SAhOs=)
                          2: zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa (hash: l5UKf0qTnkJaMSM/u8sIK416WIDgHsGFudsRfCdoBTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:8f:15:02:58:e1:6f:9e:44:d1:81:be:e1:d3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Mar 29 06:01:08 2026 GMT
            Not After : Mar 30 06:01:08 2026 GMT
        Subject: CN=e3248510360116151baf8c3c1a7e8ba9019c7f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:88:ae:4f:91:bb:cc:79:2e:41:e7:a0:a6:
                    83:8e:84:4b:ed:62:21:05:70:24:14:22:87:b1:ea:
                    0b:17:8e:96:d1:9f:43:62:bd:3b:34:d4:9f:79:f9:
                    69:b9:45:1b:23:20:3b:f9:5b:6d:6a:eb:c5:8d:01:
                    6d:65:7f:ce:a7:cb:a8:73:d5:c1:46:e2:11:57:da:
                    95:c8:76:81:3e:fb:fb:4a:5f:4f:f5:28:28:dc:20:
                    8c:8c:59:b3:56:23:5f:76:fd:0e:f4:b1:9a:75:8c:
                    db:96:6e:f6:16:b4:f6:65:aa:40:d4:1e:29:cf:7a:
                    8c:f0:84:bc:d5:f5:00:f3:a5:47:4e:b0:ce:4c:0b:
                    5a:5a:88:7f:57:84:81:ff:df:28:e2:21:73:cd:51:
                    86:63:9d:af:f7:7e:05:2a:7e:fb:0f:c2:d2:74:a2:
                    0f:40:50:73:04:40:bb:21:f4:b1:2c:bd:df:f2:fc:
                    f9:17:aa:18:ca:98:91:dd:44:64:fb:54:db:83:f4:
                    e0:f9:3d:14:d3:fb:c6:38:a0:cb:a8:29:93:37:e1:
                    55:66:b7:8b:26:d9:11:fd:51:9a:b1:58:59:5f:66:
                    a1:22:81:51:af:2d:80:1e:0c:d8:73:a7:42:0a:cd:
                    24:62:46:0d:aa:2c:51:b2:1f:83:63:9d:d8:f8:ab:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:85:10:36:01:16:15:1B:AF:8C:3C:1A:7E:8B:A9:01:9C:7F:00
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:5e:fb:d9:ec:2d:fc:3b:7b:ca:0b:88:bc:af:bf:5d:ba:
         67:24:b6:83:cf:88:6c:da:16:e7:45:08:55:17:71:64:bc:36:
         48:0e:11:fc:3d:7b:80:bd:12:1c:7d:4d:b1:a1:c1:00:e1:a5:
         2d:bb:56:36:8b:3f:ec:8c:8d:44:c8:33:2b:1f:fc:f6:a8:15:
         93:ce:cd:40:15:9a:80:e6:76:1c:4f:84:7e:19:89:60:35:63:
         79:3d:85:42:7d:26:52:5d:5a:ac:29:c0:0b:e5:cf:0b:6f:0f:
         41:24:c9:79:14:ba:a3:08:81:2b:bd:47:38:16:86:9f:cc:94:
         ca:69:7a:06:9f:de:d7:9d:41:ec:b4:a5:58:40:35:44:7c:e0:
         27:2f:fa:16:8f:37:bd:e1:6d:2d:06:86:48:ca:fa:da:80:26:
         68:16:75:c4:47:ca:3c:47:cd:0d:50:89:28:9a:b4:34:51:d3:
         fb:a6:86:7a:60:56:10:32:f3:a5:67:53:bd:f8:d7:83:ee:5d:
         30:2f:4b:96:3b:2c:6f:9b:18:65:a9:4f:2c:6e:31:a4:2b:44:
         99:07:f7:fe:b6:a3:d3:42:2c:40:3e:40:34:48:93:88:e8:0f:
         b8:a4:01:fd:2c:0f:ca:05:f0:b4:ab:be:35:1d:8e:d7:80:5b:
         8b:36:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:09 2026 by rpki-client