Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File:                     P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier:          NqgC1MFYJzAnk3ktCm7+njNUbJRL1zdZWH/03PiZUJM=
Subject key identifier:   07:F1:0C:85:7D:32:C5:FF:8E:60:66:32:21:17:4D:E0:0F:8D:F0:4E
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer:       /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial:       019D382E42262CF18320889F781FF08BEE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number:          0151
Signing time:             Sun 29 Mar 2026 06:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:48 +0000
Files and hashes:         1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: WgCVsGV2ngmFEzKpe01e/Z8GP0I+C63p5uLzYn//Has=)
                          2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:42:26:2c:f1:83:20:88:9f:78:1f:f0:8b:ee:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
        Validity
            Not Before: Mar 29 06:00:48 2026 GMT
            Not After : Mar 30 06:00:48 2026 GMT
        Subject: CN=07f10c857d32c5ff8e60663221174de00f8df04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:2b:58:08:55:f6:04:14:ec:a2:ac:fb:3b:
                    62:f7:1b:66:a7:56:29:44:7e:8e:9d:ef:3c:41:26:
                    dc:23:73:2d:c9:42:df:fc:3a:15:1d:b5:bc:88:65:
                    d8:1b:26:21:42:58:fe:fe:a0:3a:a0:4e:23:1b:88:
                    71:ad:60:75:2c:3a:9e:66:e8:75:39:25:b0:be:df:
                    f3:33:40:02:e4:26:da:33:51:6e:d3:8c:76:70:da:
                    67:7f:4d:22:be:a2:27:ae:ad:c0:73:68:b2:52:b7:
                    ad:95:51:a5:ba:fc:e8:ee:b1:05:3a:44:61:f8:70:
                    13:89:39:2b:9a:9d:72:a7:36:ec:6d:60:bf:e5:00:
                    1d:80:f5:40:1b:e0:bc:2b:78:6e:fc:42:c6:b5:eb:
                    55:74:f5:12:75:6e:c4:0b:df:80:1d:38:23:14:c2:
                    f6:e3:df:e5:1a:32:2b:aa:7e:28:4e:cc:e5:82:69:
                    97:2f:32:0c:74:bd:fd:a1:a6:3d:bf:f8:42:9a:58:
                    19:18:45:41:8a:47:14:ee:e9:f4:49:d3:d2:53:3c:
                    fb:fd:60:91:4c:de:fd:24:a1:21:e2:63:6f:58:fd:
                    68:54:1f:d5:6b:10:8a:e7:67:21:e1:93:72:7d:a5:
                    7e:5d:2f:d5:04:90:7b:08:49:e9:04:6f:85:9c:df:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F1:0C:85:7D:32:C5:FF:8E:60:66:32:21:17:4D:E0:0F:8D:F0:4E
            X509v3 Authority Key Identifier:
                keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:35:f0:7f:5a:97:38:54:34:7e:74:93:aa:20:17:e4:1f:
         a5:59:7e:d3:6f:f9:22:73:05:e6:8a:29:11:c3:00:a8:aa:0b:
         ea:5b:c9:2e:1c:26:52:5a:3b:e8:19:f4:cb:e8:c8:2d:bd:07:
         33:08:8e:f6:d8:4b:b5:f5:5e:b9:7c:fb:e0:d5:fd:7a:0b:88:
         06:55:3e:9d:64:23:53:26:ae:53:39:dd:d7:17:89:ac:0f:c1:
         b6:c1:a6:b3:e1:56:d6:3b:16:fb:cf:5e:da:6c:df:ac:ac:0b:
         6c:78:3f:e3:08:8f:4b:0a:59:66:a4:1e:7f:c9:5f:bb:f3:30:
         a5:26:e0:21:e2:43:25:29:55:67:d6:ca:ce:ef:ea:e1:93:f9:
         91:da:dc:92:48:b7:b5:b8:c9:45:75:d8:66:77:a8:7e:52:9e:
         86:6e:d2:c7:73:c6:ee:db:86:0d:87:83:00:f7:08:8f:3f:4a:
         57:ac:6e:7b:df:9d:44:83:e4:10:42:cc:a0:77:d7:72:21:ba:
         f8:e5:95:be:a5:30:e6:63:e0:df:30:7c:32:92:af:93:80:b0:
         6f:d9:63:28:d0:1e:0b:43:7f:b0:72:d7:d1:6f:9b:e4:97:18:
         68:0f:56:c8:8a:84:10:a8:d9:22:35:8e:55:14:5e:eb:4f:31:
         f5:f9:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:42 2026 by rpki-client