Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          jzWUSWugMpYiP3wbYNtUo4Og9BSrOricjkQTtHPlGCs=
Subject key identifier:   D0:5E:17:9D:BA:1F:EE:09:07:21:51:6E:84:A3:05:07:C3:0B:EC:28
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       019D382E49E34A0909262EB3EAEDB4014EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          1264
Signing time:             Sun 29 Mar 2026 06:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:50 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: I/ME9auqXjiGaIEr9GmDMf4Mq9lz6zLfGyUgYsCaDaQ=)
                          2: TIl4ni4I9dnWPD6JhGZ4MT01X9k.roa (hash: xqkMDcDlSk0VZ9Deo2xieEF476AnzgNHWsIFEaEp8us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:49:e3:4a:09:09:26:2e:b3:ea:ed:b4:01:4e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Mar 29 06:00:50 2026 GMT
            Not After : Mar 30 06:00:50 2026 GMT
        Subject: CN=d05e179dba1fee090721516e84a30507c30bec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:ba:7f:4c:17:77:69:f9:8c:3d:b1:64:76:
                    0e:99:8f:c0:68:41:db:7b:87:a6:7d:bf:f4:52:d1:
                    7b:28:97:25:7e:f4:b3:13:5b:66:49:ec:12:07:f9:
                    bc:06:18:c3:22:00:23:c6:f4:46:96:7b:6b:22:d1:
                    6c:6a:6c:f4:b9:62:36:3a:e3:63:2a:42:9c:7f:a7:
                    dd:30:ed:d0:78:97:6f:66:73:cb:89:8c:fa:d8:b4:
                    25:24:48:83:49:34:dd:ad:b1:bf:d4:99:dd:46:fc:
                    ae:d9:30:71:b4:d8:75:ae:56:f4:0c:53:ea:a0:5b:
                    53:2a:88:3d:72:95:4c:50:11:1f:e6:cf:48:83:85:
                    69:d5:2e:89:7e:22:10:c1:98:9b:d2:4f:ba:14:9b:
                    d7:2f:a2:75:16:25:fe:fd:20:64:03:0c:47:73:0d:
                    8b:75:d0:d6:a6:5d:06:9b:d5:54:87:60:6a:0c:c5:
                    99:7e:ec:54:ab:ab:8c:06:c7:b4:5c:80:62:25:99:
                    7d:b3:84:51:8b:26:f5:fe:a8:60:99:3e:8f:89:88:
                    34:50:d5:d7:a7:b0:71:84:6e:42:69:90:88:14:44:
                    99:63:c8:7b:ab:8c:13:b2:14:eb:a0:07:a4:39:18:
                    f3:d5:61:62:93:4f:4c:90:88:04:30:fb:c9:58:ff:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5E:17:9D:BA:1F:EE:09:07:21:51:6E:84:A3:05:07:C3:0B:EC:28
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:af:8d:85:19:67:f6:5a:ec:2e:37:f3:19:46:0b:73:1b:
         36:a4:da:bc:68:fb:b5:c9:da:5b:15:9c:ab:7d:dd:a1:75:5a:
         ba:40:d0:c7:fc:7f:38:d3:cf:17:17:19:fc:99:61:20:a1:69:
         e3:76:19:86:e5:89:59:93:c9:46:ea:5c:f6:1f:20:76:12:7f:
         cd:8b:30:aa:09:7c:d0:00:75:e7:7d:d9:20:c7:26:21:3d:06:
         ee:77:65:52:a4:77:59:77:d9:32:f4:53:92:d2:74:ce:cf:fd:
         2b:e9:80:6b:7d:5e:b8:e3:ef:82:8b:22:f6:ec:49:49:31:7e:
         d3:f2:e9:af:66:90:ff:e4:74:05:a8:2a:90:7f:fd:68:b2:c7:
         1a:be:8e:ad:9b:4f:17:0a:fd:2a:22:da:8d:74:a3:21:6f:80:
         75:e3:9b:81:70:9a:18:58:b4:9c:93:f0:58:f6:f4:ed:0f:76:
         cf:1a:47:ed:47:06:3d:7c:48:3d:ce:a8:42:93:67:30:a4:bd:
         60:3f:e0:0f:34:7a:f4:e5:0e:de:cd:31:6d:a1:ca:b9:4f:0f:
         94:91:ed:75:7b:73:32:66:15:a8:4c:be:e1:7a:af:99:f0:16:
         94:07:74:9d:4b:91:d9:b3:11:e5:9a:5e:91:3d:eb:92:d2:e5:
         21:90:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:11 2026 by rpki-client