Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          yNMNE38OO4KQRJtVUHoYTZCr5gz/LEA5kQRgxQG+hDY=
Subject key identifier:   92:B1:E3:9F:B4:C2:DE:96:8F:C8:63:5E:78:0D:A5:00:6E:EC:6C:CC
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       019D3865B0D574110D491B2C8152F2FB7193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          15B5
Signing time:             Sun 29 Mar 2026 07:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:21 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: y7GDHaoXFnHBd96dUZLfRwirF8vNqVFw0cEVeWzhyzo=)
                          2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:b0:d5:74:11:0d:49:1b:2c:81:52:f2:fb:71:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: Mar 29 07:01:21 2026 GMT
            Not After : Mar 30 07:01:21 2026 GMT
        Subject: CN=92b1e39fb4c2de968fc8635e780da5006eec6ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:05:e7:ad:36:e6:9a:ae:34:8a:17:c3:10:
                    dd:26:5c:79:0e:e5:cb:44:c0:b9:c5:b9:15:37:8d:
                    3e:0c:fe:9b:a4:4e:51:d7:d8:55:b5:48:7a:65:67:
                    16:6a:c6:9d:9c:09:58:ba:8d:09:aa:5c:79:cc:04:
                    6c:ae:39:f6:f4:0d:62:55:b8:f8:06:5d:08:5e:65:
                    87:50:e3:9f:fa:14:31:ec:d4:26:6f:46:05:66:75:
                    17:d9:bb:94:3d:9b:c9:16:b4:fa:73:16:78:9d:56:
                    e4:f3:a8:39:59:bd:9c:16:c4:22:41:c3:7b:83:3a:
                    d8:58:dd:83:b5:f5:4b:66:f7:af:36:3c:95:cc:07:
                    db:07:ee:66:d1:b9:6c:11:ae:e7:73:bd:43:00:dd:
                    e9:2d:03:1c:47:5a:2a:33:15:7e:04:9b:90:38:82:
                    f4:22:13:c1:06:77:9a:31:be:4c:5e:fa:ed:97:ce:
                    71:74:4d:a5:0d:58:28:f2:b8:ce:8d:b6:7b:86:01:
                    f6:2b:17:12:96:d0:9d:35:4a:0f:f2:25:b7:cc:dc:
                    0e:c9:3a:36:f5:b1:5f:e1:57:72:a5:a1:2b:82:cc:
                    3c:98:03:31:16:eb:e0:ab:f5:b6:22:34:86:35:60:
                    c5:39:93:fa:fb:95:74:53:c2:5e:b9:a6:cc:90:fc:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B1:E3:9F:B4:C2:DE:96:8F:C8:63:5E:78:0D:A5:00:6E:EC:6C:CC
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:02:3b:7b:14:7c:1a:3c:7b:02:20:8d:22:96:83:98:4d:
         c2:f7:34:d7:23:ee:df:4f:ce:a2:ea:16:fd:6f:b7:50:a8:b4:
         ed:e0:41:32:22:36:b3:52:89:a1:71:21:65:47:0b:bb:87:2b:
         83:ec:28:7b:11:64:2c:32:b4:87:91:0d:70:2c:16:49:32:c3:
         d6:8e:60:b2:ba:38:a6:e3:95:70:dd:4c:3c:19:00:8d:b5:3a:
         b8:78:8e:aa:ba:61:af:a7:84:22:bb:13:28:e1:77:af:80:50:
         5c:4e:ec:0a:26:93:62:93:d7:9c:40:75:12:1c:e3:ba:e5:f9:
         eb:ff:8d:69:9b:c7:c8:e5:ba:19:4d:35:ef:57:ff:7e:b7:6e:
         20:5b:37:24:64:84:b5:4b:f8:e1:2c:7a:8f:f0:a4:0c:35:b1:
         bb:c2:e4:37:09:5f:f0:4d:dd:d3:8f:aa:48:5c:9e:ca:f6:2d:
         3c:b8:00:c5:b0:50:cc:7b:5a:4b:c8:46:65:7e:32:e6:a0:2e:
         57:96:12:b4:06:7f:2a:01:18:95:4c:9e:6d:1e:3d:eb:75:f3:
         ae:3c:24:53:b0:7f:f9:ae:16:12:3d:f1:4f:33:b6:c8:55:ce:
         6e:21:b3:2e:57:0a:aa:17:6f:98:a9:b1:19:e0:77:44:0f:c2:
         b2:f1:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:08 2026 by rpki-client