Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File:                     Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier:          RQHqt0Nb7zOACCGTOAm8Lel5680Xl6Onm7XXdOaETcM=
Subject key identifier:   D2:53:2A:9A:AB:D0:45:44:83:81:C2:E5:18:8B:A0:1C:C0:05:D0:21
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer:       /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial:       019D382E08CFE5E263BD86441F6429BF1A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 06:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:34 +0000
Files and hashes:         1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: vjWZmVotxqaYgHia3RH0WbkU7TtAK4CvJkKE2KyDb2c=)
                          2: gOEYJDrYJTAuB9J7E_2z1GfulVk.asa (hash: Om11K/xLBjmBGrZ0LRECqnMxkZ95ucEKRNRWWb756CA=)
                          3: kFtao75kF9zegQ5TLcCcqHTjWnw.roa (hash: uBAKazPTSG/+fQTed7xO/O+Nfhi704c7YNRVr1Kx0qc=)
                          4: owCHA24oC0FOb4x18JCSnTAlWZI.roa (hash: V2Wf8EKDyk5Qv0JbA3iyriP4XMKfQBD3QUhcqhII+PA=)
                          5: qR232WRfYE-vzGPW6-q-l2CrgSc.asa (hash: qZ/OpsvRx8htDqf4rB4EU8ZCTF8b8Mldz6mlRB6Xb+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:08:cf:e5:e2:63:bd:86:44:1f:64:29:bf:1a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
        Validity
            Not Before: Mar 29 06:00:34 2026 GMT
            Not After : Mar 30 06:00:34 2026 GMT
        Subject: CN=d2532a9aabd045448381c2e5188ba01cc005d021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:d6:55:ef:a5:d7:86:df:79:c8:c7:57:1e:
                    d9:c9:bb:f8:54:1b:d8:70:f6:ea:96:8e:90:51:8f:
                    51:0f:f6:28:78:29:73:47:51:94:38:7d:a3:6e:4c:
                    55:fe:8e:55:19:11:03:b5:a1:fc:39:21:5f:d0:f7:
                    8d:23:e0:33:45:12:6d:49:e8:73:41:11:95:18:bd:
                    fc:26:3e:71:44:73:c0:42:67:0c:d3:f6:6b:94:8e:
                    b6:16:c3:f7:35:56:6a:a6:30:45:15:f1:ba:fc:b6:
                    3c:40:23:2e:0c:f0:c3:85:ed:ee:49:39:73:cc:18:
                    ec:94:cf:81:8d:0a:cc:3a:d6:58:13:39:f2:46:fd:
                    14:db:8a:ae:19:7d:96:40:1e:11:b0:ee:69:60:e3:
                    70:fe:2d:94:8d:42:b2:f4:39:3e:ea:47:1b:bb:fa:
                    4c:6a:22:34:1f:64:66:34:23:9c:10:39:14:08:8d:
                    6c:dc:b1:71:f0:e2:e5:95:e8:e7:b0:db:4d:74:cd:
                    7f:48:ed:0d:b7:48:b0:91:57:7d:e8:dc:5c:fe:b4:
                    ba:36:19:7b:89:50:c0:de:3f:ae:22:33:65:61:43:
                    64:0e:a4:f4:83:ca:00:dd:d2:77:33:9f:59:58:b4:
                    81:ed:e2:f6:46:60:6b:90:6f:1c:ce:cb:10:52:94:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:53:2A:9A:AB:D0:45:44:83:81:C2:E5:18:8B:A0:1C:C0:05:D0:21
            X509v3 Authority Key Identifier:
                keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:16:83:ee:38:e2:4d:13:21:32:4e:c1:c5:8c:10:ef:72:
         16:52:85:d5:18:23:5e:b7:66:6a:db:7f:d8:78:01:2f:62:f4:
         62:9c:29:a2:22:d6:76:79:bb:cf:92:24:4d:d0:54:ad:ae:9c:
         cb:1f:64:2c:e1:a1:21:ce:28:57:dd:a0:30:37:f5:6e:28:f8:
         10:ae:48:7a:70:2e:42:5e:d1:43:6a:21:66:60:18:4f:4c:56:
         a5:2e:e9:bb:ae:a8:31:a7:78:61:0f:44:a3:95:5d:af:32:52:
         59:7c:57:03:be:84:89:23:7d:a4:4a:db:fc:df:0b:63:ec:c1:
         27:d0:3d:14:75:fc:48:1d:52:fc:74:c6:44:15:f0:38:73:a1:
         a4:ea:d2:bd:e1:72:5e:c7:96:6d:c7:8c:ad:21:91:35:45:09:
         ed:43:a2:4b:fd:20:66:e8:ee:d1:fc:d5:a1:05:98:54:c3:80:
         fe:7a:93:80:eb:e6:bf:cb:80:61:01:0a:13:82:3b:31:a5:30:
         b9:78:de:4f:d9:48:b2:0e:6c:19:1e:0b:f1:ce:22:27:99:fe:
         38:bc:35:cc:3a:51:51:5d:17:98:ca:02:86:71:b0:7b:5b:ec:
         ed:69:6c:61:8e:94:24:90:af:47:1a:74:74:15:c4:b4:56:d8:
         ff:3c:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:29 2026 by rpki-client