Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File:                     SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier:          Bs+2Xm7FDGqskibB1E+/+qKp6frGL0cpSHaNhiDjMd0=
Subject key identifier:   2F:22:5E:A4:67:86:BB:43:A3:16:23:52:17:0A:A9:17:D3:6D:C6:51
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer:       /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial:       019D32D11A2D9166A2BAF089283A168D1C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number:          15E4
Signing time:             Sat 28 Mar 2026 05:00:57 +0000
Manifest this update:     Sat 28 Mar 2026 05:00:57 +0000
Manifest next update:     Sun 29 Mar 2026 05:00:57 +0000
Files and hashes:         1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: 2WMwUiOQl0YCun7qe8wZLcPs+Qrd+e/dI+N5YhqgL4w=)
                          2: qe9MYSLX-eDkASoA6H4tOqsAe-Y.roa (hash: 8hBnOFhlUkCN3eo0CONISdgb8NSE59yx1j93NOxJCf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:d1:1a:2d:91:66:a2:ba:f0:89:28:3a:16:8d:1c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
        Validity
            Not Before: Mar 28 05:00:57 2026 GMT
            Not After : Mar 29 05:00:57 2026 GMT
        Subject: CN=2f225ea46786bb43a3162352170aa917d36dc651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:d2:47:c5:76:b5:be:c7:71:b7:bb:76:7c:
                    6e:b9:16:7a:8d:11:ce:b2:e5:c3:c8:47:62:82:95:
                    97:c0:db:02:cc:9c:2f:54:93:cd:44:38:5e:99:89:
                    f4:a0:02:1f:d3:75:ab:68:9d:20:03:54:a6:f2:95:
                    6b:ac:dd:d1:92:2b:6a:3b:02:a2:e6:62:7c:49:61:
                    78:b9:3c:29:f2:e7:ec:1f:bf:87:e2:73:89:d3:d6:
                    c3:8f:34:56:84:80:28:3f:3e:d3:1a:66:1e:e9:f4:
                    35:f1:1e:7e:22:0d:57:7e:91:00:ee:45:d7:20:e7:
                    21:ae:88:0e:d0:0a:c2:bc:bc:5e:63:79:8a:69:33:
                    c1:e3:a8:b1:20:6e:50:e1:54:94:8c:23:83:fb:81:
                    0b:1d:bd:d5:ad:85:d8:eb:96:57:34:4d:19:92:2f:
                    47:c5:6d:2b:12:7a:9e:1d:79:3b:6d:e3:4a:c1:88:
                    8e:b4:c9:a6:ed:fa:87:a1:3f:4b:51:64:54:34:d0:
                    2a:3c:64:27:62:b7:49:6d:fd:50:29:cc:5f:b9:8d:
                    7f:d8:e4:dd:f6:fe:4e:a1:2a:4e:a2:db:4c:ad:fa:
                    c0:f4:4a:de:d3:c3:a5:75:57:34:ca:55:3b:13:f5:
                    1a:9d:2f:43:0d:a5:00:62:d4:0e:5e:b3:94:62:29:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:5E:A4:67:86:BB:43:A3:16:23:52:17:0A:A9:17:D3:6D:C6:51
            X509v3 Authority Key Identifier:
                keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:5d:5e:73:30:df:75:4f:ff:01:68:cc:eb:d6:69:f3:04:
         4b:f6:91:d0:da:d0:e2:5f:bb:cf:af:7e:03:05:e6:c3:30:17:
         af:34:a6:ac:46:b6:66:70:a1:34:f5:22:0d:96:84:21:83:a0:
         3f:df:fc:fd:4c:74:af:73:48:d1:8a:ad:2f:89:74:34:e5:e6:
         a4:26:52:be:38:35:25:3b:91:3b:de:65:c1:58:73:50:b6:47:
         18:ff:8b:6a:97:17:48:f3:79:fa:a1:82:a2:af:3b:d6:15:7a:
         34:a4:65:76:d4:d9:65:65:f0:1c:55:1e:14:82:0c:8d:21:fe:
         a8:81:05:7f:1c:a4:32:aa:31:e8:ce:f2:fe:eb:12:58:e6:ea:
         eb:7f:37:30:9c:9e:66:47:05:94:af:80:35:d1:88:20:88:18:
         ea:ad:ba:35:a2:e9:30:ef:c5:f2:26:0b:6a:eb:cb:97:fd:cc:
         50:d1:50:e7:f5:66:df:0a:cf:38:4b:89:3a:5e:5f:2f:d5:9a:
         fb:e1:74:6e:ee:97:5f:80:e7:af:58:7a:eb:66:9c:6d:a4:1b:
         8c:5d:d1:5c:08:a4:46:a9:b2:00:ed:e7:93:09:5d:a2:ef:cd:
         ba:63:43:7c:c2:0e:e0:fd:c0:91:7e:d9:af:94:36:c8:cc:04:
         06:20:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:44 2026 by rpki-client