Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          LiwPvh7zlHNTcJTyP4ewBq87fIaxaU4rhmRKY0wy8VQ=
Subject key identifier:   E0:B7:BD:74:78:A8:FC:3E:8A:AD:42:CD:7C:20:9C:56:E1:45:2C:90
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       019D288482EA7B05A38AD22FE10C6F82DA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          0810
Signing time:             Thu 26 Mar 2026 05:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:05 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: LVgayVy25uPHrooBDugGX0v7JPDxkPe0Vr6AITQ+EuA=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:82:ea:7b:05:a3:8a:d2:2f:e1:0c:6f:82:da:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Mar 26 05:01:05 2026 GMT
            Not After : Mar 27 05:01:05 2026 GMT
        Subject: CN=e0b7bd7478a8fc3e8aad42cd7c209c56e1452c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:bd:5c:da:69:6c:f7:91:0b:b8:9c:d1:c7:
                    00:d3:7f:fe:c2:21:53:be:e7:6f:10:48:18:8c:7e:
                    75:65:5c:b9:15:2f:71:de:8e:59:b6:5d:05:bb:19:
                    49:c0:f1:4c:3e:b6:c7:c4:57:d1:f5:bf:41:15:85:
                    83:97:1a:5c:64:1c:db:f2:13:67:58:21:bb:f5:c8:
                    2e:9b:21:5b:f3:99:1f:7d:31:04:f7:c7:a4:aa:e0:
                    53:88:c9:ee:9a:8a:68:42:98:8e:de:31:99:c8:dc:
                    fa:6f:38:02:0d:55:38:81:70:91:19:ba:43:c3:0e:
                    32:13:6e:2b:04:df:c8:8e:60:a5:10:59:4d:2d:29:
                    eb:6f:6c:34:09:30:b3:82:26:71:3b:e7:0e:7b:8e:
                    41:36:bf:4a:2f:05:3e:2c:91:46:93:27:d4:99:00:
                    18:11:f0:d4:5d:2d:37:ce:4b:6b:0c:6d:21:62:69:
                    18:b7:57:3a:26:84:88:11:c2:a2:ef:7f:f0:45:b4:
                    56:0a:1d:c1:20:dc:01:e0:a1:9f:12:4c:23:d3:45:
                    a4:e6:fb:11:d6:f7:28:e2:ce:d9:14:05:f0:e1:c2:
                    ae:44:9b:ca:80:5c:d2:6b:06:c6:92:c7:60:47:7a:
                    81:c6:f2:26:00:a0:66:0a:13:58:b3:e0:c9:ae:36:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B7:BD:74:78:A8:FC:3E:8A:AD:42:CD:7C:20:9C:56:E1:45:2C:90
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:53:40:82:45:77:93:33:85:b1:56:f8:0a:7b:ef:58:42:8d:
         a1:55:4d:dc:cf:5e:a9:70:2c:8c:39:ce:03:fe:d9:2a:98:ce:
         5f:ec:90:76:39:f1:e2:bc:39:74:8e:32:8e:34:b8:13:87:e6:
         2f:ed:0b:d2:ec:4c:da:69:78:1a:38:a0:18:c8:8e:98:48:0d:
         aa:50:02:d5:9e:6b:f3:08:e2:02:0a:0a:d9:99:fa:7c:36:34:
         31:f6:ea:b4:cf:c7:8f:c0:09:0e:6a:03:65:d9:53:0a:18:5a:
         1e:e0:e4:6c:70:33:cf:53:13:af:0d:4d:8d:75:67:8b:fc:df:
         10:f5:b3:4b:2e:53:04:e2:54:b1:1d:3f:4a:21:51:b6:4a:b7:
         85:4f:cb:21:53:9e:d4:fc:f3:ae:06:dc:75:88:b7:04:7d:2f:
         dd:5c:95:90:69:11:e5:b7:ea:69:b1:92:ba:87:ef:27:9a:49:
         20:5e:27:88:a2:b8:c9:f6:97:b8:82:3c:ad:e6:df:30:64:fa:
         98:79:9a:cc:6b:fd:3c:29:3d:71:05:e1:e7:9e:85:d1:4e:20:
         f4:fd:15:ed:cd:6d:1a:1e:e9:dd:c8:8d:f9:6c:ad:4d:8d:04:
         33:91:0e:bb:e6:41:a3:f1:ab:72:92:1c:38:14:d0:65:f8:2e:
         6c:3e:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:04 2026 by rpki-client