Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          hmOcwdoaeXXphvXDVE2mLD+s7lcnVO/OziZMV1Z2LOk=
Subject key identifier:   7B:F7:31:89:0F:7B:86:C2:9A:08:3B:EF:1E:0A:DB:95:C5:96:8B:1D
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       019D273AC58414819A2F1FF99BA5AF5BD04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          056A
Signing time:             Wed 25 Mar 2026 23:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:56 +0000
Files and hashes:         1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: W7gvVAliOp0gOg00KO19Pt91uU7ssJSRz1DiD2LxZBc=)
                          2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:c5:84:14:81:9a:2f:1f:f9:9b:a5:af:5b:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: Mar 25 23:00:56 2026 GMT
            Not After : Mar 26 23:00:56 2026 GMT
        Subject: CN=7bf731890f7b86c29a083bef1e0adb95c5968b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:1b:1c:03:fe:ec:c4:e4:b8:b3:ee:5f:67:
                    7d:fd:04:ce:ad:a6:9f:b9:14:9e:ad:8a:76:bf:49:
                    80:b5:53:32:fa:a6:bd:1f:9c:9a:ad:13:c1:b4:78:
                    3c:15:4b:59:de:1d:f2:9e:97:eb:dc:42:7d:9a:a3:
                    af:d5:5d:45:3f:1a:eb:5d:4d:a1:63:84:8f:f7:9e:
                    fd:3c:63:dd:0b:79:de:9d:ca:47:be:be:70:1d:fc:
                    fd:bd:df:c1:1b:9e:87:c6:b9:cb:67:c6:f2:96:73:
                    75:2b:5e:83:56:4c:b6:91:ef:17:10:5f:b4:9c:f3:
                    32:68:b7:ac:3e:4f:a6:68:be:76:ef:aa:85:4d:91:
                    3e:b4:f7:6d:03:02:92:10:22:00:ee:25:fa:51:d2:
                    80:22:34:bc:1c:ed:25:33:f4:f9:b8:cf:7c:a5:75:
                    41:a0:3f:68:8d:e7:36:52:28:c0:db:f4:26:44:fe:
                    e5:95:fd:e1:b7:7e:48:03:8e:36:7c:5e:e2:c2:52:
                    b6:b5:20:6e:a7:27:e8:99:73:28:c9:df:09:e1:4f:
                    1f:1c:96:fe:d1:97:f8:39:1d:19:ac:b2:7e:08:e4:
                    f9:cb:a7:7e:05:e9:fd:e4:16:92:59:e8:e4:a0:c5:
                    c6:d9:62:29:39:ac:4c:2e:a2:3b:a0:ba:d3:4f:fb:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F7:31:89:0F:7B:86:C2:9A:08:3B:EF:1E:0A:DB:95:C5:96:8B:1D
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:dc:cd:9b:5a:26:51:8f:7c:b8:db:74:6d:9f:c9:69:20:
         e4:2a:bc:40:18:53:59:ab:71:ba:34:2a:a6:a4:20:ab:6f:a6:
         89:d9:fa:bd:15:83:e5:fc:9d:2c:96:10:c0:f2:64:3c:66:b8:
         89:fd:65:54:66:54:d3:d9:3d:01:7b:3c:f8:d7:04:59:e7:ba:
         4e:87:51:21:03:de:94:4e:55:75:b6:10:6b:1e:35:3d:b9:be:
         95:dc:74:ac:67:3e:ce:4b:75:61:a5:15:d6:ae:02:cc:4e:9e:
         e6:a2:75:21:a5:b0:cf:19:a9:31:3a:f5:a5:b0:a8:2c:1c:bc:
         2d:10:c9:a4:e0:46:3e:86:dc:ee:3c:bb:3f:e3:a0:8e:3b:31:
         31:d8:c4:64:7f:1a:d7:00:77:1a:b7:e2:ff:36:31:5a:99:f9:
         ae:9f:06:f3:bf:fe:64:95:be:40:40:0a:34:fd:b5:e9:4c:94:
         c6:c4:d8:c2:6d:19:4f:93:e9:76:b1:09:4d:88:9c:10:3b:d8:
         43:40:30:7b:bd:0c:f6:1f:34:4e:94:f1:cf:e0:99:6b:f1:99:
         3c:ae:4c:8d:1f:d1:1f:8c:5b:cc:f5:45:45:81:db:68:d2:85:
         b3:21:68:77:8f:f8:b1:d0:96:75:a0:73:5f:bf:3f:d9:88:02:
         2f:86:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:14 2026 by rpki-client