Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File:                     I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier:          unevzfkzect1FeiAtQkzHyl7mgoAImstaVW805zj5pQ=
Subject key identifier:   93:61:B8:A3:B3:52:B4:7E:2B:61:6C:A2:7C:B7:4C:DF:AA:A5:46:8A
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer:       /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial:       019D2772244FDB54CDD0A4D75A89B0D82C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number:          08C3
Signing time:             Thu 26 Mar 2026 00:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:24 +0000
Files and hashes:         1: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: THpNgaaRRMAFWu4YEStj72CnE0PHv+Lv+sSOxrdm8+w=)
                          2: NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa (hash: aspcKV2w4XRZmv8Xg1QmYjjgR0mYMF80LK5f3kp14g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:24:4f:db:54:cd:d0:a4:d7:5a:89:b0:d8:2c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
        Validity
            Not Before: Mar 26 00:01:24 2026 GMT
            Not After : Mar 27 00:01:24 2026 GMT
        Subject: CN=9361b8a3b352b47e2b616ca27cb74cdfaaa5468a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:fe:cf:f8:28:d0:a1:d5:13:01:8f:91:9f:
                    12:55:db:b1:92:ec:a4:09:2d:74:da:ba:e6:59:bb:
                    e3:46:68:aa:eb:4a:a9:a1:26:30:f9:3b:f9:d5:54:
                    40:ad:75:4c:8d:04:45:a3:67:6e:6d:6e:3f:9e:c5:
                    b9:6d:22:ea:43:d4:a5:e1:35:b7:82:aa:fd:4d:c7:
                    cf:f6:75:90:6f:a7:b6:17:6b:02:e5:59:77:fb:28:
                    5f:8f:df:e2:b7:6c:97:a5:16:d7:31:e7:8b:13:62:
                    da:26:43:f1:01:be:d0:7d:59:50:3c:57:f8:06:bb:
                    f2:2c:79:4c:79:73:57:49:7f:53:54:dd:21:f9:98:
                    cb:21:7c:c1:b9:97:80:d8:79:d5:4d:ba:24:6b:52:
                    f5:3f:0d:c2:8d:cc:a8:fd:3c:f9:71:47:0c:da:2f:
                    ae:b0:dc:13:f3:4f:3e:59:33:5a:6b:94:7f:88:57:
                    2f:4f:f4:e5:04:ae:72:9a:22:59:e9:c4:ee:f8:bb:
                    67:05:d6:6b:a3:19:b9:f1:80:f6:61:9e:8b:2f:89:
                    0b:54:3f:6c:e8:ad:94:04:ac:bf:e8:f3:fe:3b:8d:
                    22:70:69:1a:db:c3:a3:17:3e:91:18:9b:59:c3:33:
                    74:12:4a:7e:74:7f:af:ed:6a:bc:e4:72:b1:b9:0d:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:B8:A3:B3:52:B4:7E:2B:61:6C:A2:7C:B7:4C:DF:AA:A5:46:8A
            X509v3 Authority Key Identifier:
                keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:92:25:d1:a9:f1:d3:97:bd:6c:65:ef:09:0e:d5:bf:ec:
         fe:1c:c1:f1:7d:88:3f:49:80:85:56:3c:b0:d6:d5:ce:46:12:
         c5:7b:d2:35:a5:5f:88:f1:c0:fd:7f:41:5a:36:a3:86:75:a7:
         cf:5f:27:d3:2a:fd:45:7c:51:ec:c5:e4:24:b0:04:55:6e:f5:
         f4:49:8b:03:1d:b3:14:b1:7b:55:ba:e0:8e:b5:70:74:a5:03:
         57:3e:a4:cf:42:5a:48:89:dc:6e:9f:b5:d6:ef:79:34:63:2d:
         ea:1f:b7:09:42:1d:0e:e1:e5:28:03:3c:c5:ed:db:77:6f:e0:
         14:53:eb:d9:af:b3:8c:2d:f0:e5:e0:4f:b8:b1:5d:5f:b1:a2:
         db:cf:00:94:3e:a6:10:88:13:7d:c2:fe:d7:c9:a2:62:a7:9b:
         ff:bf:fa:02:ec:de:73:b4:02:78:87:b6:00:c2:0d:fb:d2:11:
         aa:34:9e:f5:fe:35:f7:3b:e0:7d:f0:82:61:8a:ac:7f:cf:04:
         01:d7:14:e8:34:71:88:1a:2f:57:d1:48:db:db:dc:05:16:42:
         1c:75:e1:71:0c:db:57:1c:1b:2f:44:06:14:06:80:90:00:ed:
         12:6a:f1:f3:59:b1:64:91:47:a8:36:7c:7d:1a:df:cb:fb:a6:
         4b:f8:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:07 2026 by rpki-client