Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier:          ++ybpfXG7ZK+nuSglEUJlAQvvH+HQLnT/sqzQxNY2/Q=
Subject key identifier:   A7:D3:B0:0C:19:19:B8:6D:F2:E9:E0:D4:D7:81:BF:5F:F0:7E:60:BB
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer:       /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial:       019D2584053693284E7611831FC323277996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number:          083F
Signing time:             Wed 25 Mar 2026 15:01:42 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:42 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:42 +0000
Files and hashes:         1: 1ygXWl56xqWdwn4TflC3PtLjSqY.roa (hash: wDz5snBxEXcvrvGiZ9XQ0363TdLN4FN6tQlUAGosd4Y=)
                          2: kMPviltRtqxAKO4xs3FL286WfMI.roa (hash: b2KX7/1WNd0ZVOSNk+xrifaPOCqz2zXGvf6d4rAcmDs=)
                          3: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: bdz9i4LF1Oa4lvt6xPa0jyqIFUB++FIJd03Gj4buMIU=)
                          4: xPQBc7eZ2R1OmzVk_QznLDcH24Y.roa (hash: EfDW7rBbqgixbRFm/O3kOxDuO6fhmyskTYvpF7yhzcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:05:36:93:28:4e:76:11:83:1f:c3:23:27:79:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Validity
            Not Before: Mar 25 15:01:42 2026 GMT
            Not After : Mar 26 15:01:42 2026 GMT
        Subject: CN=a7d3b00c1919b86df2e9e0d4d781bf5ff07e60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:57:28:12:7b:37:77:ab:f0:2c:07:86:21:
                    d9:76:8e:71:23:66:de:e2:76:39:b8:68:51:bb:26:
                    75:d2:72:bd:6c:eb:60:2d:d8:14:65:76:89:62:b3:
                    7d:5a:8a:aa:42:92:0a:ce:ae:03:30:b0:23:71:81:
                    fb:e3:e8:4f:d7:fb:5a:6e:de:36:3f:38:fd:e2:05:
                    60:59:90:65:b0:ec:72:73:cd:fd:3f:2b:1a:40:42:
                    f8:cc:a4:2c:4d:0f:a7:37:03:38:fb:0a:50:f3:0c:
                    9a:1e:67:e3:99:26:1d:be:e2:70:bf:75:bd:bd:c0:
                    b4:4b:35:9d:6b:7b:43:f5:43:c3:85:f7:9f:57:45:
                    20:e3:b1:38:38:cc:8f:87:d2:47:21:ca:83:65:0a:
                    17:40:f9:46:e2:13:25:b5:e5:74:02:0e:cf:6f:5f:
                    d8:14:73:fe:a1:39:fd:71:3b:c5:d4:29:8d:c7:28:
                    e8:47:13:61:5e:1f:b3:19:f6:d2:9f:f1:12:64:76:
                    c3:e0:8c:a6:8f:97:e0:d5:e4:c6:d6:dd:d2:d5:cd:
                    d7:3f:c3:85:30:9a:06:cd:7c:6a:62:f1:c5:77:57:
                    5f:f3:80:19:09:68:98:a7:80:d2:ad:6c:b3:3a:84:
                    45:17:09:fc:06:01:5e:a3:69:6a:63:d1:89:1b:0b:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:B0:0C:19:19:B8:6D:F2:E9:E0:D4:D7:81:BF:5F:F0:7E:60:BB
            X509v3 Authority Key Identifier:
                keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:2e:27:8c:98:48:20:c0:b6:37:26:3f:06:be:cf:f7:f6:
         db:c4:61:13:67:23:16:0a:3e:d5:a7:00:c7:c2:e7:c1:9f:ab:
         23:42:3f:ab:cd:7b:5e:ff:aa:05:44:27:cb:47:25:d4:a8:03:
         f1:d9:ab:fe:15:cf:23:0d:a7:53:4d:f7:bb:87:26:ac:a2:4f:
         48:3d:1b:99:30:41:79:87:8f:f3:ea:20:a4:0b:d6:91:1b:5d:
         f6:5c:f5:54:c9:be:f5:d1:4c:0f:7b:91:b2:20:c2:ce:df:82:
         f3:1d:91:ae:95:6a:23:11:fb:8f:33:71:e6:8e:6f:cc:b8:40:
         6b:ac:b2:ab:e5:13:fb:27:47:8d:7b:a3:0e:59:30:f2:4a:28:
         5c:71:3d:18:c7:07:7d:9a:af:2a:3c:ff:37:60:13:17:be:81:
         cd:8b:a7:c7:91:d7:1d:7e:e6:f1:1a:55:57:0b:c8:9b:85:5f:
         07:d0:c7:0c:78:24:6b:c2:38:28:38:c2:47:a0:bf:4f:90:25:
         ad:a4:b7:1d:39:23:36:bc:48:2c:c4:be:97:4b:f3:33:89:a4:
         9b:07:bb:e0:5f:11:15:ee:f9:8d:c8:51:61:83:1b:fa:d5:46:
         c8:8a:01:b7:77:51:71:9e:c9:e1:c8:10:c2:45:55:fe:a8:1d:
         b8:2a:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:10 2026 by rpki-client