Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File:                     4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier:          YKpUq9gtVL6LK0gMp8fcJk3U6JiuzRrbFDQDkupkc8c=
Subject key identifier:   C9:22:4C:1B:68:3E:2F:0F:4B:BF:01:8D:01:64:F4:F8:8C:D4:7A:25
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer:       /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial:       019D2961177E93D825E1F5713DCAB084A983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number:          0168
Signing time:             Thu 26 Mar 2026 09:02:02 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:02 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:02 +0000
Files and hashes:         1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: OEiOm2oMa+wOObfCcwWf5BdGOzMCwf2C2Jd/FkyTt5c=)
                          2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:17:7e:93:d8:25:e1:f5:71:3d:ca:b0:84:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
        Validity
            Not Before: Mar 26 09:02:02 2026 GMT
            Not After : Mar 27 09:02:02 2026 GMT
        Subject: CN=c9224c1b683e2f0f4bbf018d0164f4f88cd47a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:f5:30:10:de:29:e2:de:63:58:b4:5e:c0:
                    48:56:a3:87:ff:ed:98:ce:c8:cf:17:70:68:2d:80:
                    c8:06:67:cb:4a:19:d5:18:d7:42:01:38:e5:7d:f6:
                    31:ab:81:88:57:64:f8:62:70:df:40:eb:f6:4c:ce:
                    1f:8e:09:50:3d:21:45:1a:81:ee:a7:1d:fb:2f:d4:
                    46:b4:00:39:de:b8:a5:46:60:75:37:3d:fa:a0:cf:
                    07:05:38:1e:63:26:4b:3f:9a:95:d8:a3:16:94:72:
                    5a:46:49:fd:9e:91:6c:3d:33:60:09:1e:15:3c:98:
                    fe:c8:03:e2:65:5b:63:02:21:4d:92:d9:82:27:e6:
                    75:66:43:8f:e4:c1:8c:4c:01:c3:f2:35:3e:2b:8d:
                    4f:26:b7:ff:d0:71:ef:f5:07:86:56:bf:e9:55:52:
                    c1:88:61:74:25:cb:ed:82:ac:c5:e0:4a:31:e2:e9:
                    96:ef:9b:4a:48:85:93:b4:0c:97:96:23:e1:a0:48:
                    ae:2a:c4:4d:05:d2:97:0a:e2:79:f4:85:17:22:14:
                    ea:4b:9f:fd:f2:2b:48:45:e9:66:bc:f0:75:5d:35:
                    44:8b:d3:a4:8f:1c:97:0e:a4:bb:7b:11:ea:6b:18:
                    75:e5:c5:e3:5e:bd:67:7f:53:52:ce:68:c3:06:f1:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:22:4C:1B:68:3E:2F:0F:4B:BF:01:8D:01:64:F4:F8:8C:D4:7A:25
            X509v3 Authority Key Identifier:
                keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:6f:56:59:ce:25:32:b9:a3:97:9c:23:c8:84:2f:3b:74:
         57:76:66:48:aa:bf:80:a4:da:74:51:2b:9d:16:90:f7:d0:bd:
         e1:72:9d:c6:34:10:c6:87:a8:29:7d:8b:9f:7b:d2:cb:27:84:
         ac:0d:d3:e0:c6:2c:d1:b2:b0:92:64:68:d4:6e:51:e2:63:71:
         db:54:4f:eb:7e:0f:a2:c9:38:b0:b7:8d:2f:b6:bf:94:03:73:
         ff:cc:d0:70:4a:43:fa:91:05:5f:70:7e:19:79:77:57:b1:91:
         f5:fd:c4:bd:1b:94:25:ae:b4:47:ec:f1:4c:c4:7e:c4:2f:3b:
         3c:6e:48:26:8e:6a:65:30:c1:0c:5e:3a:ac:5e:83:90:65:70:
         ea:f9:47:ac:74:ed:10:b1:48:8a:8e:a8:c7:fe:a5:39:61:c5:
         ae:a4:9f:84:81:56:39:6a:57:4b:67:44:72:3c:3c:be:9e:57:
         cd:71:7b:b8:9d:df:81:d6:8c:0a:a7:78:ed:96:8c:0c:e6:a2:
         88:cb:bf:f2:6a:7b:46:08:d0:e9:d3:9e:95:30:85:8d:bc:36:
         bb:d3:26:05:91:91:60:55:2c:db:83:78:b6:bb:91:4f:23:9c:
         01:64:ff:64:76:58:5e:48:b0:19:34:fc:da:fa:e4:c2:d2:27:
         7e:45:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:56 2026 by rpki-client