Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          bHKHId9Wt8eu3aOMT4pNxBlq3nVCbaTurqA13kgACgE=
Subject key identifier:   71:A1:71:18:9C:DF:0A:D4:CD:C2:9E:D7:F8:D4:90:09:40:DF:0B:CF
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019D2997404FB6868016E77932A36EFC11B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          09D0
Signing time:             Thu 26 Mar 2026 10:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:11 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: 0fYt9tV2t39UqLuubOiibVEZ8wAyhQYgFWJ4f9qZcno=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:40:4f:b6:86:80:16:e7:79:32:a3:6e:fc:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Mar 26 10:01:11 2026 GMT
            Not After : Mar 27 10:01:11 2026 GMT
        Subject: CN=71a171189cdf0ad4cdc29ed7f8d4900940df0bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:3b:ae:73:c1:9c:92:4c:f0:1f:89:82:c8:
                    96:a1:31:91:1e:22:0c:d0:db:87:3d:c6:26:29:bb:
                    c8:ef:f2:f3:7c:f3:94:e4:0e:39:cf:d7:54:96:61:
                    25:ae:2a:e6:f6:c1:b1:46:d1:02:81:34:55:52:a5:
                    6f:19:96:0c:d0:ee:14:b1:39:c3:8a:4b:52:cc:5d:
                    57:1c:15:5f:7b:17:36:28:ac:0d:da:b3:7b:25:96:
                    96:3f:c7:bb:97:4d:36:6a:bb:1a:e7:a6:0f:c5:c6:
                    b4:95:24:e6:ee:6a:13:74:df:31:a5:68:6b:6a:94:
                    fb:c9:16:36:62:26:0f:ad:71:fa:86:ba:c5:8f:e9:
                    4f:b1:38:33:3c:f7:e1:01:5a:23:64:c3:da:16:ba:
                    20:39:3f:48:56:64:cb:97:83:93:34:1a:49:1e:e6:
                    28:a6:00:d1:d3:55:ad:b0:d1:79:e5:29:fa:9b:3f:
                    63:8f:29:b0:6c:77:75:aa:60:ff:9f:de:80:b5:7c:
                    17:39:a3:6a:0c:18:99:8c:17:6d:85:4b:59:9b:8d:
                    8d:05:4b:3b:85:be:47:0a:92:9c:db:ea:11:09:2b:
                    ae:93:51:43:de:12:f9:83:29:c0:20:86:8d:86:26:
                    a6:a3:86:59:2b:b0:11:59:71:ae:8a:81:c8:ed:87:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A1:71:18:9C:DF:0A:D4:CD:C2:9E:D7:F8:D4:90:09:40:DF:0B:CF
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:38:e2:87:c4:26:b5:8a:ad:42:ee:8c:8b:b2:72:08:59:74:
         cf:0a:25:ec:88:36:f1:a6:31:59:0b:64:e1:4d:da:e5:de:1a:
         6c:31:64:29:e1:d4:5e:6f:06:e2:39:da:7d:16:7f:96:51:26:
         08:92:24:e4:e4:9c:2e:19:ec:20:44:75:b4:cc:9a:8a:19:75:
         20:0a:14:65:29:54:85:a7:37:c7:78:5d:95:1d:bd:de:d0:c0:
         26:fb:14:26:5c:cd:60:dc:2a:33:6b:d7:1c:d7:76:79:ac:94:
         0e:d9:61:1b:16:fa:46:28:7b:65:32:fb:d6:ba:ec:01:c9:90:
         fb:7e:40:54:cf:c2:6f:77:a8:b0:75:e5:cd:bd:20:4d:2c:43:
         cd:f2:7f:45:b3:f2:58:5d:f9:4c:2c:c6:7d:49:52:e4:e6:19:
         2b:5d:97:38:05:bc:c1:ca:be:23:5f:76:20:cc:c9:27:ed:0e:
         1b:e3:1f:57:c7:36:73:a4:ef:47:54:a8:c5:bd:22:72:2a:29:
         04:73:82:6d:1e:34:e9:81:ce:50:ac:b8:73:d1:30:ab:ff:5e:
         8a:35:d0:39:ea:27:27:e5:ab:d3:b9:61:ac:85:48:a6:4c:05:
         ff:81:af:1f:22:c8:96:6b:0a:96:c4:38:23:97:cb:ff:29:90:
         3c:c0:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:30 2026 by rpki-client