Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          fbzbWdfHsivDDiN8tPTHNZSOPbfvYYHaPr2gHBw/5bQ=
Subject key identifier:   72:F6:67:F6:43:E1:1C:B7:B6:F2:E1:32:B4:DF:E8:51:90:C9:12:46
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019D27A88B739B656F627529E82FE1D587E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          09CF
Signing time:             Thu 26 Mar 2026 01:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:50 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: akKCYNaXzfQeYNailCJGGuzsLjqDWT7f54uN9pPMHpo=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:8b:73:9b:65:6f:62:75:29:e8:2f:e1:d5:87:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Mar 26 01:00:50 2026 GMT
            Not After : Mar 27 01:00:50 2026 GMT
        Subject: CN=72f667f643e11cb7b6f2e132b4dfe85190c91246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:9b:17:6c:67:86:95:7b:b8:d5:f7:d5:ef:
                    01:c4:5a:68:4b:39:37:36:91:8b:e4:5e:3c:9b:e7:
                    0d:44:5d:da:3e:7e:f9:21:40:df:df:79:e9:53:02:
                    62:cc:f3:2b:a7:d9:a0:d9:15:2f:97:26:22:eb:72:
                    76:fa:35:b6:55:2b:f9:69:e4:5c:16:7f:7b:e5:46:
                    c9:a7:06:aa:1e:c7:8b:ee:8d:78:d7:fc:ba:89:c0:
                    c8:a3:0c:a0:a9:ec:1e:f8:9b:bf:30:f0:49:d4:02:
                    78:cc:60:1e:0d:b1:85:6a:b9:15:cf:fe:60:16:98:
                    bb:ec:cf:06:37:e3:87:50:25:20:c1:fd:e5:ad:dd:
                    d9:3e:98:77:4d:ef:0f:5e:c6:7c:9d:89:1b:ec:c5:
                    c9:7b:ae:96:fd:b8:97:a1:6d:7d:88:5c:d5:07:29:
                    27:d9:92:7f:ff:7d:8f:1a:fb:5a:b3:4e:38:69:2b:
                    51:33:0b:26:54:8f:9c:ed:ee:45:f1:08:8e:32:07:
                    a9:93:68:2f:54:d7:c8:a2:80:d9:fa:af:21:20:bc:
                    53:bf:fa:15:2b:64:28:1d:bf:65:29:27:d5:02:ab:
                    b7:a0:41:8e:f7:09:18:d3:da:34:be:3e:f4:57:06:
                    c7:23:1e:85:2d:bf:a9:ea:c4:34:de:a2:b0:4f:17:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:67:F6:43:E1:1C:B7:B6:F2:E1:32:B4:DF:E8:51:90:C9:12:46
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:d8:c1:ac:c6:b0:cf:26:e0:bc:6f:89:71:3b:01:d5:37:
         f0:dc:12:af:08:26:01:95:42:6a:3d:92:26:b4:f1:02:44:89:
         6e:38:ad:a3:14:cc:fa:91:42:0a:55:2b:fd:ff:09:a3:58:15:
         c7:25:24:c2:74:54:7d:9b:30:cd:ba:09:17:0b:b5:dc:39:23:
         57:1e:2b:65:c1:f6:5a:16:eb:4e:da:f1:a4:ba:41:a5:3c:5a:
         e9:4c:0f:9a:8a:dd:c3:f6:28:9d:8d:c4:dd:2b:23:dd:03:fe:
         a0:87:5b:bb:15:12:56:00:69:9d:65:24:18:6b:38:0f:f9:05:
         49:49:63:47:3b:4f:68:38:66:2c:f9:0c:c7:c5:79:0c:80:68:
         e8:a5:ee:70:f9:5c:6a:53:bc:bd:90:1e:28:12:33:df:22:70:
         9e:68:68:a7:85:fc:40:78:fe:63:28:4f:d5:3d:c5:29:eb:a7:
         3c:ac:d7:6e:3a:af:3c:1a:16:57:9e:14:55:53:12:59:5f:1a:
         02:d2:e2:06:21:e0:6d:e8:d0:b1:89:58:ed:28:a9:06:5d:a2:
         f4:9d:4b:05:46:3c:60:a1:f6:1d:8f:b0:d9:91:d4:dd:52:3b:
         a7:1a:f9:fb:a2:03:15:2b:b3:44:3c:4c:ff:85:f0:f1:57:0a:
         c2:16:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:52 2026 by rpki-client