Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File:                     75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier:          qw7qk9R8oQLl4QR7Ng6iNmbrM+y/xN9mHQ/rqTN+tn8=
Subject key identifier:   CC:5E:60:CB:FA:C0:D6:B2:12:91:2A:03:B2:C0:76:81:4F:D6:36:F9
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer:       /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial:       019D27725DD45427C7500AC42124FF41E119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number:          0A48
Signing time:             Thu 26 Mar 2026 00:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:39 +0000
Files and hashes:         1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: EcpB4kDx/Zb4+oBmNhq3aA5/JqDi/MlhoYM6HyR30yQ=)
                          2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
                          3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5d:d4:54:27:c7:50:0a:c4:21:24:ff:41:e1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
        Validity
            Not Before: Mar 26 00:01:39 2026 GMT
            Not After : Mar 27 00:01:39 2026 GMT
        Subject: CN=cc5e60cbfac0d6b212912a03b2c076814fd636f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:46:7d:16:39:62:18:91:a5:a0:ac:cf:f0:
                    68:ef:cf:4b:91:b8:ad:ee:a1:aa:af:e0:89:12:86:
                    b3:e7:0d:63:fb:6c:e3:5a:6a:07:e6:27:39:46:af:
                    05:50:7a:55:3c:52:eb:2a:a5:38:7c:28:c4:18:3e:
                    8f:05:41:41:75:ee:e2:53:f0:81:16:d0:ad:10:4e:
                    41:0d:b8:ab:b4:23:da:a1:d5:16:1e:c0:d3:fa:cb:
                    bc:05:87:92:15:11:26:2b:45:8a:c7:ee:dd:25:68:
                    1c:d7:34:f6:ab:85:c8:26:bb:1c:3a:01:c6:e4:7c:
                    55:78:47:8b:ab:2b:ae:db:54:48:fa:e3:7b:f2:ff:
                    fd:5d:ee:f7:53:99:52:2d:28:4a:62:bc:39:ab:7d:
                    5d:ee:ab:07:40:42:e4:62:5b:7d:84:6f:56:c2:a3:
                    b8:3c:28:e4:78:83:2f:e1:68:96:0b:60:4b:4c:86:
                    4f:21:c4:78:55:bc:bf:51:d5:68:75:3f:77:fd:20:
                    ff:ff:4e:70:67:4c:9a:75:64:65:53:e2:a9:3a:70:
                    2d:e3:98:ba:a8:79:c6:80:db:7c:44:6a:de:f0:3a:
                    a2:6d:d6:85:ce:cb:24:7c:6e:5e:e9:ba:96:6c:d4:
                    91:8e:52:d7:b0:4b:e7:c7:7a:0c:ac:5e:61:f7:43:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:60:CB:FA:C0:D6:B2:12:91:2A:03:B2:C0:76:81:4F:D6:36:F9
            X509v3 Authority Key Identifier:
                keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:b6:07:06:50:ad:96:df:91:85:ff:c0:82:3b:00:e6:37:
         20:d4:b2:13:f4:7c:14:6f:82:31:a5:35:99:a0:ca:39:9c:95:
         34:9c:64:15:f1:dd:8f:41:93:5f:9f:65:9b:be:29:41:96:91:
         3b:56:e8:28:c2:70:e5:24:da:dc:90:cd:75:d4:72:0c:0d:24:
         56:09:d3:3a:52:98:da:ec:8c:62:15:45:39:3e:ed:9f:ec:77:
         a2:d7:38:ad:b7:e7:5e:f4:bd:8c:48:29:ec:4e:f6:59:de:b5:
         01:7d:8f:5d:1b:74:a2:7a:40:f1:a9:de:6a:eb:9b:15:a7:32:
         17:79:f1:d9:c3:5d:1a:ae:13:3e:82:ab:15:17:11:01:0b:f4:
         54:ad:b4:02:ed:af:00:82:1c:ac:46:a3:e4:17:e1:f0:70:9f:
         87:5e:4b:fe:26:eb:02:aa:e6:ec:52:8c:c9:ff:fc:7c:4f:4e:
         1b:80:d4:d6:2b:01:fe:4a:52:e4:92:55:24:17:88:6a:73:04:
         b5:a9:39:93:28:0c:38:d2:5d:39:8e:94:6c:4c:05:13:cb:79:
         90:5e:67:ff:71:3e:55:8f:93:78:ad:2b:a9:db:b4:71:6c:45:
         75:ba:b7:17:ca:d8:3b:ab:3b:5e:f4:1a:52:d6:14:19:1c:e5:
         38:51:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:18 2026 by rpki-client