Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          IX8G5oEUZH3h+fb5Y8HbBxmO0Cqr23K3N559mewoMLE=
Subject key identifier:   04:89:3E:BB:03:A4:96:EE:82:D9:2D:44:13:5B:1E:13:C7:19:BA:9F
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       019D27722610B09487BA9178AC7A93219AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          171F
Signing time:             Thu 26 Mar 2026 00:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:25 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: /+mHz0h7qkPsO+O8pGjlQ4lBVrE6ykrPc9xNOFcExwc=)
                          2: zjYqOLuQFupG2wqdmO2CYkpXQro.roa (hash: 7hKJfqNykVFaDvcY9bN4ItGluZTyIyU5j59eF7yp70U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:26:10:b0:94:87:ba:91:78:ac:7a:93:21:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Mar 26 00:01:25 2026 GMT
            Not After : Mar 27 00:01:25 2026 GMT
        Subject: CN=04893ebb03a496ee82d92d44135b1e13c719ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:ca:1c:b6:d5:53:66:56:d3:9b:77:3f:68:
                    aa:87:1b:a9:71:0c:b8:0a:aa:0a:5c:63:4d:bf:9f:
                    ef:73:5f:83:d1:a2:52:a0:e1:bc:ce:43:f6:3c:c3:
                    d7:48:42:dc:1b:ec:fa:bd:2c:64:f2:94:17:81:54:
                    41:0a:94:9c:4c:6e:4c:4b:58:b2:27:ed:35:3d:28:
                    e9:87:f3:25:bb:d4:5f:6a:3d:92:e6:f7:53:94:8b:
                    bd:6c:93:f1:61:f8:f7:f7:b1:d7:da:9c:3d:6a:84:
                    3d:2a:20:c5:39:b8:c6:8f:15:b3:d0:0e:43:0f:a6:
                    82:a8:fe:e1:62:11:29:73:57:af:b7:e6:0c:62:82:
                    04:e1:5f:bc:09:4b:9b:21:53:82:18:f5:58:7e:5c:
                    f6:06:06:3f:bf:de:9f:60:61:49:a2:eb:41:17:9b:
                    cd:5e:40:40:e1:95:fe:54:83:d4:3e:2a:a5:50:5e:
                    10:20:fb:34:c5:e9:ad:93:48:2e:76:3d:16:bb:2a:
                    84:29:b7:88:2b:9e:55:1a:df:ed:98:e8:8d:c6:6f:
                    91:8a:78:e4:aa:a5:f4:08:9b:35:2c:e5:ed:a7:41:
                    6e:a1:77:f3:76:b6:ba:1f:01:bf:41:9c:ba:18:10:
                    75:0b:70:8e:12:9e:e4:db:fe:b4:fc:da:28:d3:a0:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:3E:BB:03:A4:96:EE:82:D9:2D:44:13:5B:1E:13:C7:19:BA:9F
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:40:12:f1:a0:9e:ba:7d:6f:52:47:bd:39:7c:38:7a:37:
         dc:d9:cb:77:58:4c:87:73:f7:43:3d:3c:ca:8e:a3:5e:a7:04:
         7f:4d:2c:30:c3:c2:d7:60:bf:27:9c:13:eb:9e:05:1f:fc:d0:
         b1:55:6e:be:f2:e6:c5:51:3a:9d:fd:96:85:85:86:a6:ef:12:
         ca:31:0f:a9:2c:b9:64:2a:8b:67:00:2d:92:fc:7d:70:11:b1:
         4b:f0:1c:3c:45:8d:1b:a4:41:87:81:2a:e1:85:38:3c:67:64:
         da:b3:06:ff:82:ac:ce:db:40:0d:aa:cc:bb:96:eb:65:d6:1d:
         b6:f5:b1:2e:35:09:87:aa:4a:67:b6:62:97:a5:07:3f:51:6d:
         11:d0:40:11:2f:1c:6a:ee:66:3c:ca:7c:8c:91:77:f7:53:a8:
         f1:ce:14:39:09:83:9a:85:da:a2:66:0c:df:7e:3d:76:71:62:
         40:9e:4f:c1:16:53:67:8f:2a:c4:54:7e:1e:dd:0a:c5:dd:e5:
         94:43:7a:c9:fc:b8:28:de:1e:93:aa:ea:e7:c1:4b:5f:22:30:
         dc:18:ce:56:3b:90:d4:a2:ef:d4:d6:8c:e6:42:ed:48:38:8b:
         30:5d:24:69:f7:c9:c6:a4:98:e8:b4:40:4a:07:56:59:1b:84:
         11:ab:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:27 2026 by rpki-client