Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          Ji/+dNdNhdgt5s7iNeJE5rFUrdqC5gik7nbLKcNIF8A=
Subject key identifier:   36:57:E2:43:D4:E1:DF:51:78:FF:94:4B:67:1E:43:73:F6:6B:56:ED
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       019D284DC7AE1811A2A3C89D9B3E1A9D1548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          116F
Signing time:             Thu 26 Mar 2026 04:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:19 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: LahwlXEUvW3Wr7TepzzbfuoBcvCROF1nrD7PQT7b1/E=)
                          2: mYq9qnRkmchFRK-Wzd0qP6BpgSk.roa (hash: xi+lW9NPHKW3h3DS6hMmwPhyI8zaqr3w5TDNrGj4I8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c7:ae:18:11:a2:a3:c8:9d:9b:3e:1a:9d:15:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: Mar 26 04:01:19 2026 GMT
            Not After : Mar 27 04:01:19 2026 GMT
        Subject: CN=3657e243d4e1df5178ff944b671e4373f66b56ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:6e:29:c5:f3:bc:02:36:82:f9:0b:a3:e0:
                    85:72:4a:69:ca:e3:25:86:c1:e0:bc:a0:9d:32:10:
                    ab:5b:01:5e:db:0f:5a:57:7c:3f:5d:1a:d1:e0:5c:
                    e8:7e:1e:a8:35:85:bd:4b:1d:c6:4e:56:45:5c:2c:
                    5c:4f:7b:b8:ec:5b:50:cb:ba:79:21:66:a4:82:11:
                    5c:21:6e:a1:88:3b:99:02:77:98:af:f9:be:45:e5:
                    ac:a4:18:95:22:aa:60:d5:e5:42:6a:eb:ff:b6:56:
                    dc:4f:e9:1e:11:da:4f:93:a8:74:6e:1d:48:b0:b8:
                    22:24:e2:58:e3:c2:55:c5:e7:a4:0a:d7:48:a2:55:
                    ee:1a:d9:2c:f0:6a:8e:2a:25:a7:41:b0:a7:8d:03:
                    c6:43:c6:e6:66:a4:92:57:bf:e3:8d:95:45:c6:b3:
                    1f:83:56:3a:44:7e:97:46:78:76:41:ad:1c:ac:c2:
                    be:a2:ef:f3:e3:a5:ec:b2:4a:ec:87:21:39:2b:dc:
                    61:f1:b1:b2:6f:a6:85:19:d0:f7:48:43:73:f3:b3:
                    96:a0:ee:3d:3f:73:99:96:ef:80:7c:f4:48:e2:3e:
                    a9:48:51:2c:28:43:b2:e3:d6:ff:94:78:0d:40:66:
                    a8:4a:88:de:1b:55:32:09:08:9b:e2:7a:c5:73:eb:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:57:E2:43:D4:E1:DF:51:78:FF:94:4B:67:1E:43:73:F6:6B:56:ED
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:6c:28:1a:28:61:5f:4c:bb:8f:55:70:65:2c:32:7e:a4:
         9d:41:bb:96:1e:b7:30:34:48:52:8e:44:70:62:ff:68:77:70:
         95:34:b1:62:0c:eb:6b:63:86:8d:83:ce:a0:56:b5:64:84:3c:
         d0:43:7e:90:6b:fe:e9:1e:df:e7:15:e9:30:5a:c4:23:35:aa:
         27:53:ae:ab:4a:6a:5a:f2:4b:c3:d7:c7:13:12:4a:3e:a7:d7:
         7f:0c:45:a4:41:55:1b:c1:99:53:22:93:2b:e5:c6:37:9b:26:
         da:0e:22:d8:e6:7f:18:23:ee:13:57:a5:7f:c0:99:c9:d3:3f:
         95:72:f7:87:a4:10:ac:2e:9e:c7:e6:ee:70:1f:cc:a6:68:0b:
         28:00:42:2a:fc:a0:af:d3:3a:dd:b4:b8:ac:e5:d9:4e:3c:4b:
         7d:e9:e6:53:7f:64:f4:22:3f:c9:56:bd:d8:d0:69:6a:f5:5e:
         f7:f0:d3:28:97:40:03:75:ea:c7:2d:5b:73:5b:70:6a:e7:ef:
         bc:dd:99:f4:e4:28:14:ed:9b:50:78:48:42:0e:d4:5c:27:7f:
         9b:53:6c:b3:5a:69:41:21:39:58:ef:d1:0d:67:66:d3:33:51:
         0b:7b:98:60:48:1f:06:ae:8f:9d:08:dc:7a:14:96:3e:56:01:
         f2:2a:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:07 2026 by rpki-client