Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          WoBsGCLI7jNjDWrSggRhWg2+HIwG0YWISbCCJ4AXE3A=
Subject key identifier:   D1:1E:42:F8:DB:6B:47:7A:B4:C4:2E:E2:9A:25:5B:80:43:F0:13:F8
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       019D2B17623E5F94E74F7D39BFB6986A2D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          112A
Signing time:             Thu 26 Mar 2026 17:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 17:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 17:00:45 +0000
Files and hashes:         1: Qt6UBSy6AyGq63QOVL4RXffcTic.roa (hash: DrxVhbMxa0VyjrLuDeUMjs53zIXiEcOYuKYWoHkcfHw=)
                          2: ap-XVBzw4zZPatC0RYn5qlV_mrQ.roa (hash: +C964lY3jvSC9YXuZCdEHQIGMY6YBYM0/bQTHHxKS1E=)
                          3: lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa (hash: w3x9Am6AgVtB0uwWUskomuBF/D7slx352RaRjUM5kz4=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: qqjNuWdU/JD9/X3dIi9Wfgv/6m3Iezrkpm3XY/xC4yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:62:3e:5f:94:e7:4f:7d:39:bf:b6:98:6a:2d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Mar 26 17:00:45 2026 GMT
            Not After : Mar 27 17:00:45 2026 GMT
        Subject: CN=d11e42f8db6b477ab4c42ee29a255b8043f013f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c7:11:df:f6:87:2f:19:ad:16:7b:f5:c1:10:
                    76:ff:fc:62:b6:1a:23:81:24:61:0b:b9:cd:b0:14:
                    c0:73:10:f1:e8:a4:a0:24:8c:c4:bc:02:fb:d7:78:
                    6e:bf:c7:f1:e4:30:fe:64:84:51:14:0c:7d:c3:24:
                    5c:f1:71:84:e5:52:f6:da:c0:d0:ed:4d:f9:c2:a4:
                    bb:4b:4c:15:e5:1b:10:f2:e6:21:1e:0c:bd:ae:28:
                    8c:3d:83:18:0e:b6:71:9d:99:ad:c1:25:dc:61:04:
                    ed:c8:70:40:ab:2d:eb:df:ad:01:59:10:34:1d:a2:
                    2f:3d:75:f1:51:fe:81:06:40:ab:eb:50:3d:73:2f:
                    48:4c:5d:86:a1:04:55:72:ca:b7:6c:38:0a:da:f9:
                    01:6f:89:ca:64:10:95:71:f6:01:9e:31:dc:61:49:
                    2f:10:29:f4:bd:ee:22:e4:2c:5b:7d:db:62:04:99:
                    3d:5d:92:76:64:d5:7d:5a:1b:e7:ee:8d:c9:da:25:
                    9c:1e:c3:86:42:31:61:73:9b:1c:3e:1d:01:08:ed:
                    ff:7e:f1:58:e3:40:af:9b:c2:8a:05:53:59:7f:a8:
                    9b:a8:d5:ff:6c:6f:f9:2e:a0:b3:35:2e:b8:9d:75:
                    ef:d4:c3:28:fa:04:69:0e:60:71:46:2e:c7:82:6b:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1E:42:F8:DB:6B:47:7A:B4:C4:2E:E2:9A:25:5B:80:43:F0:13:F8
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:3f:5c:41:35:57:54:d7:64:e2:ba:5b:e2:c6:d4:b1:58:
         ca:59:f8:38:ee:1a:a8:2f:52:a0:fe:f0:e3:b1:70:2d:2f:f1:
         af:86:e1:59:8c:7d:77:01:37:e6:a2:57:08:70:06:4a:29:3a:
         06:ad:f7:dd:10:8a:81:3c:82:8f:2b:df:5c:53:78:ff:3e:f5:
         a8:0e:90:5b:ce:95:c6:b1:e7:08:e9:cc:69:bf:ee:31:d3:67:
         92:41:80:91:18:91:fe:33:34:91:89:c4:64:c6:12:51:b2:62:
         d3:af:fb:78:10:bf:c0:92:e5:4b:56:31:75:75:65:33:0b:70:
         3d:91:ad:2b:a6:08:5d:02:9f:46:5b:a8:da:0f:93:ee:59:3b:
         99:9e:8b:55:53:38:9d:92:7b:87:a6:93:09:64:d5:b7:38:25:
         e2:e6:5e:4a:52:df:b3:3e:8d:a7:0f:48:ce:97:51:8b:04:33:
         41:e0:24:1e:d4:f3:ef:03:e6:98:33:85:94:dc:c1:6b:d8:0c:
         ad:d9:5a:87:cb:4e:39:ad:97:6e:0b:04:86:68:04:c5:3f:5b:
         62:2d:3d:b2:69:73:5f:71:65:42:dd:c7:d0:69:38:f9:03:ce:
         23:de:b3:df:82:57:94:26:72:ff:d3:7c:51:fb:d1:90:3c:85:
         e6:65:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:55 2026 by rpki-client