Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File:                     9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier:          Rh5/YPrYhbUXyunF3KmDRl5pIKynqWscM0UOt++4KnM=
Subject key identifier:   CD:02:57:D0:3C:0E:FE:5D:4C:56:38:06:5C:88:20:EF:1A:78:2D:57
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer:       /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial:       019D2583E1407772FA61CE094DC4701D7EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number:          0B50
Signing time:             Wed 25 Mar 2026 15:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:32 +0000
Files and hashes:         1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: Cw/JVrMPBCGvzgAxEOT6RHnH0bUaVHd7ldCHIzVk870=)
                          2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:e1:40:77:72:fa:61:ce:09:4d:c4:70:1d:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
        Validity
            Not Before: Mar 25 15:01:32 2026 GMT
            Not After : Mar 26 15:01:32 2026 GMT
        Subject: CN=cd0257d03c0efe5d4c5638065c8820ef1a782d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:4a:8a:25:4c:04:fd:02:11:ac:27:1a:7b:
                    d1:6a:d0:7d:e0:02:bd:8e:ec:68:52:66:72:02:0a:
                    3b:56:dd:2b:19:07:fc:9b:cb:04:28:7d:cb:4b:46:
                    b5:56:ef:96:08:76:f5:12:e7:63:8f:56:2e:8e:84:
                    10:5e:3c:44:73:ec:b8:fd:54:0a:b7:ed:12:27:6e:
                    6e:42:34:0e:27:5c:f0:4b:c7:02:a7:ae:02:ce:4f:
                    26:1c:a1:62:33:4e:49:9d:b2:ac:eb:fa:a4:1e:bf:
                    53:c1:a0:88:49:50:10:40:8a:c3:ab:31:b4:9b:5e:
                    4e:f7:f7:4d:32:5c:d9:93:fe:5e:b2:c0:40:62:72:
                    30:08:66:6c:d9:dc:a9:ca:cc:8c:aa:88:1f:01:84:
                    2c:ea:4b:14:c9:5e:3d:86:0f:e1:cc:d6:2c:6f:09:
                    c0:fe:7e:23:be:20:94:30:4e:4f:78:b4:9c:f9:77:
                    da:d5:d1:db:73:d8:45:4a:d2:3a:f4:72:9e:1d:c8:
                    94:1e:c2:b9:da:4a:1d:c1:2d:45:17:a5:bb:7f:46:
                    85:c5:64:99:ec:fa:08:b6:63:7c:59:25:5b:96:d4:
                    33:ec:86:19:19:9a:46:9b:1d:ea:ac:49:a1:c9:cb:
                    e7:6f:50:a3:4f:33:c0:18:58:b4:db:19:54:fd:42:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:57:D0:3C:0E:FE:5D:4C:56:38:06:5C:88:20:EF:1A:78:2D:57
            X509v3 Authority Key Identifier:
                keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:18:2e:17:a4:93:5a:11:79:ad:e3:45:0b:0d:ce:82:aa:
         20:62:17:88:43:c4:19:9f:84:5d:e5:df:77:4d:60:af:70:ad:
         92:4d:4e:3a:80:42:43:25:6c:18:ee:cc:ce:6f:a8:9d:ff:c6:
         bc:ef:f2:68:30:13:52:f1:96:3e:d9:e5:9c:44:f9:9c:86:fd:
         61:80:b3:61:b6:59:93:74:43:22:87:ef:8b:4d:f7:1b:25:e0:
         a2:55:7d:13:03:55:5b:58:b3:e7:6f:37:c9:d1:ec:f7:e8:fa:
         cc:1b:ce:46:65:ce:5a:56:81:3b:ba:c6:64:27:69:4b:0e:13:
         22:2e:38:3b:8c:14:ee:c5:02:a6:8f:db:e8:b2:e7:2c:af:55:
         54:d2:6b:2a:05:fa:bb:0a:e3:2a:2b:85:fb:9f:67:e7:b4:b2:
         34:97:1c:33:3a:4e:fa:c6:2e:7f:56:59:43:18:01:12:0d:6b:
         ce:0d:f1:05:7e:55:a8:ad:7b:fd:d3:ce:c0:a7:28:7f:b9:58:
         3b:94:c6:e1:bc:f9:5d:7e:c4:98:10:c2:47:f4:76:4b:ef:d1:
         08:c5:ec:63:bc:1c:d4:38:fe:42:eb:db:84:7c:79:e5:04:32:
         20:3d:ca:41:ab:64:8c:c2:f1:fb:18:79:93:cb:af:df:85:fd:
         d0:af:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:53 2026 by rpki-client