Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          oZAz21edlRheO8lqq2KWKEXTjvcfrmBDCCVuWUDWC80=
Subject key identifier:   40:4C:41:EF:EC:4C:1D:93:F4:B4:E7:1A:B8:90:77:85:B3:6C:AE:5B
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       019D27720DCF3CD02314AC9CE7424ED0D6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          13D9
Signing time:             Thu 26 Mar 2026 00:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:19 +0000
Files and hashes:         1: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: o4b0hpIEJDBvRgbFlhYEP/AdvUTzyEZuW9U/S50S1ZQ=)
                          2: wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa (hash: NbvG7X6vkEtFD9/ZukAk8NJl9uOur/Cl3YOKKjQ2YLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:0d:cf:3c:d0:23:14:ac:9c:e7:42:4e:d0:d6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Mar 26 00:01:19 2026 GMT
            Not After : Mar 27 00:01:19 2026 GMT
        Subject: CN=404c41efec4c1d93f4b4e71ab8907785b36cae5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:3d:1c:6a:a1:99:41:b5:59:b3:58:8c:b7:
                    9f:6a:be:ea:04:89:17:a2:58:60:9b:14:f5:22:12:
                    d7:d1:9f:8c:53:bf:5b:c2:23:6b:1a:97:5e:cc:77:
                    e7:3a:45:93:99:bf:c1:ef:94:c9:a0:28:31:c2:f4:
                    a7:ab:84:18:13:38:b0:79:ff:02:d4:01:3a:1f:79:
                    1e:49:5a:3f:31:ea:3e:1e:79:50:29:a3:2b:48:2d:
                    17:c8:77:df:d7:f7:7b:2b:6d:59:a7:94:ec:95:10:
                    63:29:a4:9c:12:79:0e:8c:11:b2:9f:25:d5:38:a6:
                    13:cc:95:c2:92:43:b3:42:e6:2b:c5:d6:96:e0:ef:
                    25:47:2f:ff:e5:8c:cb:3c:85:1d:7c:b6:bb:f3:cc:
                    34:53:7e:40:96:db:42:31:8b:27:57:2f:07:67:c5:
                    85:10:1f:41:2f:84:b7:3f:a9:ef:c6:28:d2:65:50:
                    af:f0:b5:3b:e8:ea:38:18:ce:83:d6:de:82:a7:5e:
                    67:9e:70:77:5c:64:b2:e4:87:a6:b7:dc:b9:1c:31:
                    70:a1:c3:d5:00:c7:39:39:b7:6e:2b:bd:ea:67:ca:
                    16:29:c1:84:43:71:51:12:87:6a:57:7f:30:b1:2c:
                    fe:98:9d:1c:cb:18:48:f5:92:94:4f:be:e1:4e:1d:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4C:41:EF:EC:4C:1D:93:F4:B4:E7:1A:B8:90:77:85:B3:6C:AE:5B
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:09:10:d3:94:07:d6:32:31:2f:1b:23:8d:bd:a6:d7:34:f5:
         04:41:c4:2b:b4:69:e6:39:cc:b1:57:aa:9f:44:be:d7:f7:2b:
         57:b8:29:f0:24:e6:2e:41:4e:fc:20:5e:e0:70:9d:3d:4b:2c:
         83:49:eb:53:c2:9b:b4:5e:a8:91:43:57:7d:d7:e0:ea:df:d5:
         b3:1b:00:06:8c:23:46:97:c8:aa:e1:ab:0d:d2:2d:ab:f4:dd:
         26:a9:65:11:26:b4:9c:33:24:67:2f:9f:3f:80:ee:f1:8e:35:
         da:ba:74:17:94:60:58:aa:9c:bd:19:83:05:17:00:30:f3:ed:
         73:ec:a2:23:e7:1a:ac:8a:4d:1a:70:e5:7f:a5:a6:a8:bd:71:
         8c:7e:ac:57:bb:ff:ac:6d:45:a4:af:a9:18:45:0b:d4:16:21:
         5e:5e:e2:18:f0:3c:23:36:65:b5:1b:4f:b0:d9:1f:96:ea:0f:
         37:ec:c1:02:e3:97:0f:6a:ff:34:09:69:9a:ed:15:79:5b:d4:
         75:e6:1f:3b:3d:e2:56:76:2c:aa:58:a3:f4:25:fd:53:9f:c9:
         3d:36:20:8b:10:92:b0:41:4c:35:7c:31:62:44:55:f3:79:32:
         43:7c:74:51:5f:4f:58:b2:0b:6f:d4:12:4c:83:47:19:b0:19:
         5e:84:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:14 2026 by rpki-client