Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File:                     _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier:          P9MgwKuABbsO5YZyMbscobd0/oVFOWgC/rgNJeZkKJE=
Subject key identifier:   52:55:C2:94:4D:9D:82:8C:0C:EB:89:51:BF:65:74:E7:32:B8:09:FF
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer:       /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial:       019D270445D6E549AA70B547B21E4DA4FBD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number:          033A
Signing time:             Wed 25 Mar 2026 22:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:24 +0000
Files and hashes:         1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: oL5bbzJ93BOabt4IdDYEJMkTu+cVtbWuvZi5jLMmwps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:45:d6:e5:49:aa:70:b5:47:b2:1e:4d:a4:fb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
        Validity
            Not Before: Mar 25 22:01:24 2026 GMT
            Not After : Mar 26 22:01:24 2026 GMT
        Subject: CN=5255c2944d9d828c0ceb8951bf6574e732b809ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:14:ac:b4:a3:14:ac:57:e5:18:60:b2:1a:
                    db:bc:87:d5:a8:e6:9d:af:ac:46:0b:5e:98:7d:b3:
                    5f:ca:50:cc:39:db:3b:27:67:24:ec:39:80:23:e1:
                    e0:19:18:a2:ff:cf:fd:10:63:39:d3:34:dd:5b:de:
                    3a:a8:6b:8e:16:e0:af:de:d0:7d:4e:1c:94:28:ba:
                    ae:3d:28:41:95:4f:8f:89:2b:d8:e9:2c:7d:f4:32:
                    d6:a4:13:ee:9b:e5:bd:80:6b:7c:ca:31:e5:75:e7:
                    17:2b:6b:c0:23:fb:a0:45:2f:31:1a:e5:dc:59:27:
                    c4:4e:ed:ee:5a:0f:64:f8:f6:3f:f1:ba:79:ed:81:
                    91:9c:5e:60:f6:28:fe:e7:83:7e:56:44:44:c7:9a:
                    35:cc:1e:64:76:c7:91:8a:9b:42:49:fe:fe:fc:c9:
                    66:25:2a:79:91:32:a2:4a:f9:e5:07:f9:7b:8d:85:
                    02:9d:0f:ef:0d:80:7a:54:b3:87:63:ee:91:5d:69:
                    3e:b1:43:eb:cb:e5:c1:1d:9e:b0:0b:e1:73:62:93:
                    a7:a4:a0:78:0c:98:cc:8d:0e:8f:da:d0:fb:7b:5d:
                    df:9f:ab:9d:82:19:9c:74:b2:67:c0:52:66:e4:04:
                    66:a3:65:b5:68:7a:2c:68:54:01:eb:1a:c4:2a:d7:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:C2:94:4D:9D:82:8C:0C:EB:89:51:BF:65:74:E7:32:B8:09:FF
            X509v3 Authority Key Identifier:
                keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:2f:9c:b4:62:3a:1a:1c:0f:3a:c1:ae:ef:e6:39:9d:5e:
         e8:be:b9:d0:99:d4:3a:aa:69:be:98:08:54:16:8c:b3:1c:25:
         d3:c0:6e:58:33:43:a9:e1:0b:84:b5:b6:64:d4:25:8d:fd:12:
         19:3c:d4:47:cc:0d:65:05:98:f9:b8:fa:91:15:dd:03:61:ef:
         0e:69:ca:e4:24:dc:1e:10:b5:dd:9f:ae:d3:75:15:79:ab:fb:
         1c:d5:04:ce:7b:9b:9d:33:62:d2:94:05:75:ad:d0:84:e6:b5:
         c4:69:7f:d5:1c:04:f0:1a:8b:6e:fa:63:1d:8f:58:0a:25:45:
         aa:16:ca:cd:b6:cb:77:4d:bc:ae:6e:bc:f2:28:ea:20:33:a8:
         0b:54:e6:eb:a9:08:94:1f:58:2b:6e:f0:5d:23:fa:ab:05:7e:
         91:74:45:c7:a7:fc:79:4b:59:ae:b4:4a:36:85:ea:ea:fa:e6:
         07:df:a5:cb:df:d6:04:33:2e:b6:e8:28:b1:0a:4f:d8:2a:bf:
         41:50:03:41:46:a1:a8:60:32:41:35:bf:97:29:86:ab:76:87:
         e7:98:09:a1:5a:77:2f:86:91:5c:e9:df:29:49:5f:40:38:75:
         79:37:f9:4b:dd:33:d4:0b:05:33:9d:66:dc:46:d9:d5:c4:97:
         62:37:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:48 2026 by rpki-client