Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          NejbA8WyhhJ06BfKGn7lp66a1KkE01Rn83/E2yXWO6Q=
Subject key identifier:   F8:99:2F:FB:7A:33:B8:6F:B3:70:F6:2F:93:FA:4F:C5:ED:09:FD:3E
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       019D27DFE1205D8693D785C819EE689991AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          16FD
Signing time:             Thu 26 Mar 2026 02:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:16 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: C11Q7WXUFBG5Yqir4Y2xeL7ArfnVeu/M3wznA7vbW0c=)
                          2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:e1:20:5d:86:93:d7:85:c8:19:ee:68:99:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Mar 26 02:01:16 2026 GMT
            Not After : Mar 27 02:01:16 2026 GMT
        Subject: CN=f8992ffb7a33b86fb370f62f93fa4fc5ed09fd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:69:b8:34:75:1d:20:55:b8:52:bc:fc:88:
                    7b:34:0c:76:86:7a:9f:e3:b9:19:2d:15:08:06:2e:
                    a8:11:4b:68:50:ba:de:b6:1c:56:fb:8c:42:6c:6e:
                    8d:f5:6d:ec:e6:39:3a:59:21:4c:9e:5c:ef:f9:00:
                    a3:ef:60:9e:52:54:53:c9:5a:10:1e:cf:16:25:dd:
                    d1:f2:5d:b3:db:5a:1d:71:f1:7b:de:45:ea:65:1f:
                    29:d5:2a:63:e8:86:e0:3c:0d:6c:e8:78:47:59:d1:
                    59:cd:a0:1f:ea:40:04:10:7a:84:05:eb:fd:82:af:
                    d3:a3:9e:3f:23:cb:cb:b3:d9:70:c8:f5:57:01:2c:
                    e5:89:89:6f:91:15:e9:8c:6f:6f:53:92:2d:48:6b:
                    8e:e7:8c:b6:0d:c1:04:1b:6f:b5:14:77:7d:53:a5:
                    92:a5:7c:70:6e:bc:2c:26:16:a5:65:ec:d4:dc:27:
                    21:52:31:0d:26:02:ee:4e:51:57:5d:8f:b1:8b:01:
                    61:1f:1d:c3:fa:34:c7:02:1f:6c:9c:f0:69:ae:ce:
                    aa:2d:ee:df:86:87:0c:10:2c:e1:fb:68:17:4e:71:
                    43:ce:1f:bc:07:3b:72:63:51:86:7b:11:ee:e2:c4:
                    a2:37:33:3b:48:63:ba:3d:44:94:a4:f6:29:02:19:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:2F:FB:7A:33:B8:6F:B3:70:F6:2F:93:FA:4F:C5:ED:09:FD:3E
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:57:e4:37:3d:0b:96:e5:4e:60:12:5f:34:3e:fa:f3:6d:
         44:3d:ac:8c:69:92:8a:23:f2:21:93:18:2a:c7:1e:1c:08:03:
         c5:24:b6:9f:db:1a:00:37:9c:9d:1f:0a:44:00:df:75:69:42:
         fe:c5:8c:48:de:c2:ed:b5:58:dc:84:72:99:60:0c:bf:91:5c:
         48:f3:2d:a4:d7:9d:e2:0b:69:34:7d:3b:97:d8:d8:5b:9a:03:
         04:e3:f7:8b:b7:e5:a7:46:23:8e:e9:bd:87:68:d3:9e:7f:a4:
         fe:5e:cc:b9:34:ba:b4:cb:b3:ec:78:5d:8d:08:18:d9:51:20:
         73:27:b7:c5:39:a7:4a:13:94:17:e3:3d:4b:df:69:bf:4f:2b:
         66:e1:47:6f:cf:f3:13:29:71:39:ab:dc:03:26:92:51:1a:03:
         12:11:0e:12:6b:15:56:e6:b1:46:75:e6:67:80:cf:c5:9b:ac:
         76:69:31:56:0d:cb:6b:ce:93:25:47:e4:78:17:af:ef:a2:22:
         c8:d4:fa:87:a7:c8:fd:06:53:ae:3a:cb:8f:43:ba:03:94:23:
         62:8d:45:15:e9:19:e9:23:f6:28:a8:1c:29:2f:08:87:ea:51:
         dd:3b:ae:b8:b9:f8:de:f4:c6:8c:b4:87:ee:fe:d7:ab:55:f1:
         5d:a8:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:44 2026 by rpki-client