Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          ZZ/DZpAdJneK9HyEF+JqxjBPlHKr5GTgu3FK4BuA2qk=
Subject key identifier:   50:6F:B9:C5:6B:8D:2D:D9:D6:7A:CA:67:C9:49:98:E7:5C:18:34:91
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       019D2704B0F6D1695195B933F68721E0DD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          096A
Signing time:             Wed 25 Mar 2026 22:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:52 +0000
Files and hashes:         1: QGWyZMZEDWndXF66DUb-_cMUkV4.roa (hash: zrKxfGy5U0QaVBrkDGQlV7fiPOhFDa/FGROBClyRSz8=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: w6GkWSMlKbIC0Y+DkmMNS8G2JpytmmTPtNJyM/Sp5sY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:b0:f6:d1:69:51:95:b9:33:f6:87:21:e0:dd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Mar 25 22:01:52 2026 GMT
            Not After : Mar 26 22:01:52 2026 GMT
        Subject: CN=506fb9c56b8d2dd9d67aca67c94998e75c183491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:5e:55:2b:14:d0:46:d0:cc:43:c7:85:c2:
                    03:25:79:fc:ed:83:c2:2c:0e:aa:b6:47:19:ea:42:
                    31:f2:53:a2:70:28:f9:dd:76:d1:0c:4b:74:df:e7:
                    e7:c4:32:3e:6a:00:e1:99:77:5f:dd:3f:bc:34:1e:
                    36:85:60:29:a8:0c:d0:ae:0e:ab:bf:8e:2e:67:66:
                    1e:96:ff:25:58:9e:e3:29:b8:65:37:7f:cc:49:ef:
                    ed:3e:47:d9:55:d5:bd:76:f6:a6:af:5a:24:5b:0f:
                    84:2b:18:b7:f3:f5:e8:cd:07:f6:9e:85:ce:e7:fa:
                    22:50:8e:e8:2c:36:e4:ff:3e:64:4c:d3:93:30:5b:
                    9f:43:13:a5:42:ba:89:df:94:f0:c7:11:26:fc:5f:
                    f4:9f:ee:95:ff:78:81:f5:b5:1c:44:e6:83:f8:9d:
                    55:76:20:63:7d:3a:0b:aa:19:6c:25:b1:a2:40:ab:
                    d6:5e:06:e6:71:25:09:23:25:42:d4:4a:70:44:5d:
                    bb:42:05:7b:68:2a:4c:de:d3:9e:41:ff:05:39:07:
                    d9:a0:9f:82:5f:d8:0a:51:e7:64:9b:5c:8d:3d:78:
                    3a:8b:00:59:53:f0:d7:cc:ff:d5:12:57:7f:87:1c:
                    09:d8:a5:11:e2:dc:e7:5f:05:cd:10:ae:88:ad:74:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:B9:C5:6B:8D:2D:D9:D6:7A:CA:67:C9:49:98:E7:5C:18:34:91
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:3d:d9:1d:ed:ae:48:82:ba:92:c2:f3:50:4b:c0:71:80:
         fb:45:d3:18:29:bc:ce:64:57:3f:10:ae:fe:cf:e0:24:ab:24:
         ce:b9:5e:07:98:4d:c9:99:4e:ed:cd:50:14:35:9a:8d:f5:49:
         8a:48:ac:94:5d:41:30:17:72:b1:a5:f2:d4:4c:13:84:1d:18:
         0e:48:d3:60:bd:ed:a1:ae:11:36:15:06:2e:93:8d:5c:8c:21:
         cb:ef:62:e6:46:5b:af:3e:f2:91:8b:82:67:a1:b8:a4:ea:6f:
         21:ec:ac:4c:d9:8b:fa:25:75:32:57:6f:36:0c:07:2b:47:9a:
         0d:68:55:c7:97:45:25:64:e6:65:3f:17:fe:75:dd:f5:14:63:
         df:1d:31:79:c1:7f:39:4b:08:e0:3c:33:98:b0:7c:f0:a9:37:
         e8:1d:01:6c:93:b7:46:2c:47:66:c3:4d:2a:07:dc:32:39:0b:
         ab:7d:50:3f:5d:de:4b:7a:d5:48:13:78:fc:2a:8a:2f:26:8a:
         7e:66:38:0c:45:ce:ea:4b:22:a0:c8:b4:dd:52:7c:fb:49:d9:
         1c:74:96:f4:96:bf:20:10:c0:6c:78:52:a7:f5:da:8b:07:72:
         2f:d9:ca:cc:20:e8:e4:8e:81:f2:34:5d:23:b0:eb:f0:1c:b0:
         e9:d6:59:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:03 2026 by rpki-client