Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          zUSNKc+H2JF2mcgZtbaIS+A/60HwCQiJyxWZxpA5A3o=
Subject key identifier:   9D:39:39:C5:1D:6F:AD:2B:7E:FB:0D:BA:99:65:35:6C:9E:97:CD:B1
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019D28BBFBB26CE14862660CEDAF10495AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 06:01:41 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:41 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:41 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: Wh8aWHccr+otfSpAEeuzpXEiWu0KWmcr5o/JOr/YgpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:fb:b2:6c:e1:48:62:66:0c:ed:af:10:49:5a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Mar 26 06:01:41 2026 GMT
            Not After : Mar 27 06:01:41 2026 GMT
        Subject: CN=9d3939c51d6fad2b7efb0dba9965356c9e97cdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:b0:5c:28:b0:2a:87:e6:26:ca:61:7a:c6:
                    9f:7e:8c:63:e8:77:66:6d:61:c9:ea:9b:29:77:61:
                    aa:eb:24:e4:74:64:44:7e:6e:6d:1b:d7:13:bb:3c:
                    68:96:00:b6:74:8f:52:09:65:fc:18:72:47:bf:8a:
                    e7:25:82:19:fb:9b:e9:6f:0c:56:f6:81:3e:73:a8:
                    0d:58:09:16:70:48:5e:0f:bf:49:5a:a3:96:19:91:
                    ed:ce:bb:06:55:2a:93:36:0b:0c:5b:dd:51:d8:9d:
                    d3:c3:d1:21:c2:1e:4d:b9:5b:03:fe:ef:80:10:c5:
                    c4:8f:0e:e4:c6:13:b2:79:86:24:a1:7f:18:9b:26:
                    bf:f2:98:74:c9:a3:92:1c:19:4a:ab:29:16:69:34:
                    0a:17:71:f6:70:6b:c9:dd:82:aa:b1:cf:07:16:42:
                    e3:ff:29:b0:56:60:35:79:85:4e:22:53:e3:b7:66:
                    b5:0f:d2:c7:48:72:23:22:d9:85:ea:67:8b:d6:72:
                    a7:49:10:32:18:fb:0d:a4:ef:c4:1c:3e:c1:2d:fb:
                    c3:51:37:6d:5e:5c:f8:e6:ae:12:c1:82:6f:c0:08:
                    0b:ce:6e:62:bb:73:9b:18:5a:df:11:78:01:ff:0b:
                    ff:5e:dd:e4:6f:f0:54:4d:8e:d9:fe:6f:a8:25:c2:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:39:C5:1D:6F:AD:2B:7E:FB:0D:BA:99:65:35:6C:9E:97:CD:B1
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:e0:0e:a0:b8:4c:d8:f1:55:6d:0a:bb:e6:ca:6f:62:6f:
         3d:17:bc:66:33:e8:95:28:4d:0f:70:e0:43:de:4f:03:57:71:
         61:f2:c1:1d:28:73:71:95:89:cd:e3:fc:56:97:71:31:a0:e9:
         0f:ac:ea:5f:c8:cb:5f:2b:3b:d0:bd:c2:bd:14:fd:fc:3e:1a:
         c2:f8:bc:ef:20:6c:a3:a1:61:f9:53:a3:77:e3:7e:bf:c9:61:
         49:51:ac:6e:6e:95:7e:d7:f5:cf:de:9e:96:fd:64:b0:b4:51:
         a7:e4:28:9d:16:09:be:fc:26:37:59:4b:37:5d:d8:cd:9a:42:
         c7:0a:1b:75:2c:ed:0c:61:49:7f:00:58:94:d5:86:94:d3:87:
         d3:09:0d:34:5f:72:9e:87:e9:55:4d:a8:3c:b4:57:09:cb:2d:
         68:05:48:0f:7b:21:cf:ce:64:b4:6c:2f:1b:fb:ee:09:38:05:
         a8:e8:5e:5e:69:83:a1:32:95:69:fd:e8:2a:e0:40:b0:f5:91:
         e0:80:26:5b:57:40:43:56:e0:f9:6b:c7:7f:2e:01:8e:a7:be:
         2f:f1:94:58:72:00:b4:16:37:af:e7:34:a1:42:71:24:15:9e:
         55:3b:f8:0a:bc:a0:92:ed:f2:a6:d0:72:96:26:fb:78:67:1d:
         a7:38:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:14 2026 by rpki-client