Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          oPPuwjINquZISP03ExFgCqlWkBFQrlVcJu9jEiq58ic=
Subject key identifier:   D0:C3:11:50:10:3D:AA:77:7B:F9:A4:A9:0B:FE:5F:E6:B3:0E:CC:9B
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       019D2960BEBCD5F33CAFE14CE4A2506D731E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          047A
Signing time:             Thu 26 Mar 2026 09:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:39 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: M3nh1/pb1eLXj5Ae1if+TqE/kdYa6UYH7jmG4ozxR/4=)
                          2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:be:bc:d5:f3:3c:af:e1:4c:e4:a2:50:6d:73:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Mar 26 09:01:39 2026 GMT
            Not After : Mar 27 09:01:39 2026 GMT
        Subject: CN=d0c31150103daa777bf9a4a90bfe5fe6b30ecc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:24:77:75:9a:30:56:4f:61:ed:d1:b6:34:
                    bc:75:d1:cf:ad:7e:c3:8b:4c:c0:c6:b7:57:c8:30:
                    b6:ca:6e:b9:b6:64:50:cf:c5:cd:c5:57:c7:80:df:
                    70:31:de:76:ac:a7:cc:ed:6d:24:d6:e9:98:52:fe:
                    65:f1:05:f4:0d:17:bd:8e:4d:55:e8:bf:e1:80:88:
                    4c:84:76:24:b8:4a:b1:f2:da:f7:0c:1a:0a:2d:46:
                    43:ab:8a:e9:5e:be:61:7e:21:2a:32:f2:17:85:d0:
                    f2:93:cf:0a:00:fc:f7:e4:e2:bd:f8:ae:c1:32:60:
                    d8:35:e8:e6:9a:41:f7:b0:ce:45:e9:78:cd:d7:12:
                    d7:5e:ac:06:4c:1d:a8:f6:93:28:b8:90:e8:0e:0d:
                    80:1f:ef:28:52:99:83:03:95:d0:b3:85:09:45:2b:
                    ad:21:ce:d9:a2:56:45:e2:fb:d9:9b:5f:12:ad:67:
                    c0:a9:d8:66:2f:35:1b:22:1d:48:01:0b:b3:c9:55:
                    44:05:45:68:64:63:99:20:52:0d:49:93:7a:a3:df:
                    40:3e:fb:e5:e0:94:5c:c4:be:2f:a5:64:54:ed:bb:
                    56:68:fe:12:ca:96:32:8a:d6:7b:42:3e:75:f1:d5:
                    9f:47:9a:91:c1:ad:3e:98:92:c4:06:03:75:fe:b2:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C3:11:50:10:3D:AA:77:7B:F9:A4:A9:0B:FE:5F:E6:B3:0E:CC:9B
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:64:b2:7a:65:da:04:54:f4:94:16:d2:5c:30:84:8d:ab:
         f4:f6:04:85:44:b5:de:57:8f:de:27:74:b4:1b:d5:0f:60:76:
         45:13:ac:8a:1f:11:d5:5f:13:18:e7:05:cb:ff:f7:84:93:e2:
         15:08:86:cb:ad:c2:4a:b2:c4:47:c4:cb:a1:f0:2f:85:81:25:
         1b:69:e5:14:25:b2:e2:a2:be:c8:2a:ba:ae:a8:07:9b:be:f2:
         96:1b:88:67:43:e2:48:14:9d:b6:73:7d:13:cd:c3:55:d7:86:
         26:64:1f:f2:cf:a5:64:75:aa:e7:96:0f:a4:c7:63:da:d2:56:
         24:9c:fe:fc:f0:96:9e:b1:1f:67:72:02:3e:38:7b:2d:51:88:
         4a:46:2b:b0:2e:09:8b:41:35:84:7e:88:68:5f:bf:f4:ef:c7:
         74:e9:41:5d:02:93:7d:56:e8:30:ae:31:5f:f8:6a:87:0e:e0:
         5e:20:a8:1d:01:9d:71:98:d0:35:76:5d:46:5c:81:8c:96:f1:
         50:a9:66:cf:8e:78:10:d1:85:cc:d4:29:e8:aa:16:64:ab:1f:
         fc:76:e0:a4:2f:6a:9e:0a:17:83:d7:f2:ba:75:4d:dc:0b:0d:
         19:eb:ec:2a:0c:c0:b7:37:aa:85:dd:be:5b:d9:0d:65:e8:1f:
         da:34:37:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:33 2026 by rpki-client