Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          HRMd5QmWnF9c6TwlgSNmVbcFv2/m8b1XnMalxrW7Ocw=
Subject key identifier:   CD:50:B0:8F:C1:64:5F:23:02:0C:9D:84:94:19:BC:44:D2:4C:3A:60
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       019D27A8D2D46CC2CAA0C836B4CE1F07E0C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          0AFE
Signing time:             Thu 26 Mar 2026 01:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:08 +0000
Files and hashes:         1: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: NW9P9ZJiIMYZo5ZNgvcqlS+xogX7pr22DbKFPfv/vaQ=)
                          2: ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa (hash: EqnSEDx6yPM3NTrcSmZ0dpmsneWx1xHj/kgiZXGmcS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:d2:d4:6c:c2:ca:a0:c8:36:b4:ce:1f:07:e0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Mar 26 01:01:08 2026 GMT
            Not After : Mar 27 01:01:08 2026 GMT
        Subject: CN=cd50b08fc1645f23020c9d849419bc44d24c3a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:30:c4:79:89:7e:ec:10:b6:1a:bc:73:f3:
                    0b:db:a0:95:b7:69:86:c5:c9:19:35:d6:23:6c:0b:
                    5a:38:07:9a:d4:4d:95:8f:da:10:79:3a:21:7f:a1:
                    c4:cb:cf:be:a2:44:19:a9:5e:28:d6:fe:59:da:c2:
                    84:da:95:7e:59:b4:e4:a4:5d:22:77:2c:11:7b:a9:
                    94:99:8f:f3:14:06:91:b0:e9:15:88:8c:62:6a:fc:
                    d6:66:7c:4b:4a:f5:28:db:45:9a:07:c2:54:8f:31:
                    ae:88:bd:00:23:e9:5c:22:10:1f:dc:e6:4d:e0:69:
                    c7:5e:20:79:f2:ec:7d:d2:01:ba:1e:c3:de:8d:5c:
                    33:a0:15:95:79:b4:aa:4e:fc:3c:5d:e1:d0:ad:20:
                    7f:2a:ab:e5:cf:d9:50:d1:55:bb:63:6a:51:d0:fe:
                    77:6e:ce:c4:a2:e5:c1:2a:8a:61:42:b6:6b:64:9a:
                    f1:a3:2f:04:5d:76:81:7b:c1:bf:05:05:58:e1:35:
                    4d:69:8c:35:1a:44:71:86:fc:a8:2a:d8:c1:83:d7:
                    89:c4:0c:c2:37:c6:88:33:94:27:db:6e:e8:41:93:
                    fc:31:42:a9:f3:7a:31:5a:b3:1e:6f:66:e5:b5:fb:
                    a6:1f:b1:90:12:4d:26:bd:2c:c5:18:9a:6a:a8:b7:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:B0:8F:C1:64:5F:23:02:0C:9D:84:94:19:BC:44:D2:4C:3A:60
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:47:30:1c:ac:55:af:9e:90:f6:38:82:a0:d7:f5:4e:4d:
         37:e8:40:13:d5:93:57:71:b2:22:4c:86:8c:dd:99:a6:9e:41:
         49:f4:ef:b9:c3:98:10:70:74:f1:f8:e0:76:e9:14:a3:88:cb:
         96:30:f4:34:46:9f:0c:45:38:8b:f2:bd:08:76:f9:16:7d:64:
         69:27:bf:31:a4:d0:39:ab:ae:dd:f8:4e:24:51:60:72:77:ab:
         1c:e5:32:87:d6:f8:23:b0:b7:ed:82:87:dd:48:8a:cf:8b:90:
         e5:2e:67:ee:61:2e:62:15:30:5a:45:99:b6:15:9e:29:70:07:
         78:33:e7:60:95:2d:e3:24:d5:61:b6:1e:f8:24:43:4f:51:5d:
         65:f1:e4:5e:ce:ec:5d:78:ae:d3:f9:1a:1b:6c:55:04:ba:06:
         1d:d5:3a:2c:c0:d2:4c:86:e9:4b:6e:d8:c7:55:cc:8e:ca:b8:
         57:a4:9b:e2:99:be:bd:35:a8:0a:80:85:e3:22:ba:b9:a0:ac:
         fe:e3:b6:69:21:95:8c:91:3c:b8:3b:69:e5:e1:d3:33:73:15:
         8b:5b:a1:31:52:1d:a3:b8:07:a2:a8:a0:32:e3:08:2b:33:f8:
         aa:59:ba:13:c4:d8:cc:9b:6d:f6:b8:6a:8f:73:84:9f:91:70:
         8e:48:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:48 2026 by rpki-client