Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File:                     2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier:          1O+1c7s1BKuvX1Tts9jRIhAp1d5Qplbx61HWNAAeHKg=
Subject key identifier:   D2:57:13:D0:EE:DB:22:72:6C:3E:6F:27:39:FD:75:69:A6:2F:6A:C5
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer:       /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial:       019D28163BD07093F1113D7D18C033355B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number:          0738
Signing time:             Thu 26 Mar 2026 03:00:38 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:38 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:38 +0000
Files and hashes:         1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: bW83xsBfVW37I7Xe+FFc4xvjLDbqTtEXe/U5TmepvaE=)
                          2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:3b:d0:70:93:f1:11:3d:7d:18:c0:33:35:5b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
        Validity
            Not Before: Mar 26 03:00:38 2026 GMT
            Not After : Mar 27 03:00:38 2026 GMT
        Subject: CN=d25713d0eedb22726c3e6f2739fd7569a62f6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:27:75:13:ff:8d:97:5c:f6:49:94:e5:7a:
                    c4:5d:e0:23:1b:f3:45:8f:f5:24:a5:23:b4:87:f1:
                    12:1e:c7:80:5c:9d:ab:7d:ad:75:6f:5a:a7:0d:f0:
                    e2:71:01:2d:95:92:57:71:e9:bb:93:81:c3:8c:29:
                    31:3a:ab:67:8d:ee:1d:c7:16:d2:59:ea:dd:e9:1b:
                    23:aa:34:ef:63:62:d0:73:d1:55:2d:c6:fb:4f:0a:
                    77:39:7f:48:d2:6a:7f:3a:6e:34:c6:81:d0:2c:ac:
                    a5:a7:8a:6a:0c:bd:8f:b3:36:89:a7:93:6c:4a:8c:
                    5f:09:41:78:44:fc:7d:7b:1b:4c:72:f5:99:50:3d:
                    87:61:f8:3f:f3:c6:90:c2:58:a3:93:b7:44:9d:ad:
                    c9:cd:31:23:63:8b:60:03:b8:cb:6a:0b:74:9d:65:
                    ce:70:8a:41:7c:10:55:17:07:83:d0:d4:c1:11:0a:
                    72:7f:30:d1:8c:14:c0:c8:4d:c6:59:58:76:75:ad:
                    61:9d:67:c1:b7:3c:8c:dd:ef:0a:65:ef:51:64:39:
                    78:f1:49:fe:ad:8e:94:f6:a9:27:8d:0a:87:4f:2a:
                    b8:37:b1:66:2d:4e:8b:ac:a4:ee:4b:9a:55:b4:1c:
                    5e:78:21:4c:58:d0:51:3c:b3:c0:b8:a5:14:9a:9b:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:13:D0:EE:DB:22:72:6C:3E:6F:27:39:FD:75:69:A6:2F:6A:C5
            X509v3 Authority Key Identifier:
                keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:48:cd:59:e2:21:9d:09:d7:87:fa:e4:ce:68:9b:ef:33:96:
         d8:41:3c:59:fc:6a:2a:eb:ed:97:c5:36:1b:c4:bb:c4:97:4a:
         d1:51:fc:46:d3:46:b0:c4:d2:2e:8f:bb:90:35:09:b8:2b:3e:
         ac:59:22:eb:e1:d4:dc:8b:fe:a9:4c:f9:44:f7:d6:33:a3:5c:
         94:37:87:ed:59:45:4c:c5:0b:f2:56:d0:6d:db:56:0c:e1:af:
         a3:b1:c5:7e:ef:0d:d6:d6:c1:97:31:ff:35:a5:ff:c1:c6:6d:
         4d:17:80:dd:c5:e2:b9:ae:b8:28:5f:c9:d8:d5:32:19:14:21:
         e6:19:22:da:30:32:2e:af:c1:f6:68:66:94:5c:12:7b:70:34:
         4b:4d:f9:f3:2d:fa:eb:26:e9:bf:a0:2e:de:ad:81:37:21:0e:
         98:29:b0:bd:98:4f:e7:f2:43:88:c5:0f:26:64:5b:82:95:af:
         2a:96:65:8e:1d:ac:10:a4:00:79:af:da:cc:7a:cd:25:2a:17:
         0d:cc:84:37:ec:90:28:1f:d9:5c:cd:85:3f:09:b9:e3:d9:c4:
         24:26:29:db:04:b8:89:8d:2d:18:fb:a3:b6:b2:14:96:32:71:
         d3:ab:4f:1b:f7:17:60:42:4e:be:53:3c:51:ad:91:40:96:44:
         46:ce:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:47 2026 by rpki-client