Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          IN/Eg4vZCGBF8igzzbIyx6mpQ48QQyS61PvJFRJQeoA=
Subject key identifier:   61:09:B5:31:42:57:E3:4C:D7:2E:F2:07:2E:69:17:BD:21:79:1F:95
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019D25841F77829E54E76288D7012D1B0E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          7A
Signing time:             Wed 25 Mar 2026 15:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:48 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:48 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: VYY2aB9KNJe9AOLO4726uqTDvGiyXEigFfnzp6swW3U=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:1f:77:82:9e:54:e7:62:88:d7:01:2d:1b:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Mar 25 15:01:48 2026 GMT
            Not After : Mar 26 15:01:48 2026 GMT
        Subject: CN=6109b5314257e34cd72ef2072e6917bd21791f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:b4:a6:1b:78:36:d2:dc:ce:24:16:ef:a3:
                    20:dd:93:33:76:2c:d3:89:5b:6f:57:f8:c5:eb:dd:
                    c1:27:3c:c7:71:6a:80:63:28:4c:9b:45:92:44:d7:
                    f5:76:56:a8:c4:02:57:9e:0b:10:23:e9:ac:93:af:
                    0e:a8:70:2a:3a:1f:c3:1f:78:b2:df:0b:01:b1:2a:
                    d0:af:f2:3c:e4:35:43:1e:ff:96:c7:29:b7:9b:e2:
                    4d:dc:0f:a1:b4:44:0d:1c:9a:ba:58:0e:fd:e7:24:
                    ee:9f:b7:a2:c9:47:b0:2a:e2:f8:0e:91:8e:60:31:
                    84:6d:53:87:f9:0a:be:45:0d:e3:f0:76:3a:a8:38:
                    1d:b9:ba:bc:9e:78:2e:0d:53:0a:e9:d0:a5:91:91:
                    80:7f:5a:f9:f3:b9:84:2c:cd:a2:03:83:c3:8a:fd:
                    7f:98:eb:96:f5:44:01:22:14:61:97:53:a0:4a:74:
                    1e:b3:71:e0:46:90:34:d3:19:eb:15:eb:4d:5f:38:
                    12:35:fb:cd:33:91:94:48:62:86:63:95:d2:7f:3f:
                    c7:f5:63:e3:34:1a:f7:a8:d8:5f:05:80:92:09:a3:
                    39:8c:89:56:ad:9c:08:f3:96:ae:4d:b4:85:7c:d8:
                    b5:c1:91:7c:69:15:ff:97:9e:d4:72:29:1d:03:6f:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:B5:31:42:57:E3:4C:D7:2E:F2:07:2E:69:17:BD:21:79:1F:95
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:c3:dd:e1:c9:77:48:81:5a:b0:d8:f3:25:d6:b4:81:3f:
         a0:aa:53:da:ec:d3:10:1a:ad:63:c1:f0:ea:ce:d5:b5:3b:27:
         9d:d9:9e:05:6f:ae:b7:5c:8b:9b:e4:28:b5:6e:85:1b:87:74:
         c9:52:aa:ad:e8:6d:d5:83:31:ae:2b:21:88:ae:61:b5:64:b2:
         dd:ae:05:f1:a5:6e:bb:79:c8:86:15:6c:75:7f:34:d1:21:6b:
         fa:3b:ce:4c:c5:3d:77:cf:91:b9:6a:cf:d8:4f:f5:17:c7:7b:
         82:13:fb:0a:d0:08:89:ce:f6:32:f3:db:bd:4a:c6:e7:90:fd:
         b5:bd:b4:e0:07:9e:92:b6:c4:46:87:d3:70:fe:b4:84:95:b3:
         ff:35:c0:3f:80:72:67:d4:39:b1:7d:ed:64:11:cb:8d:e9:62:
         7c:f8:c2:3d:b1:20:4d:27:2e:f1:c9:50:b3:37:85:e9:54:ad:
         51:21:2f:79:ed:74:87:ca:5e:42:53:3b:64:4e:3a:51:67:d0:
         5e:e3:ba:18:ab:46:1c:80:ec:c0:a9:4e:22:74:72:69:b8:21:
         d2:62:c0:dd:f0:66:e2:a2:80:ce:fb:ae:c3:f7:32:3f:ae:67:
         07:a9:08:71:b7:54:8c:37:da:bc:16:c2:18:ff:7d:c5:ca:f0:
         76:f3:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:53 2026 by rpki-client