Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File:                     D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier:          F0ILpIivf3ANSXm0mOb2ds0e3PyoTcUH9pcMgByPUas=
Subject key identifier:   07:15:7A:3F:CF:5E:CA:F4:F6:EF:B6:29:2C:0C:D8:32:CF:AA:8B:D2
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer:       /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial:       019D288471320E7E06F3B7533E5B9C015DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number:          1484
Signing time:             Thu 26 Mar 2026 05:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:01 +0000
Files and hashes:         1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: fxumtUWulASwlSJyUdZ1dQvZuYLa/c//FAV0XnURESQ=)
                          2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:71:32:0e:7e:06:f3:b7:53:3e:5b:9c:01:5d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
        Validity
            Not Before: Mar 26 05:01:01 2026 GMT
            Not After : Mar 27 05:01:01 2026 GMT
        Subject: CN=07157a3fcf5ecaf4f6efb6292c0cd832cfaa8bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:46:54:ff:32:5b:52:69:27:f9:0a:b7:c3:
                    d0:90:fa:62:12:2c:27:0e:da:8f:36:7a:76:0d:6d:
                    7f:a1:57:c6:6e:43:3c:4b:c3:86:c2:cf:cf:28:d8:
                    78:97:d1:2e:2d:57:8e:80:61:5b:00:bd:43:5c:d3:
                    f3:73:1d:b7:0b:51:0a:56:6a:6d:f3:e6:ee:71:a3:
                    11:e0:f5:1b:79:d5:85:31:19:85:91:21:ad:9c:a0:
                    1f:16:44:43:00:45:e4:87:0b:a6:d4:5e:9a:07:3b:
                    e1:58:82:42:12:1d:c5:a2:5a:83:41:56:b9:17:ae:
                    84:57:91:98:c0:1f:da:f1:b2:59:9c:1b:50:22:e6:
                    1d:90:18:e9:8d:7a:5b:8a:4b:5b:9b:31:60:28:de:
                    fc:3d:e7:79:cb:19:04:ad:1e:e6:f9:10:3a:40:1c:
                    ee:82:f6:c9:66:c0:55:7f:aa:21:35:fb:8f:42:89:
                    83:ab:ad:a2:45:e6:81:2d:17:3d:1a:e9:be:e6:8a:
                    70:50:57:05:b4:71:7c:4f:74:5a:07:f6:eb:e0:f4:
                    60:15:15:69:0b:c7:46:ac:f7:e6:4b:dc:a2:6c:f8:
                    c3:65:a1:51:02:91:67:4a:d5:ec:e3:ad:0e:7a:ca:
                    37:a1:e9:c2:10:78:a4:88:40:69:ff:54:be:a5:13:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:15:7A:3F:CF:5E:CA:F4:F6:EF:B6:29:2C:0C:D8:32:CF:AA:8B:D2
            X509v3 Authority Key Identifier:
                keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:23:1a:f9:8e:9e:d1:e2:88:10:e2:23:7c:92:ff:db:f5:
         21:8f:bf:ba:0a:5e:4f:2a:00:07:d0:d4:cd:d8:d5:af:f1:d6:
         c0:8c:17:e3:87:9a:e1:1a:bf:79:d1:9d:c4:5c:07:70:05:c1:
         a5:f0:76:0f:c8:0b:91:fd:a9:b9:b5:6f:d1:16:09:d5:bd:80:
         91:10:4c:b3:2a:b4:f1:69:8d:c0:4e:9c:95:a4:35:fe:ba:9a:
         75:a2:a8:23:7b:63:d5:92:49:1c:b3:a2:e6:c4:68:36:b5:7b:
         e0:3b:24:f1:4d:a8:ff:1c:74:6d:03:f1:29:54:1c:42:16:83:
         f3:9f:72:74:14:ea:63:1e:8f:86:93:3c:6d:d4:43:0d:e7:5e:
         c0:93:8a:8d:0b:ca:4b:e6:b9:61:cf:ec:43:ae:5b:b7:55:9b:
         e0:6d:7d:63:ab:25:43:00:e3:d4:e9:3b:54:29:0d:53:84:01:
         59:bd:48:e5:8d:55:09:15:a4:03:3c:b0:21:0a:93:8b:be:17:
         a7:43:e6:44:ff:8e:8c:70:b0:d6:50:85:dd:ea:e5:6e:1f:9f:
         26:28:ce:07:54:39:ff:dc:e0:43:cf:bd:8c:45:7a:8a:e7:07:
         db:8c:b8:e8:ec:eb:58:46:77:ef:7d:d9:8b:80:10:9d:c1:ef:
         57:86:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:13 2026 by rpki-client