Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          ZoDsAfN1k31Uy1P87td4fKDiwcKnZqL6W1YdZOdmDyc=
Subject key identifier:   4B:D8:91:34:C9:5A:3D:7F:4D:E8:B3:07:02:6C:F3:36:CC:6D:16:53
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019D27DFD234C7AB2683EF77FFB5E20A3E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          08F0
Signing time:             Thu 26 Mar 2026 02:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:12 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: r3oPBdzg0T/curwvJmKubQXUpu++GKutOrOPFIv8z2g=)
                          2: IY4Ud8FalvQX-HNlMYS_A9LK2SA.roa (hash: HbJnUoe0Yv6rvkXwg55slfYNJG8JrNBrpoCMGVfMWXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:d2:34:c7:ab:26:83:ef:77:ff:b5:e2:0a:3e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Mar 26 02:01:12 2026 GMT
            Not After : Mar 27 02:01:12 2026 GMT
        Subject: CN=4bd89134c95a3d7f4de8b307026cf336cc6d1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:23:e8:95:49:0c:fb:a9:05:6d:39:5a:a2:
                    f8:50:b0:98:a9:7a:f6:2c:35:bc:44:35:d9:7e:b4:
                    a4:83:db:28:6f:3c:87:69:7b:dd:1d:cd:ca:b5:ec:
                    64:6b:00:b7:f1:91:b6:d1:7e:90:7e:a7:85:d3:3d:
                    ad:6b:c1:68:df:4e:34:2d:b4:f3:27:f6:32:34:23:
                    2d:7d:67:4a:0c:40:98:07:ce:c6:c2:b6:f0:64:4b:
                    fd:62:77:32:b2:bb:be:56:d2:f4:b7:62:2c:26:42:
                    29:81:38:18:ee:2d:4b:d9:eb:91:a3:7a:99:7a:80:
                    90:c6:0a:bf:5d:f7:cd:21:33:d2:fd:0f:20:e5:61:
                    ad:5a:e7:96:f3:64:6b:ba:f4:b3:28:6a:7c:26:a7:
                    b3:fa:b9:74:38:e1:c5:61:74:20:1f:18:6c:f4:55:
                    ba:fd:55:01:5e:64:e8:04:69:4d:15:f3:50:62:66:
                    78:1b:e1:fc:23:ca:7e:10:d0:07:a0:ad:4a:5a:55:
                    15:10:e5:48:52:30:51:f5:93:b7:16:d7:0b:37:6a:
                    0c:36:a4:94:a1:5b:95:ab:0a:ed:0b:4b:7e:c9:3e:
                    4a:5d:7a:b5:28:fb:d2:00:2e:7e:56:27:37:67:b9:
                    cc:af:8a:92:ae:a7:f8:84:88:ff:4e:c1:31:ee:be:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:91:34:C9:5A:3D:7F:4D:E8:B3:07:02:6C:F3:36:CC:6D:16:53
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:20:87:a0:62:3e:14:ac:fa:e4:eb:18:d3:65:c8:56:4d:
         9a:c7:57:6c:60:42:2a:29:13:f0:ef:b8:f3:5f:c9:4e:6e:9a:
         e2:d5:4f:e3:32:49:7d:9f:35:5f:0a:1b:8b:96:94:92:c2:d0:
         00:42:6b:d5:89:08:7e:27:80:63:b8:6c:74:5c:96:2c:6c:32:
         31:44:0d:8d:a8:11:e0:7d:7f:a5:82:6a:19:3c:72:14:40:70:
         08:db:4c:ed:41:f4:54:55:e5:b2:ff:61:c2:93:f5:70:7c:60:
         15:67:29:1b:b9:74:26:e4:8b:81:b4:95:2b:a4:e6:7d:fb:65:
         32:75:ba:38:26:6d:b3:88:b4:a0:cd:5e:07:6c:30:6f:2f:b2:
         a2:ae:d1:75:dc:8f:45:28:48:1e:f0:36:03:b7:f7:9e:b5:fa:
         1a:7f:3d:46:1b:d1:5c:a9:c1:2c:69:2b:a8:42:3d:82:61:6e:
         23:bf:49:88:54:71:17:4a:72:95:bc:9f:4d:db:fd:8d:c8:fd:
         28:34:b2:33:27:d9:5c:89:41:9e:11:90:2a:cb:51:52:c0:3b:
         b2:5b:9f:de:13:7f:c4:3a:88:ae:2b:7c:38:97:7d:53:2b:c2:
         c4:81:20:e9:6f:6d:95:74:66:2f:a0:3f:bb:0f:dc:4b:b1:9e:
         e7:88:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:07 2026 by rpki-client