Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          50qkYiSIurxwa1X0Hv4r1MnXjjCqp/3vZBuzsRcZuK0=
Subject key identifier:   53:83:CB:3E:2F:40:79:48:0B:33:8C:8C:AC:52:B1:C1:95:62:99:CA
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       019D27E07EB1F7825DF62035846DFB4BD1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0771
Signing time:             Thu 26 Mar 2026 02:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:56 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: 9hDnzmeOPQdJgR86FTOklMGPxFKbqsRuLXTNuGpR7eE=)
                          2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:7e:b1:f7:82:5d:f6:20:35:84:6d:fb:4b:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Mar 26 02:01:56 2026 GMT
            Not After : Mar 27 02:01:56 2026 GMT
        Subject: CN=5383cb3e2f4079480b338c8cac52b1c1956299ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:25:48:92:ea:c3:6f:94:e7:2a:7b:11:17:
                    43:71:d5:1a:50:ad:3c:9b:4f:5f:b8:d8:ef:fd:79:
                    28:4a:3d:2b:a6:41:b1:8b:58:d0:a3:68:53:27:d5:
                    60:79:ba:84:9e:77:80:80:96:8f:77:e8:07:40:78:
                    71:96:c2:0c:0a:45:92:16:96:50:69:54:37:0f:7a:
                    e3:f1:df:ff:5c:68:ee:85:5e:ac:2c:a5:69:4d:9f:
                    08:c9:c9:5e:34:31:28:fb:55:7b:56:cf:00:94:c9:
                    f6:69:6c:b0:94:85:fd:89:5e:2c:b2:d8:a2:33:06:
                    d9:1e:3e:fb:6c:a6:80:29:21:e5:3b:1b:7e:58:f7:
                    07:c4:56:a0:52:df:96:21:38:5c:ba:4c:3f:14:2c:
                    90:40:20:23:f4:19:65:90:80:91:b7:3a:3d:b4:2f:
                    c9:b9:ab:de:85:52:ff:90:07:46:fa:1d:db:46:59:
                    1a:ee:04:50:34:8a:27:a1:6f:6b:55:47:08:f3:de:
                    7d:26:ac:bc:ff:0c:4c:49:af:d8:f9:4e:7c:cc:ad:
                    1e:72:a3:a1:4f:9d:11:44:8c:2c:9d:50:02:8d:ba:
                    a6:1c:32:bd:3d:68:3b:4b:af:9e:14:c1:80:d4:9b:
                    ba:b1:74:b6:37:07:76:62:d5:f2:a2:8c:75:1d:34:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:83:CB:3E:2F:40:79:48:0B:33:8C:8C:AC:52:B1:C1:95:62:99:CA
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:18:37:12:53:4f:dd:a9:d4:70:e7:4c:a8:c2:70:ca:9a:
         c5:65:8c:e9:e2:48:d5:78:71:37:4b:2c:c2:cf:be:5e:5d:24:
         e7:76:96:5e:76:eb:4a:40:97:25:9a:9a:06:0e:b2:f3:27:02:
         95:8e:ef:e4:d9:01:2b:e2:2f:2f:ba:5c:a0:10:3e:eb:8d:57:
         80:98:4d:d1:34:56:9c:36:49:5e:4e:44:76:b3:76:b8:1b:a6:
         6e:4c:2a:f8:57:6f:6f:e3:7d:7a:ba:5d:ca:df:ca:9d:c2:ce:
         ff:98:f8:cb:5e:a8:bb:1b:ac:91:e3:e9:f2:3c:0d:e8:f8:52:
         90:c9:6b:22:6f:24:3b:25:84:5b:33:c7:95:8a:f6:86:09:04:
         7a:99:9f:d1:86:38:2b:3b:be:bd:e7:bf:32:4f:0c:d5:38:7d:
         3b:ca:d9:8a:02:93:56:e5:bb:5f:de:f3:0f:08:49:66:0d:42:
         2a:ee:77:89:47:80:2d:8a:29:dd:11:8a:02:29:5e:9e:86:1d:
         b1:c4:1f:18:74:28:8d:f4:d5:60:61:e4:e6:cd:7f:a5:e0:d0:
         be:4f:bd:f4:ee:5f:f4:a7:07:fc:35:df:51:5d:02:90:6f:27:
         14:94:69:56:1a:e8:5a:2c:bf:65:6b:36:de:1f:0a:a0:dc:1e:
         ac:f7:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:29 2026 by rpki-client