Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          oKK7H7jtvAquIAlDp67TzYIh3ZrUsQJsXJBcbRO9ypw=
Subject key identifier:   1E:AB:E0:77:61:BA:56:3C:C9:72:0E:12:E8:70:0A:97:4F:97:B7:ED
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019D2695CAB1D7A235012AB5602E4D6661BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1796
Signing time:             Wed 25 Mar 2026 20:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:44 +0000
Files and hashes:         1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: vXcYCzwA9auTUiwjJP45pMsuOJK6lgkv9fmPSC80NhE=)
                          2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:ca:b1:d7:a2:35:01:2a:b5:60:2e:4d:66:61:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Mar 25 20:00:44 2026 GMT
            Not After : Mar 26 20:00:44 2026 GMT
        Subject: CN=1eabe07761ba563cc9720e12e8700a974f97b7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:35:72:e7:aa:33:c1:88:51:bd:bf:72:0c:
                    30:ba:64:d7:72:3c:d6:bf:e0:f4:67:b4:2f:bb:b8:
                    da:6a:28:3e:6a:9d:af:c3:bf:74:85:0f:25:d4:5c:
                    0b:24:df:67:be:a2:1f:7f:df:e6:bb:46:b0:68:3b:
                    7e:ec:cd:fb:5c:79:7a:a7:00:a6:6f:93:2a:14:89:
                    de:8f:6c:bb:0b:4d:e5:8d:d2:b3:8a:7c:88:4e:72:
                    48:2b:c2:c7:c1:41:23:ee:24:e4:9f:cc:f3:cc:5f:
                    e8:d9:0d:c9:e4:2f:83:21:cd:90:9d:e2:29:e6:55:
                    29:4c:4f:c1:2f:d2:c9:5f:98:83:1d:77:16:0b:6a:
                    de:a7:2f:f0:26:11:e9:7f:31:f7:6b:a4:44:01:62:
                    92:e7:95:b4:f4:ca:c6:3e:71:0c:4b:08:20:2a:15:
                    a6:1b:fe:ba:b5:1b:9b:d8:db:8c:3b:0a:ab:34:1a:
                    5d:f7:b0:7e:d8:fe:52:37:79:d3:09:74:43:04:72:
                    65:58:d0:8b:fa:67:0d:e8:bc:c5:4c:bd:f7:83:f8:
                    03:44:60:05:a9:2a:e0:78:93:53:7b:7a:a2:55:4f:
                    eb:6b:d3:d6:af:08:2e:ea:2b:2c:46:35:45:23:0e:
                    a6:47:1d:5a:d9:6c:c4:c5:72:b3:ec:37:55:b0:0f:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:E0:77:61:BA:56:3C:C9:72:0E:12:E8:70:0A:97:4F:97:B7:ED
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:5c:27:5f:6e:ab:e7:9f:50:db:af:5e:7b:a6:36:7b:3e:
         71:5f:43:9a:52:3b:79:fe:34:fa:3f:dd:8f:32:42:56:42:65:
         9f:f5:6b:04:1b:11:10:2c:d9:50:12:43:64:de:2f:d1:69:1e:
         0a:68:84:fc:62:2c:8b:ec:d3:ad:29:88:af:88:a2:7a:d8:8a:
         10:fa:c1:d4:1e:42:db:29:8f:60:a5:7f:73:c8:36:7c:8c:68:
         56:85:00:9f:29:96:96:c3:35:0b:5f:b3:e4:eb:eb:8f:12:87:
         ed:18:ec:16:cf:23:ba:cd:9c:ee:7f:3a:7a:cb:4a:0c:a0:87:
         86:c6:c3:f0:be:d1:eb:e3:e1:e4:ec:3f:8a:7e:a2:7d:bf:35:
         54:11:b7:8c:1a:a8:bc:c1:7b:ad:a3:67:e0:a5:2a:72:5b:34:
         f9:85:3d:40:53:25:fc:41:08:be:0d:63:0c:72:72:aa:6d:14:
         20:5d:09:b6:ae:bf:84:1d:d1:4d:f6:cb:48:ff:d8:4c:91:12:
         b4:53:0e:c5:72:50:64:31:80:a2:ef:3c:16:3a:6c:8d:fe:74:
         52:bf:ee:3f:44:53:b0:c7:9e:e6:eb:70:1a:ee:12:8f:6e:64:
         3f:6b:d7:da:4b:52:bb:de:cd:bb:5d:c2:7f:54:5e:e4:d1:2c:
         aa:2f:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:57 2026 by rpki-client