Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
File:                     9_3qS2LU6B_zmbXzUffUHdmFMBM.mft (raw, json)
Hash identifier:          sFFC9oA604Y9QTkwp/LraXGf1qSsR603hUvx8il11rM=
Subject key identifier:   FA:B7:E5:6B:B0:E3:50:D8:AC:08:BE:BC:FC:D2:A2:21:14:09:76:5D
Authority key identifier: F7:FD:EA:4B:62:D4:E8:1F:F3:99:B5:F3:51:F7:D4:1D:D9:85:30:13
Certificate issuer:       /CN=f7fdea4b62d4e81ff399b5f351f7d41dd9853013
Certificate serial:       019D3262DCC94C01ED4D9090283377D531AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
Manifest number:          2E
Signing time:             Sat 28 Mar 2026 03:00:32 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:32 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:32 +0000
Files and hashes:         1: 9_3qS2LU6B_zmbXzUffUHdmFMBM.crl (hash: qz7hAMJFubEgbH3R+DFscLcoFbWxWwngcr6TOwG4nBg=)
                          2: CtNORuVO9amDfbrT8bLmuwrDZoQ.roa (hash: 8NWsWV2rx6tLevR3uT/QovSODoBm8xXHfChhblRryyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:62:dc:c9:4c:01:ed:4d:90:90:28:33:77:d5:31:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fdea4b62d4e81ff399b5f351f7d41dd9853013
        Validity
            Not Before: Mar 28 03:00:32 2026 GMT
            Not After : Mar 29 03:00:32 2026 GMT
        Subject: CN=fab7e56bb0e350d8ac08bebcfcd2a2211409765d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:79:ff:16:25:5a:09:6f:eb:db:e3:6a:68:
                    0e:9f:11:de:fd:f0:95:25:cb:f4:8b:e4:b6:4f:e3:
                    49:44:4d:5b:11:e1:f0:06:28:5e:a9:59:da:d9:f3:
                    e0:ea:06:89:2a:6f:ff:87:30:d9:23:c6:02:01:eb:
                    48:b3:d0:db:83:c9:7a:71:7f:5c:ba:21:5a:69:cf:
                    4f:fd:39:c0:f0:b4:19:91:78:2d:b5:b0:7d:de:7d:
                    62:57:4e:c5:e1:16:0d:7d:0f:d7:5f:29:4c:df:c5:
                    85:ea:0d:2e:2e:45:10:8e:4d:0f:cb:0c:91:0e:35:
                    25:95:b0:45:e8:8f:48:1f:d7:7d:b3:d6:03:15:7d:
                    2b:b7:1b:a8:bb:8a:0b:76:da:a9:a6:19:bc:de:d4:
                    38:a3:82:63:70:27:e1:ff:2f:5a:77:ac:4c:40:d2:
                    f9:4a:aa:7f:e0:35:9f:ef:2f:a2:a6:58:d6:71:13:
                    4c:d1:35:be:18:b7:98:96:6b:6a:91:e9:60:76:2f:
                    3b:a0:7b:17:3b:df:9f:89:da:25:2e:e3:41:d9:25:
                    f5:14:3a:9b:34:97:5b:c0:99:a2:0c:99:e4:d8:05:
                    40:9d:39:58:2c:84:9b:be:03:07:76:3f:a6:1c:39:
                    02:5f:bf:4c:6e:f5:4b:3d:f3:8b:0f:52:06:24:03:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:E5:6B:B0:E3:50:D8:AC:08:BE:BC:FC:D2:A2:21:14:09:76:5D
            X509v3 Authority Key Identifier:
                keyid:F7:FD:EA:4B:62:D4:E8:1F:F3:99:B5:F3:51:F7:D4:1D:D9:85:30:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_3qS2LU6B_zmbXzUffUHdmFMBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478859-33b6-4209-874c-ff8061c04983/1/9_3qS2LU6B_zmbXzUffUHdmFMBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:13:45:79:83:85:cb:ca:d1:26:6a:2b:89:ed:c2:c3:a6:2d:
         86:d8:76:20:0d:1f:4c:68:8a:b4:39:0e:ca:3d:4a:e4:1f:7d:
         b1:fd:10:07:45:e3:34:29:c1:9e:b9:f6:8a:a7:7a:86:ac:b3:
         fc:0f:1c:f2:fb:fd:4d:9e:08:92:6a:a3:6e:96:3c:1c:bf:02:
         22:9f:47:b7:c1:8a:b2:b8:52:46:28:1b:09:fb:11:4e:a8:b9:
         05:d1:05:39:f2:d6:25:5b:b1:f5:8e:a1:13:c6:4d:52:cd:93:
         be:a7:96:41:66:d2:25:8d:5f:a6:dc:7b:fd:84:4c:9a:13:c4:
         33:b5:ed:f0:55:3b:92:06:41:58:87:3c:27:6e:bd:01:09:fe:
         6c:90:27:fa:19:5b:ee:39:e9:35:98:12:01:0f:ed:02:0c:3a:
         8c:67:46:2a:84:f8:00:f1:a7:d4:38:bc:fb:e5:d3:c9:94:68:
         70:19:47:1a:48:4e:e7:07:c9:6b:e0:95:63:11:07:e2:49:80:
         3d:06:ab:4c:de:f4:28:dd:74:9e:69:0d:e6:68:3d:b4:49:f3:
         01:9f:65:3b:e0:25:6f:4f:fa:ba:2f:c7:dc:4f:27:26:72:8b:
         e8:e6:49:b3:c6:6c:59:26:79:dd:46:d4:8c:7e:88:e4:b1:a0:
         66:42:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:38 2026 by rpki-client