Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          DAM/Xi5mLWrRxtvkjRfHfh7T89dACdOiUhVZJxBAmS8=
Subject key identifier:   BC:8D:A0:AD:F7:64:0C:27:D6:54:2C:C7:79:8A:75:39:BF:ED:9F:D2
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       019D27DFDEA16745829943F32007ABB28724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0F1D
Signing time:             Thu 26 Mar 2026 02:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:15 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: dZ2zdO1M8AyxE/5/sSbYsYVsQV2XmYgCVrC+L2U3N/Q=)
                          2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
                          3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
                          4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:de:a1:67:45:82:99:43:f3:20:07:ab:b2:87:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Mar 26 02:01:15 2026 GMT
            Not After : Mar 27 02:01:15 2026 GMT
        Subject: CN=bc8da0adf7640c27d6542cc7798a7539bfed9fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:a2:56:42:08:79:9d:fc:2e:61:3e:20:3b:
                    a1:ff:c3:41:f9:d7:59:8e:28:30:be:7e:8e:12:91:
                    71:93:cf:87:2e:b9:b8:b6:1f:1c:5f:bb:23:75:8a:
                    0a:1b:8d:c0:23:de:a1:26:12:70:22:ec:37:aa:48:
                    b1:df:63:7a:13:e6:94:3f:f5:98:8f:06:7d:80:e6:
                    99:35:22:00:93:88:20:13:b8:c2:16:a5:b0:13:46:
                    a8:ec:7d:58:4c:08:15:4e:d2:9a:0f:e4:1b:06:56:
                    fa:4e:55:f8:c7:01:3e:6c:da:88:25:91:bd:be:10:
                    c4:f7:1f:0e:16:94:01:c2:af:13:2a:ff:f8:ab:5e:
                    b7:55:84:c9:3a:ad:70:5a:78:9b:e0:70:33:ce:46:
                    bf:0e:a9:40:51:ef:d9:e1:0a:6e:b2:a1:47:88:ec:
                    32:e5:b7:f6:5c:95:46:83:83:f3:1a:d6:d0:30:07:
                    32:1c:fa:05:f2:bf:f8:bb:b0:4c:01:be:e6:eb:a0:
                    fa:6a:ed:0b:f7:44:d5:cc:13:49:65:1e:80:be:bf:
                    c9:cd:5e:e7:42:e2:c6:b0:9b:29:ac:10:ad:d4:5c:
                    f9:e0:2e:5c:00:69:f1:f5:e3:e9:71:85:b7:d9:af:
                    77:27:04:94:77:23:3d:b8:73:45:cf:c7:ec:6e:66:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:A0:AD:F7:64:0C:27:D6:54:2C:C7:79:8A:75:39:BF:ED:9F:D2
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:c2:57:ec:9c:97:e4:36:83:19:b6:1f:11:94:c8:a0:5b:
         ec:79:e3:00:3f:f1:0b:06:e0:4d:5c:be:c1:3f:ac:70:06:67:
         1f:26:0c:ff:39:7b:71:82:7e:ab:ac:38:a3:5e:f4:04:84:ae:
         33:6a:73:66:53:8a:14:72:ca:ac:19:d7:e0:01:a8:9f:89:d9:
         9b:a7:88:14:b7:f4:d1:93:8e:39:01:f9:69:f3:34:10:07:85:
         58:11:8e:0d:f5:31:d3:42:bd:7c:eb:51:6c:07:8e:f5:94:d1:
         0b:3c:a6:fc:c5:b2:15:ba:24:3b:da:0a:f7:e1:37:d7:64:67:
         77:0c:c6:33:d3:52:28:10:80:69:64:8f:34:92:64:ff:92:3a:
         9c:5b:0e:d1:49:93:5a:a5:27:40:e1:bd:c1:43:2c:c1:01:90:
         78:6d:1d:18:64:e2:69:b6:61:f7:4b:61:f0:f7:cf:1e:9a:d4:
         56:d2:ec:74:8e:30:46:30:82:fe:8c:66:b9:c4:25:fb:c1:62:
         52:61:88:12:49:74:ec:09:a2:c8:b7:02:fa:34:62:97:7b:2e:
         24:81:79:1e:0d:d6:0f:c8:d2:62:31:5a:aa:62:8d:55:da:8e:
         dc:57:d1:ad:53:12:ca:f2:62:08:c6:d7:b2:8a:52:69:71:11:
         fd:d9:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:28 2026 by rpki-client