Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          p3FNk659G+gbBKhCc3+NYlptXnrSdCcyAwP2tqFVWes=
Subject key identifier:   E9:2E:D7:3E:B6:36:B5:6A:CE:9D:52:28:42:78:52:83:24:DA:75:24
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       019D265F376B17E24A173BE286C23F14C7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          082A
Signing time:             Wed 25 Mar 2026 19:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:07 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: 3Zf7mICh4mWiAzt+/pNlPIo0zG2QknPCG548cMeaZP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:37:6b:17:e2:4a:17:3b:e2:86:c2:3f:14:c7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Mar 25 19:01:07 2026 GMT
            Not After : Mar 26 19:01:07 2026 GMT
        Subject: CN=e92ed73eb636b56ace9d52284278528324da7524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:b6:5c:5a:c1:9f:19:f5:4c:21:b7:13:21:
                    3f:2e:c3:6a:19:d1:39:a4:95:ef:06:08:7c:ed:60:
                    ee:ac:ec:06:04:7a:f6:17:dc:b3:aa:d4:7b:b0:c4:
                    83:23:1a:a5:ee:55:d9:2d:53:ff:a9:e5:3a:09:a1:
                    8c:b5:04:fa:d1:fc:7c:d7:90:3f:32:4b:58:ed:73:
                    5e:2c:98:c0:64:8d:f4:2c:c6:69:89:04:d1:28:e8:
                    d9:f8:82:ab:41:5f:4f:00:b7:a5:cd:e1:db:8c:5e:
                    18:b9:53:59:35:bd:0a:da:c4:d1:45:a3:61:b6:1d:
                    a4:d8:ce:19:f6:7a:35:b7:6f:10:e6:21:02:8b:8e:
                    6c:93:ea:bf:ab:e4:b5:1f:f9:51:33:98:09:10:3d:
                    ea:d7:df:23:a7:8e:5c:b7:ab:00:05:e0:20:b4:7b:
                    22:a9:ce:77:01:24:fc:20:7b:49:a0:48:c2:e4:ef:
                    26:11:91:1d:95:b3:80:44:5a:5d:43:2a:ca:9d:cb:
                    d9:49:ac:b1:d8:ca:2c:46:0f:d4:1c:84:f4:28:ff:
                    36:d5:d5:c7:1c:fb:8d:13:84:57:8b:bd:a2:4c:38:
                    9b:fa:2f:07:9b:23:76:6d:39:d3:8d:b6:d7:d4:72:
                    ea:fd:4d:5f:0f:c0:81:28:35:89:f5:20:74:58:9b:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:D7:3E:B6:36:B5:6A:CE:9D:52:28:42:78:52:83:24:DA:75:24
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:07:64:65:95:6a:19:f9:03:43:55:85:fb:eb:66:5d:5e:72:
         12:1a:e0:0f:e5:9d:79:db:1b:b2:fa:43:06:f9:2a:90:a2:2f:
         f3:43:7c:7f:dd:01:cb:03:59:aa:21:5c:96:d5:85:6f:68:d0:
         d3:a6:ab:c2:a0:7e:ee:8d:82:a0:01:60:f3:3e:59:4f:7b:bd:
         1b:f1:4e:21:30:8e:da:5f:a8:75:1a:07:77:73:cd:66:e5:3f:
         c8:67:c4:04:12:43:55:31:45:aa:96:74:e0:10:87:35:ab:11:
         73:99:60:2c:94:84:b2:56:89:c5:af:00:71:4d:ac:0e:18:e1:
         2c:67:c2:e9:02:b0:8d:e6:40:99:15:15:95:02:1c:66:dc:a7:
         50:65:6e:bf:ee:b1:75:55:72:ca:46:d0:5d:72:38:96:d2:cf:
         2d:eb:95:1f:db:ae:ef:4a:89:88:06:ae:ca:85:7b:71:d6:a5:
         a2:6d:de:64:91:56:40:ee:7f:c7:19:c4:45:12:8d:98:13:13:
         d0:84:5e:83:55:65:7c:20:fe:29:f4:96:3b:4c:67:db:f2:19:
         70:9f:88:98:7b:ca:fb:ef:46:59:60:60:20:96:e2:26:e8:a2:
         a4:00:c0:cf:ec:94:da:a6:cb:20:f8:aa:af:bd:00:a2:38:fd:
         3f:fe:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client