Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File:                     CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier:          R7CLFR6QhvmJDw8ITvEUych57z2iwrUHAbuyZw28OCw=
Subject key identifier:   6D:AC:66:AE:9C:0B:FC:1D:EE:D1:1D:63:C8:66:DF:3B:7D:10:BF:D5
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer:       /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial:       019D29CE61A8CEFDBD82C8B0EDC319435A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 11:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:24 +0000
Files and hashes:         1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: tUDZPBHU1mBDm30slLbLDsbaALa7vaP6doDZDcgwzMM=)
                          2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:61:a8:ce:fd:bd:82:c8:b0:ed:c3:19:43:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
        Validity
            Not Before: Mar 26 11:01:24 2026 GMT
            Not After : Mar 27 11:01:24 2026 GMT
        Subject: CN=6dac66ae9c0bfc1deed11d63c866df3b7d10bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:e4:83:30:c3:50:5a:17:f7:8d:16:95:ed:
                    90:e4:df:5f:60:17:9b:3a:f9:ce:43:05:e1:e3:fd:
                    a8:74:e6:b5:ef:77:f6:5c:71:6d:d2:14:be:a0:e0:
                    ce:b0:5f:5f:5a:eb:57:2b:b2:fd:9e:a5:c4:65:98:
                    43:07:cd:16:14:de:22:da:2f:06:6e:29:0b:9d:be:
                    dd:af:c7:fd:5b:56:f6:a4:af:a2:13:59:38:7d:0d:
                    b5:90:ec:45:74:fe:aa:13:82:96:9f:d8:3a:ea:3f:
                    7f:d6:18:4c:7b:e4:71:0d:23:8a:49:f4:e3:6c:2f:
                    07:cd:09:12:9e:ea:2e:ad:49:a3:5b:1d:fd:b3:c1:
                    f1:32:fa:46:c2:e0:55:1e:d9:ff:37:d2:2c:0b:06:
                    aa:68:7b:d1:8b:bc:7d:f6:e0:3b:d3:b2:5e:b4:13:
                    29:8e:48:bf:89:4b:05:02:12:1d:ab:77:90:d3:5b:
                    cf:5f:cb:e8:55:da:9b:99:f2:9f:89:8c:59:08:a5:
                    07:d1:81:29:30:94:74:21:08:50:09:c9:b5:c5:1b:
                    b5:f0:98:88:48:3b:ed:6e:ff:a5:e9:90:5b:91:7f:
                    c7:98:c3:eb:24:75:75:fa:63:fb:86:0a:cd:b7:1a:
                    26:61:c8:7d:49:cb:5e:97:50:9e:10:d8:8c:ec:16:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:66:AE:9C:0B:FC:1D:EE:D1:1D:63:C8:66:DF:3B:7D:10:BF:D5
            X509v3 Authority Key Identifier:
                keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:ec:78:16:20:a1:ac:ab:40:9f:72:8f:fa:54:01:32:4a:
         c9:74:6d:00:65:d0:e6:9f:eb:14:81:56:3c:0c:a7:46:2a:ab:
         18:b5:1a:ac:a2:24:a8:5d:04:2b:d3:1b:51:7d:fc:00:4c:5f:
         a7:f6:89:67:ce:b9:e6:51:7c:09:34:88:a5:c8:34:bf:57:39:
         97:8a:4a:68:3a:08:99:78:48:5d:19:e8:18:df:79:fd:21:d9:
         f5:68:01:e9:ad:00:96:42:cb:a4:1b:b4:31:49:21:e9:19:a6:
         7f:9a:2e:34:d4:2c:f8:93:4e:57:58:30:49:12:20:b6:c9:30:
         6b:f7:14:c2:cd:75:05:c2:03:b1:84:02:26:3d:e9:0a:1f:40:
         ab:48:29:2b:06:30:6e:52:1b:aa:35:62:97:32:ea:c8:1c:38:
         f9:f1:1e:36:8e:61:13:7f:9b:f2:19:87:5d:48:3a:77:1a:a0:
         a2:49:fb:9f:81:23:34:44:78:20:b3:6f:98:ed:99:b5:44:24:
         af:d3:5a:7d:73:f8:69:3c:e7:a5:3f:e4:db:97:fb:f8:28:82:
         bb:24:61:e7:03:ac:6d:80:f9:77:8b:b7:70:b7:61:7b:b3:eb:
         30:c3:aa:63:ea:29:d5:2b:49:f8:00:dd:60:dc:42:95:cb:12:
         86:4c:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:49 2026 by rpki-client