Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File:                     PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier:          nvxxjEJUgFk38QGbKyOEBAs2J1yB08JO71FIcU/eVN4=
Subject key identifier:   CE:3B:D7:C8:C3:B0:34:4A:4B:54:AA:A3:23:32:7D:9C:22:F2:A1:75
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer:       /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial:       019D2884D2C3B177AD78199E2CE32929E7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number:          051B
Signing time:             Thu 26 Mar 2026 05:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:26 +0000
Files and hashes:         1: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: jC2WgkTMK6NtoqdIR4QBxMnf9JtJ7H3mRzeEFAbYjck=)
                          2: TTGFYY8k9xpvkyvodGbW8RVHqnU.roa (hash: +s0c6IoG2XA0m4/DkwS/xbWE67NARzvpIrkEzD/tMuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:d2:c3:b1:77:ad:78:19:9e:2c:e3:29:29:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
        Validity
            Not Before: Mar 26 05:01:26 2026 GMT
            Not After : Mar 27 05:01:26 2026 GMT
        Subject: CN=ce3bd7c8c3b0344a4b54aaa323327d9c22f2a175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:cd:c8:50:0a:9f:02:29:ed:07:7f:5b:18:
                    1e:88:c2:80:53:da:d2:e1:b2:ab:f7:06:68:9f:30:
                    34:c0:3b:c6:0e:f9:6d:00:4d:a9:1d:99:ac:0c:46:
                    eb:ba:88:64:b9:51:37:c8:0b:48:93:55:56:80:fc:
                    d2:7d:0d:22:2a:1e:53:96:74:61:0c:d6:c0:1c:bf:
                    d1:e8:22:d8:54:c4:9b:6c:5f:58:53:19:82:68:7c:
                    34:a5:ac:de:51:fe:8b:75:e6:0a:e0:fe:29:37:31:
                    b0:22:cd:e3:94:23:3f:a5:36:43:89:be:6d:79:5a:
                    88:00:07:a8:9c:cb:5f:c4:5d:3e:9a:65:ec:db:37:
                    1b:e9:ad:ee:23:6d:71:bc:c2:85:3a:79:a5:bf:9e:
                    d8:87:36:dd:9e:b2:54:2c:11:c6:2b:8e:48:ef:37:
                    2b:13:03:ce:1b:32:13:6a:33:7e:d2:8c:64:a0:25:
                    5d:1b:61:44:db:83:c2:82:77:7f:6a:b1:e8:08:b5:
                    94:5c:f4:ad:d8:c0:71:2b:24:ea:96:56:2f:11:42:
                    7b:16:0d:e1:49:09:d2:15:45:b3:74:e6:ff:3c:51:
                    2f:ca:5f:57:24:33:fd:23:c0:87:c3:91:b3:66:db:
                    33:31:72:5a:d0:b1:2c:c4:0e:fe:c4:3b:b2:db:f4:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:D7:C8:C3:B0:34:4A:4B:54:AA:A3:23:32:7D:9C:22:F2:A1:75
            X509v3 Authority Key Identifier:
                keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:58:8b:39:48:b9:5a:ae:7f:f9:61:80:ba:33:6c:11:a9:92:
         4c:a8:32:e6:6f:fd:c8:64:8d:47:9d:2b:23:8a:ac:ad:1f:a2:
         d7:b1:bd:35:60:02:f7:52:73:dd:91:b3:4c:d4:fa:e2:e6:48:
         4b:ae:09:95:f8:86:0d:cb:ee:ca:fa:1d:fa:88:29:86:8c:35:
         43:cb:79:68:6c:5f:43:a0:83:ab:80:cc:51:18:61:45:7a:19:
         4d:bd:d0:53:f6:71:24:50:2c:67:76:ec:20:36:74:ec:55:18:
         2d:3a:2d:09:cd:3f:74:71:68:66:b0:b5:7c:c4:7d:db:b6:8f:
         f8:32:d6:b9:50:1c:b0:3f:d6:29:64:85:e5:63:52:7b:72:d0:
         30:cc:8f:6f:a1:df:40:9d:9a:4d:d4:b9:c7:a9:06:eb:7d:14:
         4a:eb:3e:bc:e0:84:be:74:08:16:60:86:e2:5c:0f:c9:84:dd:
         c2:57:2d:c0:87:f8:ac:be:fa:99:87:49:9a:5e:bb:76:32:33:
         58:c8:67:fa:b3:3d:e8:12:c5:17:fb:d1:92:4b:21:b4:3f:85:
         27:10:e1:83:c0:28:15:6b:26:e3:dd:76:7d:a7:7a:df:53:d2:
         0f:31:c9:f5:0a:90:05:19:dd:81:1e:ff:ce:b8:b9:8a:b9:26:
         73:07:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:55 2026 by rpki-client