Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          TMtPF4XMs9lSARGD7MGlxl6LGP4KT4UczDFKt42toUY=
Subject key identifier:   91:DA:FE:F5:68:9A:F3:60:6E:1D:2F:71:15:5F:73:48:64:1D:59:71
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019D27DF607D148C41471A2262E2CE2DD059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          033B
Signing time:             Thu 26 Mar 2026 02:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:43 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: Fpy512BGdUlLhD8q4z+7TdI9yGxhhpZ8ZcjPiYfhTeM=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:60:7d:14:8c:41:47:1a:22:62:e2:ce:2d:d0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Mar 26 02:00:43 2026 GMT
            Not After : Mar 27 02:00:43 2026 GMT
        Subject: CN=91dafef5689af3606e1d2f71155f7348641d5971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:d2:23:a3:1a:43:0b:ce:5b:d5:95:42:2e:
                    c3:ec:1e:8b:e9:60:8c:09:ae:69:5a:ff:21:a3:4a:
                    76:1d:a2:43:8e:d0:91:b7:12:8c:7b:fb:e2:d2:94:
                    f5:b2:67:80:a6:b6:73:6c:96:2a:ff:57:14:d4:34:
                    aa:c8:0f:19:f3:ab:e3:dd:59:69:be:62:2b:d6:e9:
                    1e:3f:91:4a:7e:ea:de:e0:03:06:a6:9b:10:ba:0b:
                    fa:d1:71:f8:e8:2b:ce:87:e0:a8:e8:b8:db:b9:ce:
                    fc:f4:9f:63:bb:27:a5:3f:37:14:ae:59:3d:95:a0:
                    a3:e8:d6:1f:d0:0c:a5:11:d4:cf:96:98:08:15:43:
                    88:98:6a:86:e4:ec:7c:20:a8:18:97:71:b5:ee:11:
                    8e:67:80:19:f9:cd:16:50:68:50:78:97:5a:5e:31:
                    a2:69:e2:24:91:4d:86:e4:cc:2e:25:d0:5b:64:45:
                    43:bb:04:f0:14:3f:e6:a6:2b:bb:74:b5:55:04:e2:
                    1a:2c:c5:7f:05:12:92:7d:5c:bc:2f:06:d6:8c:80:
                    6a:4d:d6:71:d4:cf:bc:a9:b3:c6:9c:46:4d:28:13:
                    2d:8e:f8:4a:0e:b1:53:0c:41:49:5a:4e:9e:8c:6b:
                    52:ed:04:8e:c6:dc:fd:f7:51:cd:89:58:80:7e:1c:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DA:FE:F5:68:9A:F3:60:6E:1D:2F:71:15:5F:73:48:64:1D:59:71
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8e:75:7b:c8:0d:1f:c6:66:14:a0:17:4d:04:76:2d:3f:16:
         bd:f2:c2:f3:5a:55:cd:cd:16:cf:1c:8a:da:f0:0c:8d:79:2f:
         60:a5:95:02:18:9b:c9:69:92:55:e8:fa:d6:e2:f0:f0:2e:8e:
         04:8d:ae:bc:ec:4c:72:0a:19:fe:f6:77:bb:1f:52:94:5b:33:
         e3:0b:5a:b9:26:70:8e:bb:93:31:90:1a:71:3d:cb:69:4a:24:
         dd:f9:23:e1:31:e5:d5:a5:f0:e0:c0:48:79:b9:f4:9e:f9:ff:
         3a:78:47:df:af:b6:1c:c0:72:20:14:02:85:f8:c2:c5:7c:fc:
         12:2a:53:f7:76:9d:5d:3b:35:17:61:ab:35:b0:e0:ca:13:33:
         e2:f2:67:67:ab:af:f1:45:21:f9:0b:60:a8:84:a6:df:e7:09:
         1d:62:36:75:2d:70:f6:71:82:e8:67:5b:c4:0d:db:fb:a7:21:
         d0:7a:6b:1d:69:c9:5a:31:33:a0:5d:85:f4:6b:60:9b:c0:ee:
         52:b4:df:fd:a9:22:f3:65:7e:20:7e:ee:28:a3:23:19:22:54:
         90:80:dd:04:e6:57:d1:64:b1:c2:f8:38:6f:c0:52:f8:49:9b:
         af:27:16:36:14:e2:9d:2e:d6:b3:c1:0d:98:a1:cf:3d:f8:74:
         f0:05:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:50 2026 by rpki-client