Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File:                     Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier:          f05r0UEsnHNy15Uhj021LpwH+7nfB7j3+gdljXzXcMk=
Subject key identifier:   14:79:FA:89:05:32:51:70:77:48:27:BF:E4:87:B4:BB:C9:65:90:F4
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       019D2704C41169104E4451BF61CF0BC220CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number:          0328
Signing time:             Wed 25 Mar 2026 22:01:56 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:56 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:56 +0000
Files and hashes:         1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: wS83oO4udcAthVhTTn4cUr7RMk+sqxlRZqGdi5a8W0E=)
                          2: X2-StnXGjfI9wfKhZQp0793U3Io.roa (hash: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84=)
                          3: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (hash: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg=)
                          4: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (hash: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c4:11:69:10:4e:44:51:bf:61:cf:0b:c2:20:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: Mar 25 22:01:56 2026 GMT
            Not After : Mar 26 22:01:56 2026 GMT
        Subject: CN=1479fa8905325170774827bfe487b4bbc96590f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:19:09:d0:9b:58:a5:05:87:52:d8:86:f3:
                    4e:e5:fb:5e:4b:a6:eb:84:e8:6e:47:84:7d:40:da:
                    f9:4b:3e:3e:fb:22:2f:e1:37:92:db:10:7c:6b:50:
                    cf:78:97:0a:bd:30:61:b5:08:7a:03:40:75:2d:15:
                    a3:bd:da:43:fa:41:c2:5e:90:01:5a:11:e2:71:60:
                    b6:63:a5:05:49:10:f7:3c:ff:4b:96:ae:a4:97:2f:
                    ab:5c:ab:95:a0:aa:d7:3a:1c:0f:5a:96:7b:d5:09:
                    b0:c1:8c:95:b2:fa:4a:4c:09:be:07:0c:1e:74:cb:
                    97:79:82:26:11:14:0c:8c:d1:64:e5:6b:97:7e:04:
                    1b:32:bd:79:45:80:e9:61:5a:72:2e:71:5d:c7:db:
                    5c:f9:8a:77:02:c8:25:ce:8e:ef:b5:b9:39:01:36:
                    2f:38:75:20:61:48:3d:53:8a:1e:a1:2c:5b:0b:c1:
                    29:4d:04:04:6a:0b:50:87:53:7b:e5:8b:e7:41:07:
                    49:24:61:30:27:a5:3b:65:3d:bd:6a:93:38:45:38:
                    2c:54:cc:3e:d9:9d:4f:3d:34:e8:6e:f8:76:a1:da:
                    2f:99:a7:41:9b:a4:61:d5:ff:d1:62:d9:24:11:a8:
                    59:6b:3e:48:80:1d:7e:d4:07:07:81:d8:78:e5:9e:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:FA:89:05:32:51:70:77:48:27:BF:E4:87:B4:BB:C9:65:90:F4
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:03:41:c7:af:72:0a:93:4c:8c:d0:ce:95:15:1a:4a:e0:
         67:21:4f:41:a0:a2:c9:5c:b5:38:3d:61:f5:88:fd:a4:3a:90:
         f4:a0:be:25:9c:6d:20:2b:60:69:99:4e:b0:16:b9:c2:73:f5:
         f9:9f:17:68:a5:0f:5e:72:2c:7f:53:6c:75:06:18:b7:2b:0e:
         e9:59:c3:13:59:6f:40:84:07:3f:5a:4d:a9:ad:94:06:ba:cb:
         9b:42:b7:3f:8d:7e:3c:d0:1f:3a:b8:2d:e3:63:ab:cd:8d:4b:
         3f:92:3c:18:3a:49:7f:25:52:21:13:0b:da:04:5e:a3:d9:c7:
         d7:fb:1d:91:40:bc:e4:b2:54:c2:cb:e9:a7:21:32:86:42:48:
         10:b0:c7:d9:32:02:0f:4e:e1:59:14:af:c5:0c:d3:b2:39:68:
         0d:69:7a:d7:1e:13:d2:1e:30:16:66:a2:99:90:e2:60:dc:c4:
         73:10:e0:64:9b:40:1b:18:7b:d4:0e:b5:6d:d6:5f:6a:8b:63:
         8d:7e:d1:f3:4b:e6:ec:9d:dd:e3:03:eb:63:00:d3:52:d9:93:
         88:76:d3:22:01:39:d5:1f:89:42:f2:2a:a2:e4:cf:b8:39:a9:
         53:dd:ca:ee:74:bc:07:f4:48:41:f0:52:66:54:46:bb:4e:3b:
         ab:d4:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:08 2026 by rpki-client