Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File:                     98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier:          mIJ0DVLeHrY76zLSkU4caGFur3uumS5I92BoieoDtM0=
Subject key identifier:   59:26:6C:9E:89:C8:3A:76:BE:22:86:03:70:38:95:D2:F1:7D:45:CC
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer:       /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial:       019D2704844F21A5053E2A579AB433DA6497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number:          105C
Signing time:             Wed 25 Mar 2026 22:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:40 +0000
Files and hashes:         1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: zzQNcvIU4gYtoh2dtLcWgEeEkAcrQxG3lXqseL9nexc=)
                          2: PhYlTTJSDAG5ZShmlzAGSwIOBLM.roa (hash: v304FWDl/pr5++u+nRKS1u+LXVotGD3ulsE5/EGGhSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:84:4f:21:a5:05:3e:2a:57:9a:b4:33:da:64:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
        Validity
            Not Before: Mar 25 22:01:40 2026 GMT
            Not After : Mar 26 22:01:40 2026 GMT
        Subject: CN=59266c9e89c83a76be228603703895d2f17d45cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:3c:87:be:d0:21:ee:31:0c:cf:e7:ea:f2:
                    12:7c:7c:91:24:db:f5:db:bb:ed:bf:a2:56:b8:ef:
                    eb:3d:77:c5:80:19:fa:5b:c1:5d:31:40:50:02:b5:
                    b8:a2:c9:73:21:60:12:85:bd:12:13:71:e0:5a:b3:
                    75:5e:1c:86:57:ea:4f:be:39:1c:12:ad:dc:ef:db:
                    f3:66:91:6f:66:ec:c8:90:b7:d0:25:64:c1:11:61:
                    37:77:63:ec:23:9a:6d:80:9d:e5:b8:30:f9:85:32:
                    c1:25:3b:c5:58:92:f5:aa:0f:86:88:c8:f5:38:29:
                    c7:1c:ab:22:61:24:d3:7f:38:64:8b:3f:83:0c:07:
                    66:d1:19:08:2d:38:af:5b:e5:15:c5:e5:15:a9:7e:
                    d0:44:5a:2f:9f:66:a4:39:95:5f:a3:22:40:39:8b:
                    60:97:99:c0:ed:d3:8a:6b:05:83:b1:c0:85:a9:67:
                    ac:b5:66:c4:6d:4e:ff:c0:1f:b1:c7:90:d6:5a:17:
                    c1:6d:78:39:99:74:57:c7:98:64:03:2b:35:dd:58:
                    d7:88:b2:7b:ff:7f:92:0e:59:a7:40:f5:df:97:3b:
                    2e:b1:d0:d5:c3:ec:d5:ad:1d:66:ba:fd:b5:e3:27:
                    4a:41:ca:8b:8d:c9:d5:31:c0:13:d2:8b:53:25:0d:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:6C:9E:89:C8:3A:76:BE:22:86:03:70:38:95:D2:F1:7D:45:CC
            X509v3 Authority Key Identifier:
                keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:c8:fb:4c:b9:1f:ad:70:e7:10:8d:7e:03:22:90:71:45:
         05:4f:6b:28:85:65:c4:bd:66:5b:be:dd:50:92:9c:d3:0a:7b:
         2d:71:68:4f:b0:0b:02:c1:a0:85:0f:97:00:a6:7e:ad:ed:e9:
         8e:e6:da:d5:21:a2:15:c7:7c:7f:c1:d7:ae:65:e9:a2:8a:d7:
         86:15:4e:c5:c0:2f:2c:5e:1e:72:aa:52:a3:9e:3b:6e:fa:c4:
         87:13:92:05:53:7d:bd:64:04:c4:eb:b0:96:62:63:5c:de:14:
         9b:9f:60:58:80:89:34:b4:da:46:41:c8:38:e8:0c:18:1c:81:
         c3:7f:7c:b3:2b:70:9f:c1:55:15:8c:5f:60:ca:af:c9:4d:5b:
         99:c3:6e:ec:7e:42:57:4f:a2:77:dd:82:94:35:a6:3a:ed:c3:
         ac:eb:e5:64:c5:a1:e3:c3:33:ff:2d:5d:1e:81:7f:0d:62:84:
         9a:7e:f2:62:f7:e2:0b:68:4b:c0:31:97:58:98:67:0c:a0:cb:
         57:83:d9:18:b9:86:64:1c:95:de:3f:14:b2:c4:93:66:b3:60:
         be:cb:d2:d7:f6:d1:42:3e:a6:21:1d:83:32:9b:db:2b:18:f7:
         3c:ea:6c:7f:fe:33:e4:d7:e3:4e:82:aa:e5:48:09:91:1a:3c:
         69:71:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:35 2026 by rpki-client