Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
File:                     94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json)
Hash identifier:          cX69hx44y8OOofQ2e3LuKtW4jMLlvagRLSgNiqAMlC4=
Subject key identifier:   0D:B8:FC:09:63:B5:8B:B9:AA:37:CE:EF:90:F0:E9:23:6B:89:14:0B
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Certificate issuer:       /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial:       019D284D4803C97AAB911B67E164207CB200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
Manifest number:          0E55
Signing time:             Thu 26 Mar 2026 04:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:46 +0000
Files and hashes:         1: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: 8TK8zfaHCUdqsiN46+DtBS/lCfcMTXxeDX1t78Lb+vg=)
                          2: OJlfVODA1Oyel73IkLe76x3InXs.roa (hash: ZaZsJzz+fV4f9gGKkD3UaI87u+j1nI0aVsgxVEdatZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:48:03:c9:7a:ab:91:1b:67:e1:64:20:7c:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
        Validity
            Not Before: Mar 26 04:00:46 2026 GMT
            Not After : Mar 27 04:00:46 2026 GMT
        Subject: CN=0db8fc0963b58bb9aa37ceef90f0e9236b89140b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:ba:15:6d:60:49:e2:d5:8a:22:06:e5:5a:
                    2d:63:03:cb:a4:c7:d2:8e:ec:17:6c:ee:53:cf:2a:
                    79:df:ea:31:06:4b:8f:6b:20:64:c9:cb:60:1c:80:
                    9a:af:9f:0a:1c:85:be:69:01:e2:02:75:f9:c0:0e:
                    08:79:e8:53:55:d0:f2:8f:6c:59:0f:dd:cf:42:85:
                    1f:d4:c6:74:76:64:a6:39:cc:8f:e8:d5:d7:a9:bf:
                    06:30:39:ae:c6:57:5f:42:78:22:24:eb:f5:cf:84:
                    28:9e:8d:8d:36:ec:65:ef:78:33:f9:fb:22:55:f9:
                    95:9d:3e:23:d8:7a:5b:57:c1:76:4b:10:c7:a5:b9:
                    3a:55:1d:c0:f5:5d:c7:5b:9c:2a:72:2f:80:cc:e9:
                    55:5d:ec:b2:f3:57:3d:f2:99:39:ba:c0:2c:ef:c1:
                    96:28:80:dc:62:6b:e3:a5:1f:be:67:b9:1e:83:0d:
                    fa:cb:03:6b:83:cc:4b:38:38:55:1a:e9:93:4d:9c:
                    69:98:9c:5b:f8:b0:99:eb:0a:01:01:c4:a3:18:81:
                    e7:0f:5d:cf:e3:df:d0:f2:ef:ba:fa:b4:fe:8f:fc:
                    50:15:46:e5:5f:4a:c2:84:40:ac:30:3a:5e:2d:b0:
                    6b:67:7f:23:bc:60:ff:ed:fd:6c:bd:58:a4:da:a4:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:FC:09:63:B5:8B:B9:AA:37:CE:EF:90:F0:E9:23:6B:89:14:0B
            X509v3 Authority Key Identifier:
                keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:b0:c1:47:42:99:42:e3:1d:fe:a9:3a:2f:97:57:4f:31:
         dd:86:6d:6b:f9:fe:0a:d9:ac:87:24:4f:29:d9:f0:5c:01:01:
         2d:bb:77:e1:15:77:b7:81:fe:45:a7:3e:e0:9d:83:32:2d:9e:
         59:08:48:90:68:26:b4:5c:6a:76:e0:da:b0:12:4a:ff:42:c3:
         b1:e1:29:74:7d:06:34:81:db:87:65:cb:47:6f:20:de:ac:bd:
         df:55:0f:1d:7b:6a:82:08:0f:10:4d:4c:f7:bb:1c:0d:66:73:
         17:ba:b3:5f:18:ac:83:3f:a4:55:ec:d8:8f:5c:79:fb:42:fb:
         4e:de:9d:15:f5:b4:87:01:9f:d5:49:32:67:41:e3:e0:b5:63:
         a0:02:64:da:1d:67:ac:0a:88:2d:c6:fd:7d:26:52:9c:74:0b:
         7a:23:0b:d4:34:c4:0c:c0:0c:e2:2e:15:6b:5f:a2:bc:7b:b6:
         40:e7:d3:4e:64:e7:0d:fb:29:d9:e0:97:d0:f0:5c:63:8c:9e:
         e0:5f:8a:05:3d:c0:fb:60:34:43:2a:9c:b9:72:da:7d:91:b7:
         bf:8d:5d:68:45:8a:bc:c2:65:ed:99:b9:06:30:2c:2d:fc:b9:
         1d:3c:cf:ab:ae:b5:b9:c0:84:8c:03:89:e7:23:61:89:ac:3e:
         fb:0f:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:11 2026 by rpki-client