Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File:                     39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier:          h08E1QSAWZpnIab0kavMG/8E0qgZlXJX6ub//YZ6yNQ=
Subject key identifier:   EE:3D:2B:FD:79:7F:9F:A0:7D:E7:8D:EE:BB:A3:E1:B2:71:A7:B1:94
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer:       /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial:       019D2AA95EA4EDD62DCD3AAF912F9D16F1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number:          189A
Signing time:             Thu 26 Mar 2026 15:00:35 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:35 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:35 +0000
Files and hashes:         1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: BXiwD80GOO0dZNT6LUFP1tSYW/SW3Q6MbSAo+3q1kh8=)
                          2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
                          3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:5e:a4:ed:d6:2d:cd:3a:af:91:2f:9d:16:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
        Validity
            Not Before: Mar 26 15:00:35 2026 GMT
            Not After : Mar 27 15:00:35 2026 GMT
        Subject: CN=ee3d2bfd797f9fa07de78deebba3e1b271a7b194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:31:59:6e:50:0b:be:6b:44:96:fd:29:38:
                    f3:fd:6c:3f:62:63:72:28:fb:12:30:dd:5a:d4:3e:
                    eb:d2:42:03:ce:05:21:df:07:90:c4:8b:56:8f:17:
                    b3:96:55:05:ab:1c:a4:d5:89:1c:38:cb:e7:61:b9:
                    0e:01:09:b1:b4:f8:f6:ac:47:de:3b:75:2f:a0:3a:
                    76:73:95:bf:f9:d9:a0:99:ea:48:74:88:db:78:3b:
                    d3:c2:fd:05:88:f0:66:fc:af:b4:96:2e:e0:50:69:
                    b9:a8:74:90:d3:7d:34:71:0d:7c:08:57:6b:49:28:
                    f2:df:be:e3:32:77:2a:a3:3e:20:cf:85:46:68:ba:
                    e9:44:ad:a8:a4:c8:32:a4:8a:c8:d7:54:ff:3e:cc:
                    42:37:46:2f:ed:d8:13:75:19:5d:d3:32:e7:8b:42:
                    a7:bd:aa:59:14:9f:01:0f:a1:1e:f3:ef:2d:4d:d3:
                    ba:2c:07:d9:8d:28:82:b9:8a:8e:ef:d9:73:6b:06:
                    5a:c5:4d:13:db:04:28:17:35:ce:f5:ab:22:b3:44:
                    16:c2:4f:f2:99:07:c4:a5:cc:84:f7:80:02:ba:4d:
                    16:61:fc:98:8b:03:8c:1b:aa:99:f5:b2:1c:59:c6:
                    b5:80:36:b2:e5:15:18:6d:90:4b:4f:4b:3b:f8:5a:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:2B:FD:79:7F:9F:A0:7D:E7:8D:EE:BB:A3:E1:B2:71:A7:B1:94
            X509v3 Authority Key Identifier:
                keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6c:16:fb:0b:67:67:d3:b1:63:76:c9:b9:98:f3:de:4e:d9:
         0f:48:d1:89:a5:0a:4e:a7:c2:6e:80:87:f8:0c:af:22:8f:90:
         f3:7b:c8:4b:b9:5e:35:28:d9:70:32:51:7d:c5:65:db:2e:44:
         1a:59:5b:b2:23:99:9c:dc:35:58:fe:b2:f1:1f:d9:79:ae:99:
         6d:fb:2f:9a:c2:3e:58:19:19:de:7a:aa:cb:94:24:06:fe:e6:
         e5:c1:e7:91:6c:9a:80:db:5b:6c:cf:ad:51:ad:9c:b0:96:3a:
         3d:cd:b8:97:99:10:fb:30:fa:45:85:52:56:61:e5:34:73:6d:
         9a:0d:b9:1e:7b:4e:16:8d:2c:b2:54:7b:16:e2:05:35:cc:9d:
         3a:f9:94:fa:80:8e:2e:8f:c7:c5:0f:c0:4a:ba:93:81:34:97:
         8c:b6:f1:d2:49:90:78:bd:9f:d6:4d:93:84:74:63:e5:80:05:
         55:c6:4b:14:ac:82:8a:bd:8b:a5:8d:07:c8:cf:99:be:de:46:
         59:81:c1:d4:ad:fb:5c:6c:26:df:7a:1f:a8:0d:56:b7:32:51:
         e4:3d:25:cd:b9:57:60:c9:94:50:cf:67:c0:e4:1c:65:71:3f:
         20:42:46:90:f4:8c:65:34:37:54:5d:aa:69:c2:01:2b:22:88:
         e8:2c:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:28 2026 by rpki-client