Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File:                     rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier:          CUKGSLoIOFN61T2JkaamPzXoHTIwDcr1RBCnDoF7nPU=
Subject key identifier:   99:EE:B6:A5:45:0C:C9:8C:96:9D:39:92:80:14:A7:65:E5:58:5B:56
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer:       /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial:       019D284D6DF7E8EB749AEE760F7C71B2A9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number:          0D32
Signing time:             Thu 26 Mar 2026 04:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:56 +0000
Files and hashes:         1: r4pIacnAe2D-JYQIftRnotqD1wA.roa (hash: eaVNQg7BOR5lgnv8gywl/1AkyppXss9dVOIpa7LgtUE=)
                          2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: I9URpNVkJwEqFrb+iItooMbbg2GbCub9zYn1ELqiGqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:6d:f7:e8:eb:74:9a:ee:76:0f:7c:71:b2:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
        Validity
            Not Before: Mar 26 04:00:56 2026 GMT
            Not After : Mar 27 04:00:56 2026 GMT
        Subject: CN=99eeb6a5450cc98c969d39928014a765e5585b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:f1:4b:2a:48:8e:63:f0:dc:67:4e:59:97:
                    03:89:c6:49:39:4f:f9:3d:72:92:99:cb:29:8c:54:
                    f2:83:9f:c0:f6:a3:9b:99:f0:8b:04:79:8f:a5:2d:
                    bd:b6:4e:6f:5f:ba:a1:ce:fc:3e:b2:4b:03:15:8d:
                    41:7e:04:13:46:26:5f:2a:61:11:3e:80:52:35:0d:
                    4c:f4:4b:f6:3d:02:6d:30:34:78:79:c9:dc:c7:55:
                    5a:82:ad:d7:9b:d3:43:99:7d:dc:5a:e1:8b:09:a3:
                    4e:76:9b:cf:1c:94:81:09:f1:3e:83:2e:37:92:e0:
                    7d:4a:fb:55:fa:26:5b:74:88:39:0c:d0:29:65:20:
                    3b:2d:27:c7:cd:95:48:ee:2a:50:b8:30:69:5c:10:
                    1d:80:24:74:3b:46:a1:6d:c5:f0:2a:5f:b2:50:33:
                    1f:1f:97:69:69:47:dc:10:6d:62:4e:2f:44:f2:38:
                    3b:c7:10:c8:05:17:bb:cf:fd:cb:a5:46:91:4d:f4:
                    f2:a4:51:79:d4:90:e1:32:91:02:9f:ac:2f:87:ce:
                    d1:c2:c4:5f:3a:cd:29:97:6f:6d:79:64:db:69:9f:
                    7e:91:1e:5a:f7:9f:f7:ad:aa:da:c5:3e:6a:b9:88:
                    1a:69:dd:5f:d4:48:35:93:94:0f:50:7b:0f:6d:5d:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:B6:A5:45:0C:C9:8C:96:9D:39:92:80:14:A7:65:E5:58:5B:56
            X509v3 Authority Key Identifier:
                keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:04:bb:1f:f2:f0:02:a7:cf:00:d0:bd:93:95:49:32:33:
         5e:2a:f4:15:48:aa:71:2f:01:74:d8:a0:a1:06:87:84:0a:ab:
         91:bf:50:23:aa:85:99:02:fe:4e:70:07:7d:29:10:84:49:a4:
         11:e6:c9:aa:82:4b:9a:10:3f:4c:6e:1d:48:53:3b:61:be:87:
         35:f6:26:49:84:1f:0e:93:d7:fa:8a:c7:38:9d:5b:18:97:85:
         10:c8:c6:21:44:43:69:4d:4c:4d:ae:8e:ba:f7:3d:0d:69:b0:
         a1:d9:c2:7c:67:b0:80:ad:1c:96:69:60:8d:46:85:57:ea:83:
         b7:d5:bd:5e:9b:8a:db:3a:32:12:da:aa:5c:e6:15:35:ff:69:
         d4:61:66:60:98:c4:b9:a3:34:de:c2:8b:16:f2:45:fb:46:de:
         dd:11:cf:81:bd:19:57:31:70:cd:0d:37:be:1e:3d:46:7f:6b:
         38:27:94:d7:97:92:e7:fa:8a:c0:55:53:47:0d:41:bc:ea:bc:
         7c:5c:9c:64:31:37:0b:51:47:d5:d9:5c:db:f3:15:c7:18:51:
         42:61:8e:f1:ac:74:e4:f3:2b:b1:75:b9:01:11:ab:5c:b5:b5:
         2a:40:80:81:a8:75:bb:37:d2:fa:49:18:70:14:b3:67:a3:98:
         fc:5a:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:08 2026 by rpki-client