Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          97kjEfFxNIPxefz5AOtXPTu9FHFnzcOeoZtMXhNXwso=
Subject key identifier:   CC:0B:E5:BF:2F:72:95:45:13:F8:34:7F:0C:45:26:A8:B2:4A:AB:30
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       019D28167B2DCB691D2E1555A3BF84378A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          17CA
Signing time:             Thu 26 Mar 2026 03:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:55 +0000
Files and hashes:         1: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: 4NDxNl9JDCxFRbTNDGrFKOeGgAwl+lGdjZ8oIJbrjoY=)
                          2: sWZCCJ9mYF4x-AZV9gqyKfwmtqw.roa (hash: ENzKV46vc1yAkS1qAwIAJTRoo8u9W0tkvlFZn62IWoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:7b:2d:cb:69:1d:2e:15:55:a3:bf:84:37:8a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Mar 26 03:00:55 2026 GMT
            Not After : Mar 27 03:00:55 2026 GMT
        Subject: CN=cc0be5bf2f72954513f8347f0c4526a8b24aab30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:51:1e:bd:df:13:60:e8:95:a1:76:2a:73:
                    f3:6e:17:26:33:ff:16:1e:5e:7c:e5:7b:36:a5:fa:
                    9f:d0:0f:c8:79:3f:55:e7:77:4e:45:72:62:d4:bf:
                    cb:59:a4:ae:22:e0:2c:90:04:20:33:4e:3f:7c:0a:
                    95:a2:5a:42:2d:06:4e:82:11:b9:a9:6d:93:e5:6c:
                    0a:ee:56:1c:32:c4:49:37:01:c9:38:aa:f5:12:78:
                    31:f3:fe:7a:4b:a6:8b:a1:70:33:6b:11:98:3d:33:
                    6d:4a:9e:00:96:58:7f:7f:d5:b4:9a:7e:d5:55:01:
                    10:db:9f:c3:80:ec:7d:27:db:a6:9c:54:ab:99:a1:
                    58:c5:bc:74:28:57:31:62:ea:82:9a:8c:6e:79:22:
                    e0:69:6d:2d:4d:6a:3f:56:81:eb:58:bd:54:c5:4d:
                    9f:5f:e1:71:c2:2b:71:23:e9:2b:f6:4b:be:03:9a:
                    bd:9d:2f:4b:cd:ce:cb:53:8e:04:ab:d4:74:1a:28:
                    a8:d3:77:18:0d:30:dc:7c:97:6f:ba:05:e6:3c:12:
                    4b:e8:f1:87:de:2f:5f:78:06:fd:28:10:da:a9:49:
                    f4:03:38:8d:c2:f8:a7:b4:24:1a:21:95:a9:f7:ca:
                    52:07:21:93:62:73:91:d5:e0:ab:5e:90:31:23:26:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0B:E5:BF:2F:72:95:45:13:F8:34:7F:0C:45:26:A8:B2:4A:AB:30
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:1e:2c:4c:ee:b9:1a:f4:8e:ea:d3:29:a0:c7:da:47:15:
         3b:11:b9:59:aa:1e:25:b2:47:f4:b8:4b:1f:24:42:90:d0:de:
         48:d3:66:44:bd:80:3f:ba:1c:d5:23:3e:05:81:99:72:73:14:
         77:f4:3c:49:d4:82:95:87:bd:12:e6:87:60:a2:c6:fa:2f:7d:
         5d:21:c7:3b:7f:89:b3:b8:1e:a8:1c:8d:b7:71:2d:25:9e:4c:
         43:fa:48:d4:fd:07:a7:7c:bd:1a:8b:49:34:d9:bd:e1:68:e5:
         17:d1:d5:f0:c8:6c:71:2b:fd:8f:23:18:0f:c1:d1:81:35:62:
         0f:a6:22:9d:b7:13:4f:af:4f:ac:15:26:e3:2d:fd:25:3a:44:
         84:d6:1f:c0:30:9b:67:3b:75:c6:ed:c0:36:93:9c:2b:f9:bb:
         f0:41:bb:ae:bc:03:84:be:5b:96:2d:6f:83:a1:c2:77:e3:48:
         84:9c:cd:ef:33:b0:f1:bc:89:3c:38:20:f6:e8:ca:26:be:36:
         95:03:31:13:7c:0e:25:87:15:3e:0f:5b:c2:53:60:a7:de:81:
         09:3b:57:c7:15:37:75:bb:43:2f:03:35:ec:c5:2c:f1:79:aa:
         73:ec:9b:3c:d5:26:0a:51:93:c0:b5:ec:48:14:9e:14:44:f5:
         d0:89:6a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnsty2kdLhVVo7+EN4puMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNGYzNjVlNzgwNjRiNThjNDRkNDhjZmIzOTI5MWQzZmIx
ZDllMTAwHhcNMjYwMzI2MDMwMDU1WhcNMjYwMzI3MDMwMDU1WjAzMTEwLwYDVQQD
EyhjYzBiZTViZjJmNzI5NTQ1MTNmODM0N2YwYzQ1MjZhOGIyNGFhYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2lRHr3fE2DolaF2KnPzbhcmM/8W
Hl585Xs2pfqf0A/IeT9V53dORXJi1L/LWaSuIuAskAQgM04/fAqVolpCLQZOghG5
qW2T5WwK7lYcMsRJNwHJOKr1Engx8/56S6aLoXAzaxGYPTNtSp4Allh/f9W0mn7V
VQEQ25/DgOx9J9umnFSrmaFYxbx0KFcxYuqCmoxueSLgaW0tTWo/VoHrWL1UxU2f
X+FxwitxI+kr9ku+A5q9nS9Lzc7LU44Eq9R0Giio03cYDTDcfJdvugXmPBJL6PGH
3i9feAb9KBDaqUn0AziNwvintCQaIZWp98pSByGTYnOR1eCrXpAxIyZRXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwL5b8vcpVFE/g0fwxFJqiySqswMB8GA1UdIwQY
MBaAFKNPNl54BktYxE1Iz7OSkdP7HZ4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTIt
MDQxYjc4YWRhMjE1LzEvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTItMDQxYjc4YWRhMjE1
LzEvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV4eLEzu
uRr0jurTKaDH2kcVOxG5WaoeJbJH9LhLHyRCkNDeSNNmRL2AP7oc1SM+BYGZcnMU
d/Q8SdSClYe9EuaHYKLG+i99XSHHO3+Js7geqByNt3EtJZ5MQ/pI1P0Hp3y9GotJ
NNm94WjlF9HV8MhscSv9jyMYD8HRgTViD6YinbcTT69PrBUm4y39JTpEhNYfwDCb
Zzt1xu3ANpOcK/m78EG7rrwDhL5bli1vg6HCd+NIhJzN7zOw8byJPDgg9ujKJr42
lQMxE3wOJYcVPg9bwlNgp96BCTtXxxU3dbtDLwM17MUs8Xmqc+ybPNUmClGTwLXs
SBSeFET10IlqGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:51 2026 by rpki-client