Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
File:                     51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json)
Hash identifier:          eD/StscIbZILDcbkUX4x9aIGBJwWcm3FXe4DuDJfcSs=
Subject key identifier:   A9:F6:6B:DA:99:95:6F:76:C0:CF:E3:97:DB:77:9E:17:0F:AE:36:57
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Certificate issuer:       /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial:       019D2884397ED313D1720BF7416F5389E1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
Manifest number:          0AFA
Signing time:             Thu 26 Mar 2026 05:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:47 +0000
Files and hashes:         1: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: DTCunjtZJX1Fbsm4epitvdVzJwZ07uAxUcf9F/Jtjw4=)
                          2: NSaVqXW-BYNVKVrMtAdLzttEo10.roa (hash: KZjofyx19Ipt9TS6sfl4V56sa17bROc+lLGgg3vy/tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:39:7e:d3:13:d1:72:0b:f7:41:6f:53:89:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
        Validity
            Not Before: Mar 26 05:00:47 2026 GMT
            Not After : Mar 27 05:00:47 2026 GMT
        Subject: CN=a9f66bda99956f76c0cfe397db779e170fae3657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:79:1b:73:31:96:ae:37:47:cc:06:21:4a:
                    a4:06:2d:d7:42:c3:a0:cc:80:eb:0f:4c:9e:78:32:
                    67:78:97:dd:5c:79:ea:c8:92:ee:62:8a:94:f0:38:
                    08:ef:20:51:31:27:d9:68:64:31:5d:a5:2c:bb:eb:
                    85:f9:4f:2f:fd:8e:7e:5f:16:06:8b:87:e2:f3:2b:
                    6f:d5:13:fb:4e:4a:83:b6:39:55:f8:43:bc:13:54:
                    c7:73:5a:55:2a:d9:71:f0:95:01:97:e9:11:d8:40:
                    34:23:99:f2:d6:83:ec:8a:2a:75:ec:ae:cc:b3:99:
                    2a:fc:6d:8f:2b:20:d9:c4:bf:e1:0a:5e:b4:91:fd:
                    4f:d7:41:44:6f:83:f6:81:20:fc:50:d4:c6:c1:66:
                    cd:9e:fb:1b:de:52:4d:d0:f7:98:73:87:3f:4e:dc:
                    13:dd:9a:d4:dc:84:76:04:97:94:da:ed:dd:c7:68:
                    09:6a:62:bb:ad:6c:72:36:56:d4:bb:45:c7:f2:e3:
                    f0:7f:a8:48:ec:61:83:c1:be:a1:5f:16:b2:90:dc:
                    b7:5c:c6:fc:28:8a:a3:5a:a5:dc:12:15:f1:1a:ef:
                    88:d3:24:41:a9:ae:87:64:aa:d7:48:df:93:50:08:
                    18:64:6b:a8:13:88:8e:c7:0d:dc:db:95:2d:3a:8b:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:6B:DA:99:95:6F:76:C0:CF:E3:97:DB:77:9E:17:0F:AE:36:57
            X509v3 Authority Key Identifier:
                keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:e3:b4:89:b6:e4:4c:d6:f1:a1:1b:a5:35:41:ec:cd:4a:
         df:0d:a7:9d:91:64:73:00:58:6c:94:72:6a:de:66:2f:ab:69:
         fa:2f:c9:e6:62:91:c7:3c:8b:b7:53:c7:48:e6:c1:94:11:43:
         d7:e1:f8:d9:e9:c1:72:85:29:a0:e1:a3:c9:4d:d2:41:91:03:
         ca:be:f8:bf:6d:97:8d:e2:cb:d8:48:db:e1:65:88:1a:8c:aa:
         8e:6b:7a:9d:ad:cc:98:4d:10:f6:97:2f:3e:a2:9b:80:ea:43:
         7b:3d:26:9a:fc:56:0e:7f:0f:a8:66:a8:d3:d6:94:07:cf:41:
         ee:ea:73:37:8f:d4:a2:af:57:a4:43:e1:30:48:08:79:da:39:
         80:09:21:e8:b5:f9:6f:16:12:f3:10:75:f8:ec:9f:79:6d:48:
         f4:4b:84:2e:cf:90:10:29:d5:ef:d6:7f:cb:bb:73:88:46:fc:
         12:2e:47:d5:42:c7:32:88:f8:80:a8:22:3f:40:c6:78:5c:63:
         76:04:71:7e:da:bd:74:77:48:26:92:33:8c:34:e0:be:7a:77:
         b6:98:a7:2e:15:37:e4:a1:7f:87:0f:38:04:a9:62:5a:61:98:
         cf:1e:fe:12:77:26:0c:03:7e:42:82:d0:10:1e:97:ec:11:62:
         79:59:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:09 2026 by rpki-client