Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          Iy8Qcq0APkybgYazv7RqD/602HvxiilCTzoCRfHWOqg=
Subject key identifier:   12:4B:CB:A5:14:A3:D1:93:1D:EF:EE:B6:CC:7D:A1:1C:D8:C6:C3:79
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       019D2A7281D4B4A4A7535FE1C3CBEC8F26C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          18AD
Signing time:             Thu 26 Mar 2026 14:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:40 +0000
Files and hashes:         1: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: aPPKcjprM/Ilyn2iVSaUc+39ZINb2508RjeYapM7znE=)
                          2: IGRV2WsskuWTSjE61k7EJ5BQL_g.roa (hash: TD0j7saLbQNy5wP2+Z7EAP+DfzUHpEljN22YPu7FxcQ=)
                          3: Kc_ZYw3v8hIzmM1zcgt9F5cxL98.roa (hash: Lw1rg+/Tz8s8iqnT6INdOtQPU4yz9vyMzF8Or+39BWE=)
                          4: OwT3MWkGmy8nucB77AIErlwv-c8.roa (hash: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58=)
                          5: ei49HQBepZfijJONn1YXG9qTwnQ.roa (hash: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA=)
                          6: srVqtN9AKuKob17qSxiXLthPNyw.roa (hash: +JQZjxz4atLwzjKZMuA0Nmi1UuJgxYV5FzyfEPCpnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:81:d4:b4:a4:a7:53:5f:e1:c3:cb:ec:8f:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Mar 26 14:00:40 2026 GMT
            Not After : Mar 27 14:00:40 2026 GMT
        Subject: CN=124bcba514a3d1931defeeb6cc7da11cd8c6c379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:96:32:35:5e:0f:d0:37:90:e9:50:a4:89:
                    19:02:e6:df:03:02:24:e1:dd:a8:cc:a4:6a:b3:10:
                    3f:9d:ef:fc:94:9f:ac:be:6e:ec:97:35:a3:a1:e2:
                    7b:7e:a6:12:da:88:c1:23:fc:d3:2e:db:c6:5f:1f:
                    77:e5:7a:ce:bd:8d:b8:cc:31:fd:a2:8b:ba:06:f6:
                    89:d4:a4:7e:47:e9:4a:d8:8b:f6:a8:09:40:5c:d8:
                    92:e0:20:f2:28:19:cb:3a:f3:f8:06:c9:6b:e6:45:
                    c9:64:43:17:34:ea:4c:18:76:cb:9e:4f:ec:2c:fc:
                    03:34:dc:83:89:89:42:83:60:8d:e3:d3:b3:27:46:
                    1a:b2:11:3e:2d:00:e4:6b:da:02:6d:a3:37:6d:17:
                    eb:fe:7b:5e:fa:d5:2e:87:2a:c6:ca:c8:73:73:bd:
                    d9:31:dc:9e:83:e6:4e:05:ce:63:5e:c7:9a:d3:fb:
                    b5:39:27:c1:fb:64:4e:88:0f:cf:cb:75:3c:12:2e:
                    d9:c3:46:b8:e3:b6:c4:9f:1e:f2:87:74:76:9e:bf:
                    3d:c9:11:f5:d3:7a:d7:fa:4b:9f:51:16:58:72:5b:
                    bb:a2:8f:6a:8a:5a:3a:9a:67:91:50:8f:15:18:c9:
                    73:c1:a0:e9:4f:3f:a0:50:3c:cf:ae:92:60:f7:28:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:CB:A5:14:A3:D1:93:1D:EF:EE:B6:CC:7D:A1:1C:D8:C6:C3:79
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:f1:54:63:33:c7:45:ad:92:7d:d7:2c:d5:2a:cb:92:a4:
         47:23:57:1f:67:7f:9f:1a:51:fa:44:a6:0e:b0:7d:51:78:db:
         17:3f:14:09:c1:ee:94:fd:d6:32:d8:37:e1:5c:13:1d:97:be:
         2f:57:29:1a:ae:06:ba:0f:1d:52:ad:1f:1f:3e:e9:a0:87:f1:
         f5:3b:d1:92:cf:5d:9a:f9:c1:93:8d:f0:8a:a9:d0:f5:f2:67:
         f2:b0:30:c8:a8:b4:ec:c6:89:b6:7d:c8:de:13:40:10:f6:59:
         68:ec:99:70:d3:8d:be:04:0f:89:9a:fc:47:14:f4:6e:af:57:
         c1:ef:4a:f2:92:71:df:17:79:1f:ee:68:4b:82:a2:bd:b8:56:
         4e:08:b3:21:98:97:28:ff:d3:85:99:6f:7d:85:88:eb:f1:59:
         16:a9:48:69:68:86:42:07:3e:bf:b7:88:1e:b0:30:74:bf:b4:
         73:63:81:74:01:4a:00:be:c5:87:10:84:cd:46:88:c4:84:58:
         87:97:6c:74:00:cd:4d:c3:25:22:58:e4:f7:8b:25:b8:98:1d:
         51:f6:9b:ba:13:ac:5f:fc:14:98:5c:3c:26:79:59:f0:5f:79:
         cb:92:02:32:6c:b4:79:21:c8:0e:c5:07:db:ba:5f:a9:d6:9a:
         24:81:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:50 2026 by rpki-client