Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          wwbeKY0n0ebTmiH3ijQ0bx315m79JXNJ2XDzX6LUWt0=
Subject key identifier:   76:1F:D4:4C:D2:57:92:00:EA:BF:25:08:6E:5B:C4:5C:95:66:BC:A7
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       019D26965A6CE00BAF832BB9CAB69C572F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          0DE0
Signing time:             Wed 25 Mar 2026 20:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:20 +0000
Files and hashes:         1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
                          2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
                          3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
                          4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: kXskCgYmUOFLhC89sy7RctNdb9mc+9q0Ywyw6HsCBzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:5a:6c:e0:0b:af:83:2b:b9:ca:b6:9c:57:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Mar 25 20:01:20 2026 GMT
            Not After : Mar 26 20:01:20 2026 GMT
        Subject: CN=761fd44cd2579200eabf25086e5bc45c9566bca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a1:8a:4c:36:99:72:79:35:68:28:3e:fc:99:
                    ad:30:27:a3:34:33:5e:0e:5b:90:13:55:e8:7a:49:
                    2c:05:bd:6c:db:f4:84:13:ea:d1:a1:a2:de:a5:cb:
                    ca:cb:8f:dd:e3:ce:49:e1:52:fd:f6:b0:63:e5:38:
                    12:7d:74:4f:6e:59:b1:11:1a:29:62:43:35:56:ef:
                    36:76:4c:1f:db:f1:75:0b:aa:8a:52:6f:b7:bd:f4:
                    aa:62:e1:5b:75:a7:d3:65:25:e9:d1:8d:2c:60:5e:
                    71:b2:f7:e5:ed:44:bc:1f:60:38:4c:a7:61:71:8a:
                    c4:24:ea:c7:b1:d7:7f:04:13:bd:d7:06:3f:03:b9:
                    52:07:c5:12:69:c7:37:a4:35:2a:10:a9:fb:c4:7c:
                    5b:af:41:9f:43:57:5f:9d:85:ff:e7:45:43:f8:e4:
                    52:83:cb:6f:0d:03:f0:b3:75:be:71:50:f9:dd:97:
                    af:77:00:fd:4d:c5:b6:82:6d:78:36:be:c8:e4:71:
                    c0:67:17:1d:52:45:45:5c:a8:c4:85:df:95:3d:4e:
                    4d:5c:a0:d3:46:d6:94:04:e4:20:25:e3:4e:6b:2e:
                    e3:6d:81:61:a8:b9:b6:c7:f0:67:42:f0:cd:40:fb:
                    6e:56:b5:66:1e:ca:cc:2b:52:cc:6d:26:72:d4:7b:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:D4:4C:D2:57:92:00:EA:BF:25:08:6E:5B:C4:5C:95:66:BC:A7
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:05:54:31:28:dd:94:c3:15:3a:43:51:bb:22:99:70:c1:a0:
         7d:3a:79:f4:65:7f:d6:f0:56:2a:ec:34:38:e2:bd:25:ac:f7:
         31:b2:f5:04:fa:b6:54:20:cf:a7:aa:c5:df:20:8e:a4:56:19:
         82:21:d0:c9:9c:89:e3:b7:15:61:57:32:fe:5e:6b:5a:e8:00:
         8c:1d:e0:c4:cb:38:75:98:dc:05:b4:5e:90:cd:1c:d5:d3:15:
         45:d3:71:1a:24:02:67:fa:cd:74:ef:42:3e:7d:df:f1:7b:71:
         69:56:b8:aa:18:9e:74:b8:53:9b:d4:41:60:36:5d:fc:c3:c8:
         ff:5d:20:c3:36:99:d5:05:18:43:51:1f:96:e8:ae:43:b1:12:
         2c:25:22:be:77:bd:b6:eb:02:e8:62:09:da:0c:15:42:60:7e:
         da:21:8e:55:26:8f:7c:e7:ff:7e:3a:00:69:46:47:e9:54:2e:
         59:2a:67:0e:c5:a6:46:e7:6e:76:ab:66:03:22:67:52:d9:3e:
         64:83:f7:ac:a0:66:e8:d4:ea:31:7a:8e:5c:aa:29:18:95:71:
         9e:6c:8c:66:bc:3c:44:db:af:14:3d:7f:ba:a0:7b:9d:a4:39:
         f7:5c:15:f4:51:b4:46:bb:a7:30:61:a8:c7:1a:93:c5:a6:b1:
         4e:16:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:46 2026 by rpki-client