Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File:                     54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier:          /MbqczwigNhnR8IO0x8xNNjvAaC3P6fD+tgR6JhN5hw=
Subject key identifier:   76:41:F1:FD:86:EB:1C:BD:D3:87:C2:01:80:46:D2:F0:64:04:AD:76
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer:       /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial:       019D2AE0691558B8BC75367E5275E20A3EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number:          0BE8
Signing time:             Thu 26 Mar 2026 16:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:43 +0000
Files and hashes:         1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: LnX14VvA12DTMWTzWzPkhh1LvKL3K5eIJ30przEWPyk=)
                          2: aUqlVjmOzMoYLK3rggjHHZVkeR4.roa (hash: uFZbFwap1ogUHkkZPIDDYBNmozeybb8jOg9N8qPokb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:69:15:58:b8:bc:75:36:7e:52:75:e2:0a:3e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
        Validity
            Not Before: Mar 26 16:00:43 2026 GMT
            Not After : Mar 27 16:00:43 2026 GMT
        Subject: CN=7641f1fd86eb1cbdd387c2018046d2f06404ad76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:b7:b6:f5:f1:0e:97:a7:38:16:be:3e:ad:
                    0b:e1:24:ea:72:26:f3:37:99:29:cd:59:fb:bc:52:
                    99:f8:6a:2e:03:6d:6d:70:bd:59:f3:d8:5f:b7:fb:
                    bf:e0:c1:34:03:24:4a:d9:50:85:17:5a:27:2d:78:
                    50:1e:23:81:aa:d1:f6:22:f7:41:c0:22:88:60:10:
                    ff:52:03:2a:f9:9d:e4:95:b9:b6:35:4f:b9:bf:b8:
                    ca:8d:b7:7c:2b:85:af:24:c4:0f:f2:7b:ff:34:52:
                    4b:ef:33:70:b7:2f:1d:8c:e0:54:0c:79:d0:98:96:
                    a2:fb:30:97:c3:b5:61:6d:b2:a3:ef:08:f8:c1:1f:
                    c5:31:c4:52:e4:79:3d:9f:28:91:aa:c2:68:4e:32:
                    63:b8:ce:9b:fe:4c:94:74:17:87:76:54:1b:85:1e:
                    d6:9c:14:22:6f:c2:38:0e:dd:e1:46:d2:da:e3:43:
                    cc:f6:69:43:e5:a8:ef:c5:7e:a5:7c:72:32:ff:d4:
                    17:ba:90:18:6d:e7:53:0b:90:47:03:57:2b:bc:59:
                    f0:e6:24:fe:0a:0e:cb:39:89:2b:6d:a6:71:75:56:
                    52:07:f5:16:62:b5:e8:29:90:08:86:42:3b:71:6c:
                    7b:03:cc:41:28:5a:9e:2e:86:3e:ad:f4:bb:a2:50:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:41:F1:FD:86:EB:1C:BD:D3:87:C2:01:80:46:D2:F0:64:04:AD:76
            X509v3 Authority Key Identifier:
                keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:c1:cd:0f:f6:06:59:77:df:4e:1c:b2:cc:11:4e:43:38:
         cb:c7:49:3c:af:86:38:61:5e:09:1c:57:a6:d6:fa:0e:26:33:
         5c:ef:a0:7a:4a:92:7d:1e:a7:0f:dd:51:dd:ae:43:5d:4f:c6:
         88:56:28:c8:2a:55:06:1c:d1:ce:9e:09:17:f6:ab:9a:e5:cd:
         75:fc:76:66:27:25:6d:84:8f:57:8f:9e:ee:ba:8d:d8:94:2d:
         dd:87:ae:3a:01:ed:2d:e7:c0:aa:b8:64:d7:c9:6e:77:28:16:
         04:42:23:5e:7e:e7:9d:8a:6a:76:ad:4a:fc:76:0c:1c:d4:ca:
         64:08:f2:71:b7:bb:a3:7d:13:d7:1d:a9:31:f9:69:48:dc:4a:
         f2:a9:f0:5b:9d:48:06:d3:86:af:a4:13:b1:aa:d4:99:3f:c4:
         58:bb:c9:e5:5d:25:7f:2b:84:8f:7a:d0:95:d7:25:89:8c:cd:
         92:65:5e:b3:db:ef:0e:31:18:29:dd:c9:0d:92:7c:9a:bd:72:
         90:3d:49:91:bc:a9:e4:00:a8:ff:4c:24:6e:84:92:f7:1f:f4:
         a7:65:0b:0d:20:a7:69:3d:e6:85:59:e7:bb:00:6e:1d:4a:bb:
         01:6b:a2:ab:23:93:f8:52:cd:1f:36:a5:f9:15:df:3e:91:96:
         5a:ff:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:00 2026 by rpki-client