Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File:                     3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier:          yUUan/ZMmunZF6Y/a038dZQ7vxzc11Ky1xNYfDN16A8=
Subject key identifier:   47:47:D2:0B:79:AE:EF:A9:8E:B3:F3:DE:71:5D:13:1F:D7:E0:B8:B4
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer:       /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial:       019D27A880A7ABCD7987B18441FC6BE334EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:47 +0000
Files and hashes:         1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: YzUicReky8jfLtIebNRnnxAntRJUFx087UMJ4jh7gv0=)
                          2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:80:a7:ab:cd:79:87:b1:84:41:fc:6b:e3:34:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
        Validity
            Not Before: Mar 26 01:00:47 2026 GMT
            Not After : Mar 27 01:00:47 2026 GMT
        Subject: CN=4747d20b79aeefa98eb3f3de715d131fd7e0b8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:1d:7e:e0:2a:90:ee:ed:f2:41:79:38:aa:
                    51:f2:67:6f:79:4d:03:cc:32:2a:c3:cd:a2:13:fa:
                    ed:ff:ea:7d:f3:78:41:f4:06:99:5d:40:87:31:2a:
                    f0:1f:0c:64:97:81:10:0a:f2:09:a8:7f:57:e8:5a:
                    01:62:cd:da:3e:4f:4f:7f:17:58:d3:da:0f:6f:18:
                    22:47:c2:6d:6b:6c:94:82:d0:03:29:97:6b:45:4c:
                    fc:3d:b4:ff:55:6c:16:02:d9:b5:a6:a0:cd:cb:52:
                    6b:1c:10:25:f1:b4:13:d9:da:7a:a2:ff:69:9c:16:
                    83:37:54:c3:b1:e5:a7:a6:06:50:6f:8b:be:33:66:
                    c7:77:e8:db:90:0c:62:9b:fd:52:0c:a7:75:f9:2a:
                    37:ab:76:f0:09:0e:67:e7:dd:2f:69:f1:38:2a:17:
                    43:63:a9:ab:fb:4f:fc:0b:c9:a0:6a:ea:3d:70:79:
                    85:4f:b2:e5:af:5e:f2:83:cd:be:ec:04:80:e7:66:
                    bf:7a:dc:d1:ba:ef:67:92:3c:d1:aa:9a:25:3e:30:
                    41:76:50:49:2b:73:89:58:1d:65:6b:31:66:8d:a9:
                    f7:f2:30:48:25:4b:32:37:f6:01:59:c0:e1:c6:06:
                    e3:22:d0:92:7c:df:05:b4:ab:1f:fe:2a:e6:3b:b2:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:D2:0B:79:AE:EF:A9:8E:B3:F3:DE:71:5D:13:1F:D7:E0:B8:B4
            X509v3 Authority Key Identifier:
                keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:36:f2:d4:cd:11:91:48:54:29:4e:14:9f:c2:a4:e0:3d:
         d1:b9:bc:b3:54:52:d2:5f:d3:23:b9:ea:9f:a1:d2:d2:71:97:
         76:18:8f:dc:d9:b4:01:ca:a2:2e:a1:6e:9c:b0:da:58:04:a0:
         2e:78:4f:d8:bc:68:28:5c:5a:f7:23:9b:8b:b1:e1:40:2a:03:
         d7:93:ca:4b:d7:b2:0a:3b:42:92:53:9e:dc:48:30:ba:20:d4:
         fe:78:4f:5b:6f:8d:b0:9a:cf:b3:ab:2f:05:b9:18:31:88:5a:
         5c:91:fb:25:2c:e2:1d:6c:b8:10:60:c6:29:13:02:ba:0f:00:
         59:20:53:9c:65:9d:6e:0e:c0:9d:38:f7:7d:7c:01:54:17:fc:
         6a:54:19:a8:bf:5f:08:d6:5b:da:41:67:88:10:14:02:e6:4e:
         11:67:d5:da:44:a2:26:94:e8:6b:2a:41:e6:b2:74:f9:51:e2:
         13:7c:88:92:28:d2:4a:41:99:97:b7:fa:bd:a2:3b:9f:1c:d2:
         0a:8b:8e:8a:4c:cb:e2:b5:de:ab:90:df:95:0a:c5:6b:92:88:
         b2:4a:c3:7a:2a:4d:ba:dc:8d:12:b3:9d:47:e9:e0:be:4e:d1:
         62:bf:0f:ae:fb:12:e3:b9:cc:f3:6e:ef:94:ee:73:d6:ff:be:
         1a:31:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:00:36 2026 by rpki-client