Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          xvkSIX1/n7XPHXglqwm68RakfpAjxKN//ztDs1PaZKI=
Subject key identifier:   1D:9F:48:77:46:F1:02:1F:08:6A:A3:BD:AF:73:B9:76:88:03:58:75
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       019D281652C78DA35189847EAAEFBC25942D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          093B
Signing time:             Thu 26 Mar 2026 03:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:44 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: ReJslcfBZrBRtRhcg+N9Cn1gPdd9z6WSzJshP6zg6r8=)
                          2: ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa (hash: gV8rVYlB+7jAAEqNCaLk0r1iqei/ZFmeHTI/zHMf8g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:52:c7:8d:a3:51:89:84:7e:aa:ef:bc:25:94:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Mar 26 03:00:44 2026 GMT
            Not After : Mar 27 03:00:44 2026 GMT
        Subject: CN=1d9f487746f1021f086aa3bdaf73b97688035875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:32:b1:f5:0b:3f:a1:01:3d:f8:7a:46:f7:a3:
                    9b:90:56:7e:d9:c9:6c:31:cc:46:5e:02:18:12:00:
                    e4:de:0f:f0:e8:96:21:91:ac:a9:d0:05:d8:d8:2c:
                    fb:b3:a2:ed:17:4d:8b:b4:df:2e:85:88:49:9f:af:
                    77:14:b3:11:bb:7c:30:62:fa:b2:aa:e2:cd:73:ad:
                    c3:4f:fe:cd:04:dc:4e:59:4b:95:62:14:ed:64:df:
                    70:6f:00:c1:5b:99:69:ad:36:70:93:da:31:39:15:
                    e2:4c:85:de:f9:5a:91:6e:d7:49:cd:7b:98:86:2f:
                    3e:d5:0a:88:1f:10:32:d8:c1:ef:0b:a0:e5:77:f7:
                    6f:49:1b:33:69:ae:5c:61:d2:2c:b1:c4:ec:2f:42:
                    17:0d:92:e2:2e:f4:fd:13:6d:b3:fe:8d:34:91:e3:
                    e3:92:11:b2:fd:ac:8c:f9:cc:af:9b:f9:e5:af:37:
                    d0:06:c3:5d:d3:c5:02:1e:5c:de:53:df:cb:b9:19:
                    97:5f:c1:eb:c2:d8:9a:f2:8d:8a:06:ba:80:07:7e:
                    dc:50:34:92:4a:10:55:00:92:dd:58:6f:65:71:00:
                    0e:54:b1:67:27:e2:59:e0:78:3e:e7:63:0c:5c:ed:
                    88:d6:07:2f:fa:b7:90:7b:3b:06:8c:21:95:54:70:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:48:77:46:F1:02:1F:08:6A:A3:BD:AF:73:B9:76:88:03:58:75
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:b7:10:30:9b:da:31:8d:e8:a3:37:26:9d:b0:3a:30:47:
         cb:ab:2f:b9:54:21:18:0c:89:29:f2:75:0c:d8:93:b2:35:6b:
         d3:f2:9e:f9:39:04:31:3e:57:d7:12:c1:41:a6:6b:4e:54:fa:
         20:db:42:52:dd:ad:22:6c:27:37:7f:30:00:af:15:67:d3:66:
         ea:5f:db:fe:b0:11:35:ba:59:9c:e2:ea:3e:c0:08:26:12:c8:
         ea:68:3a:67:bc:04:38:4e:cf:77:14:1c:a8:ab:a4:c9:c4:fd:
         42:bb:ba:eb:1b:0d:27:09:87:e7:4b:42:8d:a9:99:aa:cb:d8:
         31:ed:91:07:27:83:ba:ba:70:22:f3:36:89:fc:55:71:5c:be:
         74:69:0a:ba:d2:f9:56:94:32:48:59:0b:c2:0c:5c:69:b4:cf:
         4b:ad:c9:c6:ba:c0:87:6f:d2:e0:74:9c:43:f3:b5:a0:55:95:
         92:3e:4a:58:41:5f:84:28:03:77:b3:da:34:1a:a7:2c:de:33:
         d7:64:c5:db:d2:99:a5:4e:25:ec:b8:69:f7:1e:30:d7:6c:5c:
         a9:18:e8:40:d4:c6:b8:76:7b:e0:ec:70:1b:84:a2:c5:02:68:
         65:51:77:79:5b:25:61:d8:6d:62:4f:54:f5:97:95:fa:17:6a:
         55:a6:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:27 2026 by rpki-client