Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File:                     ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier:          rmTSHk4QJ1QE6IGjNVOiqJRCkbwa2xqn59wyxsRiZAc=
Subject key identifier:   AD:24:30:05:D7:82:3C:8B:A6:AB:34:88:09:EB:08:CD:53:73:5C:C1
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer:       /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial:       019D29973FEA2572D432038537936D9FADEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number:          0A46
Signing time:             Thu 26 Mar 2026 10:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:11 +0000
Files and hashes:         1: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: or0JaN0CzURXO/AbHjiSA+qNELjgAcGOH0e/AhfYg6Q=)
                          2: ubPnB4PKZFciw2YuGyPydMFGZ-U.roa (hash: iJugsfbsORnOo3TefxwEogbSbOIvbBeKh9lA8dSSeqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:3f:ea:25:72:d4:32:03:85:37:93:6d:9f:ad:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
        Validity
            Not Before: Mar 26 10:01:11 2026 GMT
            Not After : Mar 27 10:01:11 2026 GMT
        Subject: CN=ad243005d7823c8ba6ab348809eb08cd53735cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:a2:d4:13:d5:b8:fa:2d:8b:68:7a:56:e0:
                    69:75:25:25:47:0c:fe:1d:30:b5:0d:80:08:ef:93:
                    38:41:40:f2:d9:76:21:00:9f:c0:cd:b0:42:3f:c0:
                    a4:24:bf:67:b0:c2:23:c3:4e:1c:47:98:63:3a:c7:
                    08:b4:3a:9a:fa:0c:40:b8:f7:39:50:05:7d:72:ab:
                    6c:6b:04:44:db:9e:63:25:39:dd:ea:19:f6:4c:e4:
                    ab:c0:17:aa:25:1b:59:93:a2:6f:67:cb:8b:66:51:
                    69:06:80:54:c3:8d:8b:9b:43:2c:09:99:3f:64:e8:
                    a1:3f:9b:c3:9b:e2:89:df:ad:3c:a9:17:40:57:d7:
                    c6:63:88:89:1b:46:54:9c:18:10:46:7c:db:a3:5a:
                    42:dd:4e:94:0d:ba:09:fb:ff:67:0a:23:ca:90:50:
                    2a:b6:2e:ee:68:64:99:c7:6d:eb:bc:c0:a0:1d:fd:
                    c0:f1:d2:ae:d0:82:d0:aa:df:11:23:ca:f1:20:60:
                    21:f1:93:3d:c0:41:49:60:52:4f:8e:12:05:43:cb:
                    40:aa:2d:13:27:49:3d:9f:ad:c4:f6:ea:61:1e:f4:
                    76:1a:c3:15:9e:27:fd:6a:5c:94:03:d1:3b:04:15:
                    0c:94:0f:3d:a7:82:99:a0:1b:4d:9c:89:14:49:30:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:24:30:05:D7:82:3C:8B:A6:AB:34:88:09:EB:08:CD:53:73:5C:C1
            X509v3 Authority Key Identifier:
                keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:19:c2:50:55:1f:e8:3a:21:9d:80:e0:91:0b:ed:fe:24:
         0a:4d:48:a5:56:b4:26:e6:7e:21:60:ab:9c:77:51:d6:d0:f8:
         d5:83:ee:e0:95:c9:1c:13:b6:0d:67:bc:39:36:71:8c:e0:b5:
         e5:7c:b5:91:c5:34:b5:08:13:17:19:4f:e3:60:bd:8c:0d:3f:
         fc:66:70:01:7b:46:9a:40:a9:05:93:fa:3e:94:8b:34:4c:3a:
         ab:27:8f:e2:f8:f1:6a:7d:d9:25:77:db:13:75:ee:87:7d:6a:
         bf:05:ca:67:56:9c:81:49:f5:53:65:c9:b4:f2:ea:df:77:04:
         bc:b0:86:07:77:68:69:ce:2c:19:49:d7:d8:1b:33:31:df:db:
         d5:7d:65:f1:12:12:ec:47:e7:3b:25:f3:ab:36:fd:89:6b:62:
         25:b3:68:00:52:56:39:88:77:36:eb:9b:10:2f:91:bf:23:b8:
         10:01:71:69:04:48:a9:d8:29:6e:27:b7:2b:31:3f:ce:da:f4:
         dc:27:7d:68:e0:47:74:a8:59:d1:6a:b8:26:65:71:51:d3:bd:
         3d:ae:26:cf:52:a6:64:c7:4c:85:d2:0c:ba:19:55:d6:31:81:
         f2:97:4c:fa:0c:49:19:5a:1a:6a:a3:c3:49:76:47:56:d4:41:
         c6:26:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:23 2026 by rpki-client