Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File:                     P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier:          yD1H4sDrFkTjBM068jloevjjgceascqU8xh491YfrQc=
Subject key identifier:   36:A2:42:8E:ED:AD:00:24:AB:FF:F7:54:31:CE:B1:23:49:5D:50:BE
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer:       /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial:       019D27DFDD7DCE22410F82B026474EE06B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number:          180B
Signing time:             Thu 26 Mar 2026 02:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:15 +0000
Files and hashes:         1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: ju4DNSKivu/k49wx5HeEFGo4olFO6O4d+2Gk9koKXvM=)
                          2: gU_DFsw1i7Mrmms493aHhV3X97I.roa (hash: Xuww54GOBuOopCkJwxsjxENEGeQxpUGHwuosFzJt3EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:dd:7d:ce:22:41:0f:82:b0:26:47:4e:e0:6b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
        Validity
            Not Before: Mar 26 02:01:15 2026 GMT
            Not After : Mar 27 02:01:15 2026 GMT
        Subject: CN=36a2428eedad0024abfff75431ceb123495d50be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:de:76:d7:66:55:4e:e0:dd:f3:1b:f2:ac:
                    29:f1:63:04:5e:18:8e:77:aa:ac:f9:a1:94:bb:25:
                    c5:3d:c5:70:55:c2:8a:8f:0f:2c:bd:90:cf:6a:db:
                    47:6b:c6:61:60:b5:65:a3:b3:9d:74:e8:59:09:8a:
                    d4:04:a8:90:eb:e8:ed:1a:45:e4:0a:62:e1:d4:c4:
                    2e:7c:e3:e3:b9:99:2b:de:d7:d1:ae:8c:c0:73:24:
                    5f:14:a4:03:82:54:17:8d:07:be:ba:d3:ee:b3:2d:
                    75:ee:2f:cf:b2:10:d0:93:5e:93:35:ce:2f:3e:e4:
                    cc:51:9e:f5:31:a9:f4:30:02:54:38:29:19:fd:99:
                    c3:d4:c9:b5:64:d5:2c:a5:13:80:2a:0e:9d:c1:b2:
                    a2:ad:42:dd:e8:7f:53:0e:53:b3:bd:8d:71:80:ec:
                    a2:4e:c3:01:18:ab:bf:2e:32:c6:50:5b:9c:0c:77:
                    da:00:aa:13:5c:32:48:3e:86:79:bf:92:56:5a:eb:
                    85:b5:e1:89:6c:71:b0:e9:3a:31:c9:99:49:d9:36:
                    45:53:3b:ca:aa:c2:da:a9:d8:cc:13:0c:c4:4e:fa:
                    00:40:cb:87:35:cf:73:7b:17:ae:85:ef:18:82:5e:
                    14:dc:f4:95:b2:24:14:59:95:2b:e1:6e:90:39:22:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:42:8E:ED:AD:00:24:AB:FF:F7:54:31:CE:B1:23:49:5D:50:BE
            X509v3 Authority Key Identifier:
                keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d1:a7:98:20:d1:52:f5:33:a6:05:09:64:13:c8:46:ab:94:
         7c:0b:f6:ee:d9:09:3a:32:93:74:20:fa:5f:e2:bf:3e:10:3c:
         88:20:93:eb:84:06:b9:1e:4e:43:de:8b:71:d2:48:9c:9f:e9:
         b0:4a:df:a0:89:4c:90:0c:e2:ad:36:83:d5:cd:66:b3:6f:ee:
         77:8d:74:14:fd:35:c7:ef:e8:eb:37:7c:2d:bc:d4:37:90:5f:
         f6:64:78:15:e9:2e:69:7f:55:10:df:7f:74:2e:40:8a:33:90:
         5a:70:cb:c6:55:db:76:71:82:df:17:a0:42:b9:ed:49:97:7b:
         f8:8f:b4:79:1b:0b:60:28:0f:6a:85:e8:4f:31:df:9d:6a:0b:
         b2:4f:0c:55:88:0e:f2:13:3c:af:71:38:ee:7b:51:4a:42:52:
         1a:bf:2b:75:e0:8d:87:dd:a1:15:c7:37:7d:a1:44:7c:61:cd:
         da:8f:fe:26:c1:06:d5:c0:88:30:39:bc:84:77:b6:b5:f8:c5:
         5d:4d:60:65:4f:20:a7:f9:ec:3f:92:43:e5:b5:68:25:fc:a6:
         9b:84:a1:4b:c9:3e:6d:99:85:4a:57:87:21:cc:cd:1e:44:9f:
         a3:fd:3e:f6:17:7d:b0:42:d7:d9:a0:16:9a:e5:13:d8:9b:75:
         29:ae:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:49 2026 by rpki-client