Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          o/YabbisTfnYy7aYXsyjqU9rFiemL73/pp8pwNYJ+XE=
Subject key identifier:   B7:49:21:C5:11:11:51:45:91:71:00:C3:DF:D2:A5:83:0C:54:E4:3E
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       019D281712AAF86C073B89D4CE883C62186D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          1533
Signing time:             Thu 26 Mar 2026 03:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:33 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: Zo2xJrB5TD+hi3PTMVKfLYHAhAwoThqEKa3NqqUMG7A=)
                          2: PjyNMGY84TJ2cr5QJLc6HnzswgM.roa (hash: ZAnEXpXJffc4T6GUbV/LDI34CqWwT/3G+mLU5uuO0xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:17:12:aa:f8:6c:07:3b:89:d4:ce:88:3c:62:18:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Mar 26 03:01:33 2026 GMT
            Not After : Mar 27 03:01:33 2026 GMT
        Subject: CN=b74921c511115145917100c3dfd2a5830c54e43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:01:94:24:1a:b1:8d:f7:15:fa:8c:0e:a3:
                    bf:ca:49:3c:44:0a:4d:e9:78:6f:d3:24:e2:37:18:
                    95:c6:f3:24:69:0e:7f:10:72:76:af:df:fc:90:72:
                    55:30:56:fd:cc:79:78:d0:50:f5:55:51:f9:12:35:
                    57:94:47:3a:02:2f:2f:b2:88:55:a3:10:ea:07:8a:
                    c9:2f:6f:1b:60:7d:d1:3a:97:9c:4c:60:10:47:e4:
                    bb:4c:77:e0:a0:a1:00:a0:30:74:7e:68:73:6e:47:
                    16:68:5b:09:1f:95:33:e3:a0:18:ec:60:24:a5:06:
                    75:0a:55:72:7f:e9:c6:5d:91:7d:7f:76:70:ed:20:
                    e6:4d:c4:cd:c5:a7:ba:79:3c:1d:f4:17:e3:84:02:
                    f4:68:7d:c0:45:2e:2f:21:d9:37:c0:b7:df:7f:c7:
                    5d:1d:a2:63:c2:3d:40:58:ca:d2:5f:a4:0a:53:fa:
                    13:27:81:bc:ee:05:da:37:46:b6:1a:f3:16:fa:a3:
                    b7:96:c0:48:bb:4a:07:eb:c5:50:51:5d:27:c1:64:
                    f8:f4:f5:73:4b:4d:b8:de:22:14:68:ec:c2:37:04:
                    2e:a7:89:91:38:dd:83:08:5c:08:61:f2:a8:5e:94:
                    7d:88:dc:6f:82:00:a0:c3:91:25:c4:f6:20:e4:19:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:21:C5:11:11:51:45:91:71:00:C3:DF:D2:A5:83:0C:54:E4:3E
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:12:e3:30:dc:2e:5c:27:dd:ea:9c:a0:38:9d:6c:1a:75:d2:
         a9:52:5f:af:ac:da:34:05:69:e6:66:de:d0:d8:6b:fe:27:a4:
         22:43:7b:da:5d:ac:30:48:13:ab:3c:5e:7f:59:60:28:b5:74:
         49:84:c5:ee:c2:df:ee:57:a6:82:b4:72:fa:db:01:c7:47:98:
         83:3a:52:a4:8c:96:85:35:95:72:48:69:36:25:84:be:0d:63:
         0c:1d:98:8f:96:b4:90:8c:61:08:7d:7c:8f:de:fd:6d:cc:45:
         26:7e:c6:50:db:f7:98:95:30:3f:86:0c:ed:4b:64:68:02:b9:
         e8:ea:ca:40:26:d8:f5:a0:6e:ab:eb:22:32:00:38:58:b2:33:
         21:dc:07:de:15:b9:d0:97:5d:c7:f2:29:83:55:32:55:e1:ad:
         ac:a1:c8:28:f9:cb:84:50:2a:63:89:a1:9e:a6:98:cc:11:60:
         31:0b:b4:32:92:4d:77:0f:bd:64:3e:4e:24:31:de:3f:17:99:
         12:9b:d5:a2:c6:4a:a7:2f:c2:ce:ba:86:7e:10:e4:66:c1:5d:
         6f:c3:33:75:25:5f:ab:7f:0a:10:2e:12:b3:22:19:37:c6:b3:
         61:2d:eb:4d:19:ba:54:4a:8d:f3:1c:7f:22:e2:83:84:59:25:
         6e:40:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:19 2026 by rpki-client