Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          Mn5Wzv+kJOuSUHOYqUqhSZ8g3tWBFCZNSeMPA/eEXms=
Subject key identifier:   5C:1B:48:4E:E2:C1:C6:30:82:98:D3:00:1A:2A:07:61:9B:0F:C0:9F
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       019D2816B422F83B86BDC5C343A9E74A768C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          115F
Signing time:             Thu 26 Mar 2026 03:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:09 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: 0gD6LaK5m7epGGwY+pFsOIJwI9cO0K4Ylwny3rFAT9Q=)
                          2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:b4:22:f8:3b:86:bd:c5:c3:43:a9:e7:4a:76:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Mar 26 03:01:09 2026 GMT
            Not After : Mar 27 03:01:09 2026 GMT
        Subject: CN=5c1b484ee2c1c6308298d3001a2a07619b0fc09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:42:02:a8:b1:2c:61:0f:69:75:44:41:70:
                    a2:04:e0:4e:dc:0e:32:45:9b:eb:3b:cb:e6:f0:78:
                    58:d3:c4:d3:a8:77:2d:78:d6:e4:4a:91:64:25:53:
                    ea:1c:12:25:82:04:bd:11:fd:a6:e7:b4:ec:39:73:
                    a3:ad:e8:20:11:65:e4:c4:31:1f:98:ea:50:cb:97:
                    79:66:3f:4a:82:cb:34:7e:c9:b4:56:77:12:a4:84:
                    eb:fd:c2:d5:39:e7:01:ce:5c:b6:30:52:5c:64:e2:
                    20:ca:e1:13:06:fc:ee:17:7a:03:47:e7:c1:b5:fa:
                    5a:12:dc:f9:74:56:d7:5a:c1:63:f9:37:16:58:df:
                    94:c9:05:7e:45:e0:3d:d5:c0:28:0b:57:15:00:1e:
                    fe:7b:c5:cf:95:1a:07:d5:37:90:af:1a:70:81:d6:
                    3b:c6:bd:ac:5d:a9:26:ef:05:98:30:6b:f6:01:f3:
                    cb:1a:c0:4a:1f:90:0b:af:4c:f1:74:b8:b5:9e:c8:
                    c9:b2:40:4e:63:82:05:89:ea:bf:0c:e9:67:98:e7:
                    e5:d9:fc:26:17:80:0c:56:33:8c:d9:14:a3:4b:97:
                    2f:da:99:70:08:22:f0:86:49:ff:70:d8:8b:01:5d:
                    42:45:39:36:5a:24:81:9b:d1:a7:ad:49:45:3d:59:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:48:4E:E2:C1:C6:30:82:98:D3:00:1A:2A:07:61:9B:0F:C0:9F
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:13:7e:26:c6:1a:d5:1b:d9:6d:75:db:41:3b:7d:c5:34:
         3c:e9:28:84:ae:c0:74:81:bf:6a:3d:6a:ea:34:5a:f4:d5:6a:
         d4:a7:17:09:3d:d7:66:14:b5:47:25:8a:af:be:ed:a7:a7:62:
         07:38:d4:98:47:95:c3:f3:76:e3:c8:53:64:1f:5e:4c:0f:a6:
         d1:ba:3e:24:80:5d:02:04:92:86:40:16:d0:5c:0c:97:ef:08:
         55:d1:0b:37:6b:cd:ae:2b:2b:f8:75:e5:e2:83:8c:4f:3a:db:
         37:26:9c:0a:d1:a5:8c:55:1e:de:54:e1:f7:b1:23:83:3d:53:
         43:12:42:27:5d:ad:b7:cc:98:7e:bc:dd:68:08:54:05:1e:8d:
         a6:e3:35:de:5f:90:2c:81:f5:c2:6e:f1:94:83:29:13:1d:1f:
         bd:2b:f9:b8:a7:8a:fb:d7:e6:9c:04:ae:a4:f0:db:9d:01:8b:
         66:da:e3:25:89:a8:11:d7:54:bf:05:f0:ff:e6:dd:52:19:61:
         b3:f1:e6:cb:62:b1:22:6a:85:bb:7d:b0:f1:a8:ab:5f:40:66:
         44:86:90:f2:de:4b:4f:fd:84:a5:9d:f5:c3:ac:f1:bf:61:b9:
         16:4a:f8:6a:ef:d9:c4:de:92:16:33:29:42:a2:0c:90:be:41:
         a2:90:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:46 2026 by rpki-client