Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
File:                     pB6cBojcQS_Ce8DiQtcDmp34yGg.mft (raw, json)
Hash identifier:          3JmpSd5proufVHOiN1cXKb4x4anEYZSKQ4O7K+PRXPM=
Subject key identifier:   34:E8:5C:62:F6:90:64:3B:82:43:10:44:48:A3:B6:E1:EC:B5:0C:CF
Authority key identifier: A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68
Certificate issuer:       /CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
Certificate serial:       019D270485A2777EB928271813C6CB82CEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
Manifest number:          021F
Signing time:             Wed 25 Mar 2026 22:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:40 +0000
Files and hashes:         1: pB6cBojcQS_Ce8DiQtcDmp34yGg.crl (hash: OlpFwVV/MQ/RAoPPTWcNAtdmbVMzJS7qUUHjyfQSCIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:85:a2:77:7e:b9:28:27:18:13:c6:cb:82:ce:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
        Validity
            Not Before: Mar 25 22:01:40 2026 GMT
            Not After : Mar 26 22:01:40 2026 GMT
        Subject: CN=34e85c62f690643b8243104448a3b6e1ecb50ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:f2:07:83:81:0a:02:0c:f8:58:72:9d:d6:
                    56:6b:4d:62:3e:1a:54:8d:f2:07:2f:f6:e1:42:ec:
                    a7:b4:de:09:e0:17:e5:c5:d6:f6:46:85:a2:5b:9e:
                    d8:8c:a1:91:39:d9:1c:95:f6:c7:01:e1:e9:93:23:
                    ae:ff:f6:02:8c:0a:e4:9c:3c:be:0d:64:0e:6c:f8:
                    9a:d5:16:a6:4e:f1:61:d0:dd:b6:21:3f:42:5b:72:
                    5a:4e:fa:dd:13:58:e6:f6:b0:66:e4:68:b4:74:4c:
                    00:c3:7f:c6:9d:6d:80:c6:62:3d:7a:a0:62:2d:a9:
                    ae:11:39:b9:b6:1d:c0:24:33:d8:01:a1:97:1c:8b:
                    9c:5f:cb:7a:8f:c8:89:5a:85:f0:17:4b:42:ff:c4:
                    88:db:f5:23:53:c9:3f:71:34:f2:d7:ce:68:1e:cd:
                    90:9e:35:b4:a5:40:34:0e:d4:03:2c:bd:a9:94:a9:
                    0f:6e:9a:ff:47:ab:0c:4d:bb:94:20:aa:32:34:f0:
                    ab:c8:f9:27:e1:ab:ee:33:15:c5:4f:94:17:37:e7:
                    93:02:cd:9b:db:1d:3b:de:73:ff:35:44:70:d1:cd:
                    1d:b6:af:7b:5a:c0:38:90:79:04:7d:0b:db:02:fc:
                    a7:0a:cb:33:70:74:d5:d9:77:1a:56:a5:f6:a0:5e:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:5C:62:F6:90:64:3B:82:43:10:44:48:A3:B6:E1:EC:B5:0C:CF
            X509v3 Authority Key Identifier:
                keyid:A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:77:61:57:a2:17:54:be:e4:61:91:60:30:13:63:1f:53:07:
         57:7c:2a:28:a4:75:f5:be:a1:d1:9f:88:3b:2d:68:1d:78:38:
         5b:6e:1f:cd:d9:08:71:ac:00:a7:34:08:17:70:24:ae:9a:e5:
         fc:d4:cc:b2:94:8d:86:8f:4c:fa:e4:99:1b:b7:a9:4b:d1:9e:
         78:51:62:9d:1c:d6:c2:ce:cd:08:23:2d:84:ca:4a:f7:de:4a:
         ff:00:8c:6b:7d:8b:fd:ac:7d:3b:1d:be:33:94:96:06:17:0c:
         8d:3e:96:10:de:17:15:06:22:47:bc:8a:8e:61:8e:68:ab:06:
         f4:75:d0:f0:c0:86:06:25:16:51:eb:fb:ed:fa:a4:98:f6:cf:
         7c:1e:b3:e3:9d:7d:b7:39:04:8b:f2:fa:e6:3c:a2:e8:82:7d:
         3d:e3:4d:a1:4f:c3:00:12:8d:e2:b2:ea:85:29:2f:bc:ed:9e:
         20:a3:0e:fb:cf:03:21:6b:b5:21:d7:87:39:09:4a:e0:ab:c2:
         5b:6a:64:4b:21:53:11:a3:3c:64:3f:86:49:e8:5c:f1:85:98:
         22:10:af:3e:99:2b:a4:f9:73:71:db:00:10:42:c3:b1:e1:ef:
         fb:95:29:2a:e5:85:9c:87:7f:92:ad:c0:f1:bf:99:d4:8a:08:
         10:99:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:19 2026 by rpki-client