Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          pXR1RpBkhj9jmelpRoPRwJ3kCl3B1sbDVrYu07vx60Y=
Subject key identifier:   6C:40:19:E4:38:88:02:05:92:6F:2A:9A:09:95:3C:3A:60:BD:BD:FE
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       019D254C962007CB45885D538B4BA4B32E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          4D
Signing time:             Wed 25 Mar 2026 14:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:09 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: zvGTwsXlJfJNayarc2MvT/qxR1ujTIWQXyR/KbXO4eY=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:96:20:07:cb:45:88:5d:53:8b:4b:a4:b3:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Mar 25 14:01:09 2026 GMT
            Not After : Mar 26 14:01:09 2026 GMT
        Subject: CN=6c4019e438880205926f2a9a09953c3a60bdbdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:c3:7e:9b:5e:a2:05:0e:df:76:57:3b:84:
                    1d:8c:80:3c:b2:1a:b1:cd:5d:43:db:f6:df:b1:a8:
                    c4:31:61:b1:10:b2:ef:99:c2:2d:13:47:80:27:c1:
                    2e:f7:e6:d9:12:01:00:6f:ad:0d:29:4f:c5:cf:a4:
                    bb:2e:b3:0a:d8:a7:84:76:9d:ff:36:35:6f:5e:ca:
                    04:b7:7c:dc:6f:15:6e:23:43:91:d4:10:76:bd:4f:
                    d9:50:05:7b:b3:dd:a7:2c:b5:e6:6e:53:67:b6:2a:
                    58:71:b6:ed:e4:a5:80:d5:b1:a9:7d:d2:75:55:9e:
                    f1:3a:04:d1:6b:01:9a:39:bc:d5:99:99:2d:66:59:
                    8f:6a:9e:fe:88:14:5b:a2:fc:e0:96:2f:a7:a0:7c:
                    c4:b3:c4:40:9a:e4:cf:e1:90:2e:16:63:9e:36:e7:
                    60:23:6b:53:f1:0a:0d:72:46:12:3d:fd:62:9c:8e:
                    3f:bf:c6:58:f0:f9:58:d2:cc:7c:fa:04:99:01:a2:
                    fb:71:66:1d:c6:87:dc:d2:41:4c:3c:e7:f3:a8:c8:
                    98:4e:53:b0:7b:4e:72:df:60:1c:cc:e5:e0:c3:98:
                    2d:a1:65:45:51:f1:ff:f5:3b:a8:5a:d2:e0:25:65:
                    34:a9:bd:3b:6b:af:2b:1f:26:3a:b9:e9:ee:a4:fd:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:19:E4:38:88:02:05:92:6F:2A:9A:09:95:3C:3A:60:BD:BD:FE
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:62:06:c9:78:12:44:3b:6b:9e:8a:b6:3e:3f:1d:7e:4c:
         5b:cd:7f:4d:7a:bf:97:0e:a0:28:84:ef:ed:b6:e2:39:62:a9:
         76:17:9e:85:7a:be:b0:61:a5:57:61:00:7e:50:e8:95:a0:9f:
         60:bd:00:78:28:b1:47:6a:1c:1c:6e:b2:f8:b3:95:e9:64:ca:
         f2:59:dd:63:ea:f6:06:1f:71:78:84:62:0b:1a:64:d4:10:9b:
         be:42:6c:ce:e1:5f:a4:98:ae:53:94:25:e7:b4:b3:d6:09:97:
         09:f0:97:e7:9b:4e:cd:e8:f7:e2:4c:65:c1:b4:9a:29:ef:66:
         32:c8:0b:83:a2:e3:0f:94:eb:a4:a8:92:49:bc:e2:15:2e:1d:
         72:dd:8b:a8:87:7d:74:92:d7:6c:64:7a:6d:85:e1:7f:da:0a:
         91:bb:b9:7e:d2:80:e0:0d:1c:f2:25:e8:8d:d6:45:5d:9e:fe:
         05:94:f0:fc:6a:e8:d0:cd:3c:7f:ec:4f:c6:7e:08:e9:ba:a7:
         a9:5f:6b:3e:09:51:b6:ac:40:ad:5a:6b:8b:ed:a8:cb:05:0f:
         5f:c7:de:65:de:ab:fb:15:5d:9e:46:bb:98:69:91:3e:56:31:
         4b:95:32:2b:a6:9e:c0:16:53:fb:23:d8:cb:e9:33:69:2a:cb:
         b2:2a:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:17 2026 by rpki-client