Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          xHVSNiovDlgy4Cvjmn5S6ierLyw6zxSkMr9HyWWtIX4=
Subject key identifier:   C8:13:3C:23:60:5B:3C:C5:9B:D5:19:3F:7C:B7:F7:8F:35:18:48:DA
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       019D2884450F64C4DF54B6199944A4753DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          0847
Signing time:             Thu 26 Mar 2026 05:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:50 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: QpEVC35MscU8t8yqG6mPgYVUaBpzyelUV+pt+/ceECI=)
                          2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:45:0f:64:c4:df:54:b6:19:99:44:a4:75:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Mar 26 05:00:50 2026 GMT
            Not After : Mar 27 05:00:50 2026 GMT
        Subject: CN=c8133c23605b3cc59bd5193f7cb7f78f351848da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:2b:5b:4b:0b:67:40:54:cd:39:a2:08:dd:
                    fa:b9:73:08:63:5c:26:cb:e6:e5:2e:19:04:82:4f:
                    18:df:a0:50:95:da:76:39:60:97:44:ba:a6:85:fe:
                    5b:80:dc:3e:ef:5a:2d:a1:4f:62:19:27:19:16:5a:
                    c8:8f:a5:cc:2c:b1:bf:21:47:8f:35:63:ee:92:20:
                    8d:ba:dc:be:48:c8:72:74:b1:66:21:53:f3:69:a9:
                    c1:a0:b0:4e:0b:01:1d:3b:11:78:8c:ea:9a:b6:49:
                    0f:ab:0a:ef:0f:23:84:fd:69:7d:77:32:4b:31:e4:
                    55:eb:7a:18:4c:87:d5:00:23:3c:f6:78:ef:50:e9:
                    3c:91:60:78:8b:3d:a8:c4:28:f5:49:65:d5:b4:90:
                    70:08:6a:ef:d0:fe:b9:34:34:3d:03:e3:4b:0c:4d:
                    51:18:f1:d5:7e:36:b5:0a:3d:64:9c:04:59:2b:90:
                    58:b9:8c:8e:49:9e:ea:22:76:5c:a8:32:9e:13:90:
                    23:61:fb:8c:c1:d8:66:da:66:4f:23:f6:d5:3d:a1:
                    ae:c8:5e:3e:53:6c:29:10:9c:df:40:71:d3:c8:c4:
                    d2:17:f3:af:75:9c:c2:67:07:3b:87:68:1b:24:12:
                    3c:2b:3a:11:33:24:7b:2f:29:aa:81:c0:22:e0:c9:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:3C:23:60:5B:3C:C5:9B:D5:19:3F:7C:B7:F7:8F:35:18:48:DA
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:69:22:a2:5d:08:c2:50:e4:8d:6a:f5:69:53:a1:8f:73:03:
         01:6b:77:ea:eb:a4:3d:b1:27:4c:4d:c1:c9:dd:55:3a:da:16:
         ce:92:4a:a9:e1:6f:89:d8:98:23:71:42:fb:3e:3c:58:15:b9:
         c4:da:82:a2:d1:84:4a:ba:c9:25:c0:f5:3b:a6:03:10:5b:86:
         ed:86:0e:71:45:98:0c:ac:11:40:e2:4b:c1:64:d6:c3:74:af:
         d1:d3:2c:b5:d9:d5:78:a2:74:8f:e2:9a:fb:b8:7e:0d:c9:9b:
         56:13:27:36:c1:5e:1b:ba:3f:eb:d0:77:21:26:35:b4:09:38:
         67:f8:c7:55:46:1f:92:b2:65:71:93:e8:e5:e0:f8:d9:4b:b6:
         a2:6a:a2:ff:20:dc:54:9a:22:75:4d:f6:5c:59:82:c3:46:d2:
         14:75:8f:c7:30:9f:32:41:f8:f9:6c:3a:02:e5:63:83:1e:d1:
         54:24:8d:18:27:61:8d:71:ea:9e:09:d9:a1:4d:81:14:ac:d9:
         ab:14:48:10:99:95:ee:c9:c1:4f:40:1f:b2:8d:1e:23:1a:d7:
         ee:da:b3:0b:db:ae:01:19:6f:5d:51:dc:1c:b7:33:d5:6d:6d:
         43:27:fd:47:7b:bf:d1:29:a0:cc:68:7c:9c:77:73:04:8b:9f:
         49:b8:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:51 2026 by rpki-client