Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File:                     2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier:          eTYDhGqQ6NBLy/lCVdEjH9aQmSBd6Vb/QHbd4gtqYiY=
Subject key identifier:   9C:1C:A6:09:2E:5F:FE:CA:F9:36:AD:6F:29:D5:5F:9B:BF:BF:CF:88
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer:       /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial:       019D284DC60F007DAE3379B2CD9F2233C9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number:          081D
Signing time:             Thu 26 Mar 2026 04:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:18 +0000
Files and hashes:         1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: bjnuAE3BIQJQGkHBAo8IzZKOwc9gIrspyvDTKuh7oXs=)
                          2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
                          3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c6:0f:00:7d:ae:33:79:b2:cd:9f:22:33:c9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
        Validity
            Not Before: Mar 26 04:01:18 2026 GMT
            Not After : Mar 27 04:01:18 2026 GMT
        Subject: CN=9c1ca6092e5ffecaf936ad6f29d55f9bbfbfcf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:b3:df:13:77:ca:dc:2b:3e:1d:ab:75:0e:
                    16:12:a6:51:46:ce:bf:69:82:63:cb:70:22:13:83:
                    52:8d:97:a8:59:9a:f6:c8:c7:0e:df:1f:52:92:97:
                    dc:32:fa:8f:b2:2e:64:36:df:20:ce:33:d0:24:b7:
                    fe:ec:26:42:bf:f5:f8:0d:45:ce:14:e1:a5:4b:0a:
                    e1:ac:7c:37:82:3a:18:7a:25:95:5a:76:fa:6c:c8:
                    42:31:65:3c:46:6e:50:23:a9:ef:43:c7:35:c5:82:
                    bc:33:b2:08:ed:2e:bb:24:d0:31:73:5e:78:53:47:
                    fc:f3:94:60:6d:36:7a:e9:b6:b4:81:be:f8:f6:35:
                    4d:d6:5e:92:4d:3e:71:5b:9e:f4:f7:8d:cd:5b:cc:
                    f1:e2:c9:48:c4:f4:05:4e:a4:4e:2a:f1:7d:12:06:
                    a4:ab:46:e8:35:26:70:f2:3e:e7:c9:97:f1:5a:d6:
                    d0:fa:3c:a5:2b:90:04:3a:e4:67:4d:e6:81:b2:f7:
                    45:15:9e:3c:6f:9d:3d:d4:67:bd:3d:69:e7:e3:37:
                    5a:62:9d:00:5f:77:f2:26:4f:72:3b:62:ac:c3:d3:
                    6d:27:0c:1c:51:b2:2f:5c:b0:39:b6:bc:88:94:20:
                    74:15:38:57:c2:a9:1a:14:de:17:0d:04:01:27:41:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:A6:09:2E:5F:FE:CA:F9:36:AD:6F:29:D5:5F:9B:BF:BF:CF:88
            X509v3 Authority Key Identifier:
                keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:9f:73:86:b2:02:4d:c0:63:94:85:a6:1a:b6:73:b7:8b:
         5a:0a:95:56:cf:3a:09:fa:82:53:cd:99:db:1c:29:c6:7e:63:
         dd:5a:01:e6:10:92:fb:11:79:8f:6c:0b:53:29:7b:01:10:fa:
         51:29:d0:76:3c:16:0a:d2:53:6e:a3:cd:28:ff:31:19:a0:4e:
         e2:18:92:ed:a9:34:1e:1a:98:8f:90:f5:03:fb:a1:88:c0:bf:
         0a:a8:43:a7:90:5a:ab:4b:a0:0f:41:28:65:9b:8c:70:fb:59:
         dd:4f:31:d4:78:d9:2d:f7:9d:74:db:d4:1c:d2:88:e0:92:5c:
         98:18:70:c0:59:2b:65:78:54:08:57:08:5b:34:b7:b0:22:ca:
         75:d3:6f:83:e5:72:19:c5:97:11:97:60:3e:39:45:ba:a5:dc:
         4c:b1:4d:6a:d4:a0:7d:ed:d3:01:1a:33:fa:01:56:6f:d2:49:
         31:74:59:26:8e:eb:5a:f1:1e:11:9a:e3:25:93:35:3c:d1:35:
         a0:a2:bc:79:bf:6c:f0:4b:ce:ad:6a:c3:65:02:85:06:b6:ac:
         2e:9d:a4:db:5f:01:91:a4:ff:71:f0:6b:0a:51:91:09:8c:af:
         e4:3f:4d:04:bd:3e:ef:e1:47:5d:4c:8e:b3:c6:a8:f2:fb:8e:
         d8:c1:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:29 2026 by rpki-client