Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          GYJYBkzCzflDuGfOWC0NZ0PPU7fZ8vJdCncwXL/WBPI=
Subject key identifier:   EA:96:33:03:65:D4:E8:A0:0C:50:9D:03:8D:72:2D:B0:95:8E:2A:2E
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       019D26CD5713C904B1A98813199DCD49A832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 21:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:24 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: 8vdapXgy70rzj3YWZGeDIfXXcy9pPr0UzBeRQueKsW4=)
                          2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:57:13:c9:04:b1:a9:88:13:19:9d:cd:49:a8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: Mar 25 21:01:24 2026 GMT
            Not After : Mar 26 21:01:24 2026 GMT
        Subject: CN=ea96330365d4e8a00c509d038d722db0958e2a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:e1:ec:97:90:91:4f:ba:3d:76:b1:b1:7d:
                    e7:28:e0:4c:c3:df:c3:b1:57:a1:f3:11:a0:fd:67:
                    f3:17:f8:6f:43:b8:c9:1f:66:43:39:ac:dc:ec:a1:
                    45:6f:1c:d5:1c:49:7a:0d:57:d2:27:3d:9a:76:94:
                    63:f9:5f:3c:f9:32:2e:25:a0:88:b5:fc:aa:09:3a:
                    2f:a6:09:ab:c7:65:66:4c:d2:e7:ae:89:7d:47:a3:
                    ed:e4:be:2e:f6:e3:ce:9c:b2:c0:75:71:e0:2b:de:
                    d6:4e:ef:bc:5a:4b:80:1b:66:33:85:57:68:fe:b5:
                    70:5b:96:c4:87:49:fd:c6:ee:c8:92:d8:ec:91:6a:
                    6b:57:54:74:2c:bf:f4:93:4f:f1:47:df:85:6b:d9:
                    f9:ec:a8:75:ed:56:3c:58:17:eb:0a:3d:33:b8:73:
                    0d:53:50:c7:c1:c4:e2:4f:38:f0:ad:31:c8:4a:70:
                    a3:93:cf:6b:a5:71:23:61:51:fd:6f:f1:b0:3d:4e:
                    d4:f2:19:30:91:23:f0:ed:11:a7:0f:06:c9:da:81:
                    0e:95:9c:47:91:5d:b1:90:cb:2b:99:1a:65:8d:ec:
                    52:d1:17:99:76:3f:83:ef:f9:c0:d3:a0:0f:6d:6d:
                    be:d8:de:a5:be:af:3b:58:1f:3c:7f:a2:e2:52:86:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:33:03:65:D4:E8:A0:0C:50:9D:03:8D:72:2D:B0:95:8E:2A:2E
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:f8:40:3d:9a:9d:3b:9c:3c:e2:26:f6:e8:59:f0:88:b8:
         2b:58:c3:6f:5c:63:09:23:c9:63:47:83:84:e9:3f:92:af:37:
         25:39:61:4f:af:5f:ef:58:f2:d2:0f:90:61:73:4c:5f:30:38:
         ad:5a:62:75:6f:ea:9d:f4:02:9d:2b:63:db:41:aa:70:69:3b:
         93:a8:dc:58:6d:d6:3e:97:9a:c4:36:7f:5b:7b:d1:63:03:8d:
         f4:61:51:82:09:c5:45:2b:26:43:03:29:6d:85:96:2d:a0:d9:
         28:34:9a:ef:6c:23:cd:9c:58:96:47:78:70:dd:4f:0c:6b:a8:
         90:0e:54:87:9f:f1:7f:e2:02:93:9e:52:61:6c:30:fc:9a:9b:
         cf:4a:36:81:c4:70:06:3b:eb:d6:41:a9:cc:69:81:90:6e:0b:
         d2:6a:db:2c:74:44:62:98:e2:38:5c:66:4b:33:7b:94:99:8a:
         cd:70:db:14:4d:f1:f4:5f:1e:de:e1:ff:ae:70:c1:b4:57:2c:
         19:dd:72:45:af:8f:1a:1c:b1:4a:71:2f:a3:20:41:f5:d4:08:
         b4:f1:94:a8:83:6b:9c:28:e0:6e:37:ec:5b:25:35:93:e7:bd:
         58:38:c2:e4:79:c0:c8:c5:a4:18:58:d4:3c:b4:41:a1:74:e9:
         2e:f9:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:40 2026 by rpki-client