Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          FFxi1uKJ4AXcCz3gKxaC+TIbnnqEEjMTwUpHpNPDYSQ=
Subject key identifier:   72:A1:5C:CB:E3:49:23:4B:72:31:94:C0:55:10:91:0F:5E:88:E1:35
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       019D2AAE95BDA6B1DE4BA7CBBFCEDAE3C828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          0762
Signing time:             Thu 26 Mar 2026 15:06:17 +0000
Manifest this update:     Thu 26 Mar 2026 15:06:17 +0000
Manifest next update:     Fri 27 Mar 2026 15:06:17 +0000
Files and hashes:         1: ksyxmkCrf7A-eqxZmQy3trm7sLM.roa (hash: 6/V3wIua4oerREHtxJ93cqHXKCXGaJBotU9pYRKVNog=)
                          2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: GJxw9oJT79AHxvRPMiCuAhtRCMIrU5K+V6+CuRZi97Q=)
                          3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:ae:95:bd:a6:b1:de:4b:a7:cb:bf:ce:da:e3:c8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Mar 26 15:06:17 2026 GMT
            Not After : Mar 27 15:06:17 2026 GMT
        Subject: CN=72a15ccbe349234b723194c05510910f5e88e135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:bf:11:1f:48:4c:ea:b0:ae:53:51:c7:60:
                    c4:0c:df:b1:7b:8b:47:22:b7:26:a3:c3:c1:f6:17:
                    d0:96:b4:db:13:1c:63:cf:15:a6:f1:15:6e:18:8c:
                    b8:0c:5d:11:cc:73:23:dd:8d:d0:58:5c:3f:a5:e3:
                    8f:cb:9f:08:2a:3b:1a:3f:3a:e3:ac:f2:0e:00:82:
                    6a:f6:5a:0c:0f:c0:53:48:14:eb:48:fc:c9:90:e0:
                    ea:b7:34:ca:be:22:34:98:46:7f:c2:62:39:77:c2:
                    88:68:b8:7f:55:0c:2c:7e:ad:33:6b:4b:4c:96:33:
                    16:78:be:f3:c8:37:c0:b7:47:dc:57:62:2c:ed:32:
                    e6:fc:ac:e2:9f:45:30:80:48:47:c2:d5:f0:fd:80:
                    95:bc:44:20:b2:13:84:4d:b6:b4:17:5d:3d:b2:d4:
                    d3:d6:ed:2f:3f:00:19:17:22:3a:44:19:80:f6:9c:
                    d6:d3:f7:c6:a2:5e:1f:2a:3e:fb:99:29:c2:82:fb:
                    b6:77:be:88:3d:d9:be:3f:35:48:f8:d1:04:6f:2f:
                    ca:a6:f5:f6:50:3e:80:c6:17:a8:ce:b2:6d:93:cd:
                    76:e6:ce:45:a7:ac:0a:0b:24:de:8d:de:35:44:39:
                    9c:ee:76:7e:b3:93:ac:3a:d8:be:5e:aa:63:c8:f6:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:5C:CB:E3:49:23:4B:72:31:94:C0:55:10:91:0F:5E:88:E1:35
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:01:70:de:5f:a2:cc:85:dd:1f:51:de:ea:16:e0:75:79:
         eb:a0:c7:d5:53:e9:8e:97:81:c6:d9:9f:14:f0:2c:f2:fe:9e:
         ff:d5:32:a9:b2:bc:63:a6:8d:de:2d:a8:df:01:7c:ec:e2:96:
         e8:06:f8:7d:65:54:8d:df:b0:fc:f1:58:4a:2a:8b:14:08:d0:
         b8:c6:95:d6:ec:f7:25:dc:1b:38:43:a7:4c:a4:cb:b3:c3:b3:
         e1:40:2f:ac:07:b6:77:a3:1c:fe:ad:80:03:39:b6:5f:a8:37:
         43:06:f7:0a:d2:8b:bd:f6:60:57:16:c8:bf:45:6f:15:04:22:
         62:0c:af:d6:99:45:01:0e:71:c4:5f:74:e5:74:17:00:d3:b0:
         f0:b5:0b:3b:73:39:96:62:5c:c3:77:bb:d8:47:19:3a:66:37:
         16:07:67:28:b7:98:da:09:6e:e1:6b:d3:db:fd:ea:e9:58:52:
         49:9a:71:e9:46:5b:d0:25:a5:e7:e7:a9:a5:5c:c8:19:e4:55:
         2f:96:c4:b6:c7:75:52:81:06:8b:d8:f0:42:0d:54:07:37:f0:
         95:fe:45:23:81:6d:98:eb:a9:8f:31:50:de:43:20:d0:09:c3:
         1c:8f:e0:17:46:13:be:09:8e:a8:49:1a:b0:c5:39:00:f6:9f:
         ee:12:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:08 2026 by rpki-client