Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File:                     pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier:          p82FZGJbqPqoW7el69s7GBy1asi9BwCRqv3pvyQ0QYM=
Subject key identifier:   BC:F7:DF:04:61:57:D2:64:4E:7C:CF:97:99:95:DA:C5:D5:34:33:41
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer:       /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial:       019D265FB02170B1180B71CE37E523D89207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number:          03F1
Signing time:             Wed 25 Mar 2026 19:01:38 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:38 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:38 +0000
Files and hashes:         1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: Y4IndBJTGGXNKkES8yA7J2uIcK4m9I5jiIKvGhCznW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:b0:21:70:b1:18:0b:71:ce:37:e5:23:d8:92:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
        Validity
            Not Before: Mar 25 19:01:38 2026 GMT
            Not After : Mar 26 19:01:38 2026 GMT
        Subject: CN=bcf7df046157d2644e7ccf979995dac5d5343341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:2e:43:c6:ed:63:36:07:9b:6c:87:f3:9c:
                    f0:d6:df:99:64:5a:46:7e:92:02:9c:86:83:3d:d2:
                    30:0b:49:fb:33:c1:9c:6e:b9:c8:a7:15:c1:10:f5:
                    4b:a7:e8:52:7f:43:85:1d:7f:47:6f:8d:77:21:b2:
                    08:ba:09:0e:88:3b:71:0d:62:ec:40:7f:f8:0b:fc:
                    9f:12:88:23:e2:2d:c8:e2:2f:37:b7:01:ea:7c:b4:
                    72:be:cf:76:af:2d:a7:72:b5:dd:0a:9d:0b:03:f9:
                    01:63:c2:8f:19:99:3e:fe:62:f8:a0:f6:18:f4:3d:
                    37:60:1e:a1:fa:70:fb:e5:9a:71:d4:6f:f0:f1:0d:
                    79:cf:04:be:ec:8a:ec:e0:94:e8:dc:e5:b3:28:89:
                    07:32:1d:a2:26:c6:9c:dc:fd:35:07:01:2d:d4:07:
                    24:72:f7:53:69:44:a6:de:fc:35:a2:31:d8:f1:72:
                    75:32:bc:29:bf:c7:15:a4:8f:cc:d8:85:d2:3d:0c:
                    c3:9e:68:68:15:10:25:4b:e5:2a:14:c4:80:7e:c0:
                    04:dd:6d:a1:9d:4f:e5:ba:86:0f:54:d0:ca:2d:50:
                    a1:2e:27:d2:d2:e3:8d:50:c6:31:65:43:56:6a:5b:
                    10:0d:db:3a:3a:a6:82:14:b1:82:7f:47:9d:f4:f4:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:DF:04:61:57:D2:64:4E:7C:CF:97:99:95:DA:C5:D5:34:33:41
            X509v3 Authority Key Identifier:
                keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:2a:3a:c8:f0:82:9e:79:34:26:fe:37:30:75:bd:ae:fd:
         df:1d:47:d2:e7:d1:40:cd:8a:64:9a:dd:0c:6d:1e:70:95:ac:
         42:cb:b3:c1:39:c6:9a:74:4c:41:f1:a9:37:11:20:20:01:3f:
         3a:9d:af:5d:ed:bb:70:72:4e:c2:d8:12:63:aa:68:cf:14:8e:
         10:23:e7:38:fa:8b:17:7e:67:a5:0c:19:6d:07:f3:31:fb:f3:
         30:6a:e0:3c:9e:c7:06:d7:d4:a1:6a:87:82:30:33:6b:ae:05:
         f0:e2:c2:db:9f:d7:5f:bf:2c:33:fd:e4:2e:3a:e6:3c:8b:eb:
         4d:ed:40:69:d8:32:d1:8e:ba:90:ad:37:a4:22:18:b9:38:6c:
         1f:c7:71:40:3a:e8:0a:63:be:2c:8b:a4:c1:24:75:d7:91:42:
         3e:3e:4a:a0:4c:92:51:9a:d5:aa:06:bb:0d:9c:68:05:e8:e9:
         3c:83:95:b4:70:b8:60:72:3a:cb:e7:87:04:14:d9:ef:72:27:
         06:98:82:a6:d6:8d:47:d6:7f:d1:fc:0e:bb:c7:59:83:c8:3b:
         81:d2:bc:1c:81:4c:09:c0:51:72:88:cb:9d:b6:00:10:ad:5b:
         7f:85:78:bc:72:40:12:22:6c:e2:25:71:93:05:9d:dd:75:ef:
         31:58:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:09 2026 by rpki-client