Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          X6LzpotQ1wFrWs2cu6wAPaZ1BZKZZ79S8s6e+22Jpx4=
Subject key identifier:   81:36:2D:97:CA:F9:C7:82:2F:C2:FC:46:24:B6:9A:15:C6:40:6A:80
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       019D27A920A28B0A5CD3E556A16555256EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          05A0
Signing time:             Thu 26 Mar 2026 01:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:28 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: IwDFeqCrJE95TTflY6mUNssfVKes+3mg2isbB/auwCQ=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:20:a2:8b:0a:5c:d3:e5:56:a1:65:55:25:6e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Mar 26 01:01:28 2026 GMT
            Not After : Mar 27 01:01:28 2026 GMT
        Subject: CN=81362d97caf9c7822fc2fc4624b69a15c6406a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:80:9f:5c:d1:7a:8c:9d:0a:f1:0e:2a:71:
                    1b:08:ef:f3:d4:aa:83:46:d9:c0:62:f7:a6:c7:76:
                    0d:72:ea:84:61:5b:f4:23:e8:34:d2:a0:76:13:72:
                    b8:ea:ce:43:1b:e0:ef:ab:66:a7:02:23:6b:a4:c0:
                    3a:1d:c2:b9:3c:64:37:12:17:3c:ea:66:35:51:16:
                    cc:23:bc:f8:f3:58:e4:99:11:0d:93:b7:21:af:92:
                    e4:a2:06:79:27:7e:2f:68:f7:cc:b7:c3:47:e8:70:
                    62:4f:49:41:5f:1e:cf:97:0c:8a:5b:87:b0:6b:e0:
                    fc:77:df:e5:b2:ac:3b:ce:c6:37:ba:3e:08:1a:b2:
                    50:09:88:d7:be:22:da:24:c9:0b:b3:50:ae:bf:96:
                    cf:79:16:e5:54:24:62:8e:9d:7f:d0:54:15:2a:b1:
                    45:25:0a:28:81:64:04:7d:c6:eb:fb:55:b0:c0:1f:
                    c9:5d:7a:55:32:c5:99:6c:2e:80:1c:31:ee:ba:0f:
                    a8:4e:c0:53:48:c3:c5:2d:12:2e:15:84:a2:3e:b9:
                    27:0d:27:06:8e:2d:b8:cb:3f:33:9c:c8:ed:27:9e:
                    10:b4:8d:01:06:4d:69:62:1c:ef:bb:ef:8a:49:55:
                    e6:0e:3a:1c:f9:79:0a:6a:3a:ac:51:a5:43:43:76:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:2D:97:CA:F9:C7:82:2F:C2:FC:46:24:B6:9A:15:C6:40:6A:80
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:45:ad:66:93:5a:89:3e:2e:9a:95:b3:ea:7f:dc:d6:44:38:
         2c:60:af:f5:48:33:47:b3:bd:86:94:d1:3b:b8:86:c3:8a:77:
         7d:3e:04:d9:7a:0c:1a:7c:2f:a8:ae:e6:d1:49:07:46:d2:d5:
         25:49:ae:5c:31:45:7d:ca:51:9f:fd:09:8b:70:f9:82:1b:94:
         a9:d3:1c:ba:04:5a:24:68:ac:2d:aa:b6:53:6f:eb:8a:7d:3c:
         e1:57:bc:b3:1c:cb:51:2a:69:bc:6a:eb:76:8e:fd:e9:8c:e9:
         72:8b:68:08:26:11:7a:ab:68:f6:e8:f0:8d:3d:22:02:f7:68:
         2a:24:57:c0:92:11:08:27:c0:ec:c8:03:bc:2c:e4:b5:3b:e6:
         fa:c9:0b:c1:37:7f:c7:39:86:a0:9d:79:c0:79:ad:a1:38:9b:
         46:32:ea:14:cc:04:40:94:f2:9d:fc:cb:d9:0d:df:6d:01:e1:
         b4:41:66:50:70:f2:2a:ef:8c:23:2b:e4:3e:eb:fe:f6:01:78:
         1e:4a:10:19:69:8f:98:61:13:b7:42:82:89:80:1b:44:5c:a4:
         23:68:32:bf:3e:31:6f:33:44:c2:e4:27:d4:ca:a8:8a:26:ed:
         52:08:86:00:90:eb:42:08:86:f8:f1:73:11:dd:6c:83:cf:0c:
         ae:b8:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:38 2026 by rpki-client