Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          DORBNknWZ7rwUqJwNLFAeeZDCLXX/GxV0PvNoOUt/5U=
Subject key identifier:   82:ED:4F:3D:10:4F:95:88:12:AB:BE:20:7F:81:1B:97:11:39:C4:7C
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       019D26961D8DB66D0C3B5844ACE27E269A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 20:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:05 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: VfQnkCFBes0YSZgGBbrjf6vXXoCpMHycwUAuCMolUTo=)
                          2: ncPNkpuerXDPVvhOagmz6DGK4F4.roa (hash: EzW2eYsud+NOEa0rR95TqZjMJsbs++g10GjrVu+pH+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:1d:8d:b6:6d:0c:3b:58:44:ac:e2:7e:26:9a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Mar 25 20:01:05 2026 GMT
            Not After : Mar 26 20:01:05 2026 GMT
        Subject: CN=82ed4f3d104f958812abbe207f811b971139c47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:7f:be:41:39:46:80:4c:50:1f:e9:e4:d3:
                    ac:b7:93:5d:c9:d4:97:7e:53:ea:50:10:0a:6e:05:
                    fc:ce:63:1a:52:96:5e:d4:31:2b:1b:de:d7:f7:47:
                    ae:09:e0:26:87:9e:f8:cb:13:38:07:b0:f8:1d:e6:
                    d9:16:8f:0c:ae:e9:6e:c4:94:a4:37:83:3d:45:e9:
                    6c:f0:b3:3e:48:6b:6d:38:ff:a8:ed:9f:ec:9b:34:
                    12:8a:78:a7:d6:5d:09:93:41:fc:84:c6:9d:b5:3b:
                    44:07:31:9b:ca:19:06:5d:20:d6:fb:46:1b:86:13:
                    69:c9:b8:bc:98:41:9d:3e:94:b2:ba:57:20:6a:09:
                    63:3f:f1:e8:47:ca:f7:fe:b3:fc:ea:ea:47:45:ec:
                    01:7f:9e:fd:8f:1e:2b:c6:e8:fd:4a:e3:a6:75:5a:
                    7b:21:2a:dc:ea:9b:2b:fc:cb:9f:77:0c:a0:58:9d:
                    82:23:34:a8:66:28:d7:fc:42:15:b1:b0:32:98:a9:
                    96:45:f7:a3:7e:7f:17:82:0f:c4:f2:08:e2:cd:52:
                    1b:cc:61:03:df:1b:38:e6:cd:93:d3:f0:4c:19:dc:
                    1b:7c:d0:a5:19:59:5f:dc:24:5e:1f:a1:14:f3:b3:
                    28:1a:f0:4a:f8:9c:b8:a7:fc:71:dd:37:57:c8:8b:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:4F:3D:10:4F:95:88:12:AB:BE:20:7F:81:1B:97:11:39:C4:7C
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:43:c5:3b:7b:b4:ab:fe:6b:79:3a:50:ff:78:ee:1d:74:
         f5:23:2b:a1:d3:6f:2e:0a:08:1f:a6:c5:a6:f3:68:39:74:9a:
         a9:cf:05:7e:9d:5d:65:49:63:f3:43:68:e5:3f:45:8b:e9:12:
         6a:3b:f6:48:08:24:d9:3d:67:8c:43:4e:ba:3a:1c:6f:ee:40:
         fe:68:fd:e2:78:7b:d8:e8:ad:4a:b5:de:b5:64:71:f8:96:e9:
         07:6a:22:f7:3b:35:c0:6e:e8:23:ae:6b:5f:61:4e:1a:ec:36:
         88:25:f3:9b:79:c5:20:50:a3:49:dd:e3:9f:f8:87:dc:95:d6:
         54:e4:19:41:bf:ae:2a:9d:99:9d:c4:a6:5b:e4:00:6c:f5:b7:
         05:b3:4e:db:ad:40:10:43:22:a8:cc:04:cd:55:87:e3:72:6a:
         2c:80:84:eb:98:bd:6f:00:7c:8c:95:0d:2c:33:56:10:d1:b9:
         17:a4:49:91:79:12:77:50:24:ad:12:9e:a8:57:14:7b:01:6d:
         3c:f4:1c:6c:cd:b4:83:88:bf:51:c0:6c:7e:46:70:ff:14:3f:
         2b:f5:63:ef:b5:d0:80:00:5a:fe:9b:ab:f6:c7:f9:8b:b3:6f:
         fa:6a:1b:ec:7a:4c:36:73:e9:80:81:84:7a:be:9f:cc:68:30:
         40:db:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:28:47 2026 by rpki-client