Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          rg58lnIy/nsxKUXlYyEmEzACdDjQ7R09wgduL1y348Q=
Subject key identifier:   04:D6:F9:AD:0C:23:CD:7F:D8:B5:1E:B6:4D:D4:9B:70:E5:6B:60:B4
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       019D28BB59473E403324674D3CD9A5D2CD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          0362
Signing time:             Thu 26 Mar 2026 06:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:59 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: HkB6Uvuv53P+jPpD8i1UG8KWXa1e22JVeyvvUkYHrR8=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:59:47:3e:40:33:24:67:4d:3c:d9:a5:d2:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Mar 26 06:00:59 2026 GMT
            Not After : Mar 27 06:00:59 2026 GMT
        Subject: CN=04d6f9ad0c23cd7fd8b51eb64dd49b70e56b60b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:0e:ef:36:6c:65:7e:6e:a5:14:ec:df:28:
                    4c:05:cb:33:f2:7c:02:07:b1:fc:79:f4:6c:96:96:
                    a0:48:53:51:54:f2:49:e2:bc:6a:3a:46:84:ac:c4:
                    17:eb:d1:06:b8:88:d5:8a:dd:48:82:bd:74:b1:ff:
                    f7:e0:22:ae:1d:5a:38:af:2b:00:ba:24:ab:a3:1a:
                    2f:74:2c:e2:ea:25:7a:a0:3a:9a:da:df:7f:dd:96:
                    f5:00:98:eb:15:e0:30:14:ff:3e:6f:de:fa:b3:fb:
                    b4:b6:5e:92:eb:65:66:e9:26:d6:3a:22:97:d6:fe:
                    c1:1d:49:e0:63:56:c1:fb:9c:fb:5b:0b:17:b2:ef:
                    2c:57:a4:bb:93:78:35:c3:d7:0c:d7:3c:89:af:b0:
                    1e:4c:1e:e7:c9:55:c1:58:ac:72:30:59:b9:70:1d:
                    89:65:b1:92:91:13:74:10:d8:f6:0f:69:53:ff:f9:
                    8d:b6:fd:38:d4:15:f7:90:c2:2b:9e:11:ff:79:c3:
                    f2:4c:c0:d3:f5:83:5f:15:a4:4d:a4:0a:2e:4c:22:
                    a6:bb:4c:e3:f8:e2:6d:0e:2b:29:95:33:63:15:cc:
                    a1:75:db:86:da:9f:51:ad:09:9a:fa:2e:48:18:54:
                    72:2b:ad:d4:3a:a9:7b:a7:70:02:2b:1d:57:9b:36:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:F9:AD:0C:23:CD:7F:D8:B5:1E:B6:4D:D4:9B:70:E5:6B:60:B4
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:fd:d1:0b:56:ec:5d:7b:53:72:a8:5a:3a:b3:59:6a:31:
         5a:bb:d9:14:18:af:50:5c:db:84:d5:9f:50:e6:6c:72:81:2f:
         7e:03:87:f3:2a:21:90:cd:03:43:4f:08:6f:11:1c:48:20:c2:
         c5:d6:d8:bd:1c:4d:d2:52:61:a6:f1:88:71:d6:b6:8f:4a:0f:
         8a:da:be:43:55:07:73:1b:42:e4:2c:a1:47:53:7b:a9:75:49:
         21:37:69:e6:5e:31:26:b0:30:86:87:21:c2:61:86:e6:ac:90:
         77:d2:db:12:3c:5c:9c:ee:cd:46:d6:aa:a6:c2:58:d1:c4:39:
         29:89:1c:16:7b:dd:7b:cc:5e:c1:9a:43:cb:29:53:80:26:22:
         38:2e:7d:82:be:5f:56:e1:b4:2a:bc:80:08:c8:07:f2:7a:ee:
         38:fd:92:90:3e:d1:13:d8:9c:be:6e:f7:ad:de:b2:6d:50:0a:
         e1:d5:69:e5:23:77:c2:ce:0e:86:fa:55:dc:1a:67:ed:38:d3:
         87:a5:04:33:cb:c6:13:a0:9e:96:de:e6:b3:4f:38:c5:a3:54:
         cf:68:95:41:80:94:78:a9:b9:bb:94:b9:8c:db:e6:14:c9:f6:
         13:4b:18:17:9b:2e:3e:ac:7a:81:c9:d8:16:94:04:bb:22:bc:
         78:af:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:52 2026 by rpki-client