Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File:                     4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier:          qFWR6tLtpNIokO2KLEg/FWMWqFTvN1Y1Kc/fu+3c03I=
Subject key identifier:   A7:E7:5C:0C:85:4F:EB:88:C7:38:2D:A0:1F:3C:FC:39:D4:B4:AF:09
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer:       /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial:       019D25BA74BB546EED247F7A53F63F67CE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number:          0A99
Signing time:             Wed 25 Mar 2026 16:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:09 +0000
Files and hashes:         1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: JDErk9Jd2brFEmt+clvX9w62vRCm77dz5HY/d9Rq1W4=)
                          2: AyCa3M8xYrOj2yQfMci0ZY7Yf1Y.asa (hash: 4cT0D7+3fI+x0G0JXb/zfB6aX1I04T5jruNKcFtFaD0=)
                          3: ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa (hash: XptWkOCtZXQLc7ip95cgT3GyOmfhUjdofdkZeE4pykc=)
                          4: kMiPdUnfBlmQ_-UZ0PPwAdBy2Ws.roa (hash: MMTL72eHvD66StkaydrVIWqM0Kvh189EtZcOy9LJ7fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:74:bb:54:6e:ed:24:7f:7a:53:f6:3f:67:ce:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
        Validity
            Not Before: Mar 25 16:01:09 2026 GMT
            Not After : Mar 26 16:01:09 2026 GMT
        Subject: CN=a7e75c0c854feb88c7382da01f3cfc39d4b4af09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:a9:7f:26:96:2f:60:71:6f:04:dd:21:52:
                    a7:b9:b9:41:79:da:9e:77:d3:4a:2c:6a:8d:a6:dc:
                    b1:e3:9e:60:fe:a1:6b:f5:1b:61:48:2b:c1:be:9b:
                    e2:d0:91:fd:82:62:8f:a9:c2:67:8b:95:ea:e8:66:
                    b4:4d:86:38:0f:db:bb:5d:29:23:af:d0:d5:6e:0d:
                    46:97:73:86:fc:6a:df:e7:f8:83:ff:a9:fd:c2:85:
                    cc:4d:76:14:cb:98:e9:68:b6:0e:88:25:bf:67:ff:
                    d6:00:1d:2b:85:bd:d4:f6:f2:08:c6:4c:f1:61:f0:
                    4a:9b:48:10:eb:03:6e:76:1f:e3:b6:61:0a:bf:c9:
                    8e:b1:42:1d:fa:b8:31:f3:82:e3:fb:34:de:82:c7:
                    73:b9:dd:eb:ee:5d:a5:fa:1b:b2:b7:c4:fb:d4:7a:
                    34:17:7a:59:7a:e7:e4:ec:7a:1a:e9:9e:be:28:ad:
                    b7:26:69:c6:07:66:42:d6:2f:91:43:4e:d4:4d:9c:
                    86:a7:07:b9:28:9c:a9:1a:71:13:9e:49:e4:21:58:
                    86:c6:d6:d7:db:17:e5:bb:28:3c:b7:4b:58:c8:d2:
                    ab:34:82:b5:48:e9:31:dc:9c:5f:04:d2:c8:fe:ed:
                    c5:15:92:ab:51:b3:71:9f:29:f4:59:ac:85:19:91:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E7:5C:0C:85:4F:EB:88:C7:38:2D:A0:1F:3C:FC:39:D4:B4:AF:09
            X509v3 Authority Key Identifier:
                keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:f2:3c:1f:2a:c3:58:5a:9c:34:de:b5:44:d0:f7:54:b4:
         ee:ff:b1:2c:dd:d9:e9:63:91:98:cc:01:69:15:44:84:9b:c5:
         81:3a:9d:fe:c8:ee:e3:06:39:78:38:6d:9f:36:8b:48:c0:5b:
         72:9c:ec:12:47:a5:fc:f3:8d:14:c2:69:ec:6b:f3:9b:7f:88:
         08:12:b2:ee:f5:b3:14:9f:d7:00:9c:81:4d:c1:6b:0d:06:bc:
         f9:fd:d0:8a:01:70:56:49:f0:2e:1d:76:94:fb:dd:50:40:c3:
         8d:94:b9:3f:94:a7:63:98:8a:fd:57:98:68:d3:9d:b7:91:d3:
         5a:77:ed:e3:d9:52:41:2e:74:f6:79:3a:e6:58:ff:07:a6:c6:
         38:52:2f:35:fc:03:cc:5a:fa:a8:a2:0a:28:65:ee:af:d5:32:
         5b:82:a5:d0:ad:27:89:27:06:d1:32:9b:33:f6:a7:a2:06:ba:
         80:27:06:b2:5d:12:a6:29:62:1f:ec:9e:b0:bd:99:75:56:bd:
         f0:eb:34:57:1d:80:3a:26:22:61:db:fb:c9:6d:ef:67:ac:46:
         d9:6d:88:b6:33:38:05:6c:24:33:36:fc:9d:e7:64:72:1e:aa:
         d1:90:14:8c:81:a7:cf:b4:6a:72:2f:fe:ff:c0:c0:89:44:95:
         fe:69:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:25 2026 by rpki-client