Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
File:                     19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json)
Hash identifier:          uRHC7tSKqZ0gF5NgtADA0kRfUwiwdp4czOC3qJUhrIc=
Subject key identifier:   0E:C9:8B:B9:75:18:9E:1F:F8:7B:18:55:83:91:82:E9:5C:49:EC:F2
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Certificate issuer:       /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial:       019D284D81A5B396CDBCA4FA9A57F5C5C439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
Manifest number:          0BA4
Signing time:             Thu 26 Mar 2026 04:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:01 +0000
Files and hashes:         1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: nTiVDdpMBqEovgX7I5m7pLd6M+GY2TgCl/b/f11xm4A=)
                          2: mVHhVBL3b2rgETZb9_1hmIJtYoQ.roa (hash: UVnquJ+GGNXvnJEV311l0LcTpr92LD6i72Q9lhofEe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:81:a5:b3:96:cd:bc:a4:fa:9a:57:f5:c5:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
        Validity
            Not Before: Mar 26 04:01:01 2026 GMT
            Not After : Mar 27 04:01:01 2026 GMT
        Subject: CN=0ec98bb975189e1ff87b1855839182e95c49ecf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:0b:4a:82:68:9f:ed:f8:db:e3:91:90:8e:
                    3c:9d:21:04:bd:06:ce:dc:74:0a:a4:ea:91:63:e9:
                    cb:4b:6d:83:6e:fa:62:d2:20:72:19:81:58:bc:b8:
                    c1:2b:57:e9:a5:14:94:4f:70:bc:b0:46:8b:97:3c:
                    39:94:44:03:23:77:19:04:28:50:dc:af:92:22:b7:
                    63:33:93:dc:64:dc:23:39:de:d9:4b:b5:18:4a:68:
                    3f:8c:1f:ae:95:ee:5f:8f:19:9a:ca:11:94:b3:fc:
                    f9:9e:52:de:14:aa:f7:ff:48:56:ab:3c:d2:30:b8:
                    9e:11:b3:2a:14:4a:42:b6:19:64:fa:eb:78:da:f2:
                    1f:22:0c:ed:bc:cc:1b:71:a4:57:d0:37:a5:a0:45:
                    a1:5a:3a:20:40:a2:eb:53:85:aa:56:3e:03:33:e3:
                    0d:17:2b:8e:5f:25:f4:6f:e8:d0:bf:50:42:45:b5:
                    80:9e:07:d5:08:cd:2f:0a:7c:3e:87:64:2c:7a:ce:
                    c6:6b:70:46:c3:92:bf:38:ff:dc:9c:4b:e3:08:f1:
                    04:af:09:11:4d:dd:79:35:a2:b2:b8:08:5f:41:f3:
                    2f:e5:7f:ea:de:b9:1a:ea:0f:8b:0b:b9:65:72:44:
                    60:ea:06:66:e7:74:60:d0:32:60:fa:93:c6:7c:12:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:8B:B9:75:18:9E:1F:F8:7B:18:55:83:91:82:E9:5C:49:EC:F2
            X509v3 Authority Key Identifier:
                keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:48:42:5f:9f:30:f4:95:49:e2:7a:b3:bc:df:42:46:32:
         d9:b3:c9:53:97:7c:18:07:8d:9d:fe:b7:d9:35:fc:13:6f:5b:
         cf:28:37:27:9b:c4:c8:1d:1b:4a:6a:ee:21:d4:75:4e:15:b4:
         b9:08:d1:b0:37:90:df:65:22:25:25:3c:72:1b:18:3a:ca:04:
         58:4a:1d:e6:c6:bb:61:34:37:9a:9b:c1:79:c9:06:da:85:d3:
         a9:ad:38:c8:fc:22:c5:a7:4a:18:69:83:a5:d2:54:34:8c:ba:
         9c:e1:65:d1:a5:81:c5:4a:90:04:92:0b:7e:bd:17:44:84:9e:
         fd:83:56:08:da:7b:fb:ef:3f:19:0f:32:7e:aa:4b:64:7c:aa:
         eb:7c:b3:ce:6f:0f:42:e8:bd:e5:95:e2:28:ac:72:77:aa:a2:
         66:ae:96:ab:a1:ad:48:28:b9:9e:4a:46:ca:ac:6c:7d:ec:97:
         20:0f:7c:51:99:3f:11:a3:29:b1:9c:60:3b:5b:11:ff:fa:61:
         33:c6:ce:d2:4f:79:a5:29:28:f6:eb:47:d6:cc:68:3d:b4:d1:
         65:29:e8:4e:b8:26:ca:57:ee:c9:7f:b6:c6:5a:43:24:fd:ff:
         d7:93:1c:4a:6e:3f:48:13:e2:e0:9d:b3:14:81:54:2c:25:b3:
         ce:d2:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:35 2026 by rpki-client