Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File:                     RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier:          iQIW+vxr29+OCKMEIAfS9NaBfvMofIaNQ4hGvBN3r2M=
Subject key identifier:   B0:AF:95:32:B7:E2:1B:C2:45:9A:B9:87:65:1C:08:DA:66:F0:0A:3A
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer:       /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial:       019D265CF2327572E71CDA91A5FFF75EF363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number:          03CD
Signing time:             Wed 25 Mar 2026 18:58:38 +0000
Manifest this update:     Wed 25 Mar 2026 18:58:38 +0000
Manifest next update:     Thu 26 Mar 2026 18:58:38 +0000
Files and hashes:         1: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: BjrdB4G7jRplGhWJfiGRjTc+pAbBgaii7E2l+QuuQ1I=)
                          2: WBkR9Qa57mqvHG8BefanPj9alzU.roa (hash: uy29BjAYc/0v1azPlDiRGwrl2FpskxUKYywvVFsaLbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5c:f2:32:75:72:e7:1c:da:91:a5:ff:f7:5e:f3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
        Validity
            Not Before: Mar 25 18:58:38 2026 GMT
            Not After : Mar 26 18:58:38 2026 GMT
        Subject: CN=b0af9532b7e21bc2459ab987651c08da66f00a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ae:a3:86:8b:84:41:75:fe:ba:18:60:1d:f4:
                    40:3a:d8:a1:19:84:b4:0d:f4:94:3b:c0:b5:53:39:
                    53:55:77:91:30:3e:0c:4d:82:65:2d:82:b1:1a:c3:
                    fc:a7:46:60:33:8a:9c:8c:c2:37:30:57:19:3f:73:
                    3e:78:a2:74:18:fa:65:ab:6b:41:6c:d3:ac:66:ef:
                    e7:da:d9:d3:47:43:b3:65:1e:49:ce:10:a0:b7:64:
                    02:fd:60:69:88:54:52:5a:0b:fd:f9:0d:46:1d:cf:
                    ff:0e:01:15:4f:fe:38:85:40:5f:b9:d9:ee:bd:58:
                    29:41:23:44:c0:18:fc:fe:b2:29:81:f8:cc:01:29:
                    73:ec:71:a1:a2:a5:f7:56:c0:d5:8b:57:1d:f1:3a:
                    de:57:c4:5c:55:84:e1:07:d5:56:9a:d5:1b:01:5e:
                    ef:2d:db:ae:27:42:d5:51:d4:ee:35:92:e3:a2:f7:
                    a1:dc:ca:5d:da:71:6f:ac:d6:c2:f0:01:7b:ca:7d:
                    9f:7e:f0:b2:28:52:29:0e:98:ca:00:95:21:47:5b:
                    00:78:a6:36:27:a5:38:1a:1a:a6:ac:a0:30:68:ab:
                    f7:c9:27:5e:f9:8e:ca:cc:d9:c5:3a:c3:39:0f:30:
                    cd:87:75:ed:fd:bd:fd:2f:18:a9:08:06:1b:a4:d7:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:95:32:B7:E2:1B:C2:45:9A:B9:87:65:1C:08:DA:66:F0:0A:3A
            X509v3 Authority Key Identifier:
                keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:48:b5:54:0d:47:0e:79:88:15:bc:cf:f5:26:22:37:21:2c:
         e1:f7:50:f7:12:11:f2:a5:93:23:16:f5:4d:6e:63:02:fe:36:
         2a:5d:32:66:bd:fd:2b:4f:50:08:ac:8c:b2:87:24:4e:48:58:
         3d:cd:45:03:e9:e5:55:00:da:c5:fc:02:7d:06:3f:07:9c:04:
         5b:ee:13:76:bf:bc:e8:40:e2:bb:62:ce:1e:77:8c:b8:c8:df:
         29:03:2a:55:b4:f4:db:e9:c7:a7:4c:9f:98:63:24:e7:8a:e5:
         70:73:96:5a:e9:cd:bb:0e:38:67:dc:5f:e9:dd:0c:bd:73:a6:
         5a:5a:e2:fe:13:c4:86:28:b9:f6:3f:d1:f3:94:4a:52:3a:b1:
         d6:9c:cc:be:29:f0:de:8c:20:69:92:89:30:8d:29:ba:58:91:
         4c:a3:0d:4e:28:a5:59:b2:e8:be:4f:9d:09:c3:bc:97:6a:5b:
         cd:e8:d4:02:55:e2:a1:4b:9a:5d:44:f6:d3:3b:23:8d:9c:ea:
         d5:39:ed:53:14:fd:07:79:75:68:d3:f7:ff:c4:19:1b:54:8e:
         7d:b2:93:8f:c0:57:73:ee:f7:8b:88:07:bb:d9:d8:8f:2a:d7:
         3c:ee:be:9f:0c:45:99:25:19:c5:bd:fd:7b:d4:d7:72:b1:50:
         9b:90:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:29 2026 by rpki-client