Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          UHHVQeEm4P5nb84eL+SL9C5LCICnxuBE2S17gPAoR18=
Subject key identifier:   AA:A0:14:7F:F3:D0:65:82:A8:43:A7:AC:67:1A:E9:1C:69:EA:CB:61
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019D284E3A516B61A06D3C0523EAA8E4AC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          17B5
Signing time:             Thu 26 Mar 2026 04:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:48 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: cMwtQNM9JsuEpREeoQ6vLn9fAZN8hTHwnP7OL/fik6o=)
                          2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:3a:51:6b:61:a0:6d:3c:05:23:ea:a8:e4:ac:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Mar 26 04:01:48 2026 GMT
            Not After : Mar 27 04:01:48 2026 GMT
        Subject: CN=aaa0147ff3d06582a843a7ac671ae91c69eacb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:76:49:69:1f:f6:1e:51:51:46:84:b7:7c:
                    30:27:ec:3d:12:6a:5e:60:b2:29:3f:1c:ba:2c:c7:
                    f4:2e:b9:0f:76:69:76:8a:09:e0:f7:25:b3:47:3e:
                    fb:2c:e9:22:f6:50:3f:be:3d:4c:c5:d6:af:6f:c1:
                    24:65:f1:38:85:32:1a:52:7e:fb:eb:83:64:58:3e:
                    3f:d1:ae:59:39:9d:c5:64:af:89:c5:65:f4:16:20:
                    7a:44:af:f3:df:6f:69:c3:5e:bc:d9:d8:29:7e:66:
                    9a:8e:5a:d3:e2:24:c5:4b:45:2b:bf:a8:7b:a7:65:
                    0b:f5:a3:f1:8a:89:60:62:3d:fd:8f:15:98:c0:d2:
                    18:8a:a0:f8:bc:a5:48:b0:b1:9e:d7:38:82:4b:68:
                    89:35:f1:47:40:05:cb:4d:db:33:72:43:41:f4:05:
                    88:25:12:19:21:89:f1:01:ae:ab:cb:39:20:93:54:
                    2e:8f:b2:9f:b2:54:fe:8c:4b:81:79:48:39:bb:e8:
                    6f:a9:67:ad:5d:fe:2d:31:e4:33:82:ab:fe:cf:e5:
                    27:01:8d:fb:f0:dc:4b:4f:9e:1b:e7:96:11:ae:99:
                    28:18:bb:28:57:33:72:20:a5:f3:f4:d3:d2:18:0d:
                    f9:ec:03:3b:f4:60:d2:bc:4a:6f:57:be:d1:e6:cb:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:14:7F:F3:D0:65:82:A8:43:A7:AC:67:1A:E9:1C:69:EA:CB:61
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:12:54:2b:21:b6:6e:b9:72:2f:89:ad:f6:bc:1e:06:a5:0a:
         43:0c:25:ff:16:e9:9f:62:3d:66:8c:86:aa:7a:88:01:6c:b5:
         52:20:db:2c:c5:7f:b9:c1:86:31:84:5f:eb:1b:fd:a6:42:df:
         08:47:20:30:a2:b8:6a:01:e4:66:a1:df:5e:da:49:37:36:93:
         da:6f:0d:ce:8a:56:32:0e:6c:ed:41:1b:bb:b9:da:6e:2f:94:
         f5:8d:23:51:3f:a6:2b:3c:69:9d:f9:da:0a:9c:98:a0:c5:bb:
         bd:b5:97:82:92:23:13:18:9c:e8:41:c2:04:7b:4c:19:38:f0:
         67:07:85:87:99:17:97:df:49:d4:3a:b5:55:bb:12:a7:e3:43:
         06:3b:73:e3:61:8b:4c:c5:17:02:ef:7d:53:63:df:f2:fc:07:
         75:73:f1:2b:77:5e:37:00:3e:bd:4a:d8:3b:5e:ca:55:0b:d8:
         e2:9f:7a:83:87:5b:1f:7a:45:92:a8:78:bb:76:d9:97:1d:22:
         cf:88:5b:fa:73:b8:b0:ef:fc:a0:8f:c3:61:be:4e:31:07:f4:
         62:76:e4:4a:f3:6c:52:9d:4a:98:93:aa:88:c6:e8:eb:36:79:
         a6:11:8b:9f:d8:15:78:84:1a:c6:92:07:89:90:44:34:8a:76:
         c1:45:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:18 2026 by rpki-client