Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          VeeJ9IMCY9VH7cWKiKRcaSaNlZ85Xb9Faa7wCeaFcEc=
Subject key identifier:   54:F2:E5:98:09:6F:5C:B8:FE:3A:69:D2:D6:97:09:BC:56:4C:79:04
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       019D27E036046E83293525E3C43FDCBB958F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          05BB
Signing time:             Thu 26 Mar 2026 02:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:38 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: E6G2lRJ48MNhnP736mQpfHOj8JKN8eJJUVY8x2y8/KU=)
                          2: GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa (hash: BJA1H3BJte9PdHpAhJG8NebAV+K9kBOQF7cMdvjOdG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:36:04:6e:83:29:35:25:e3:c4:3f:dc:bb:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: Mar 26 02:01:38 2026 GMT
            Not After : Mar 27 02:01:38 2026 GMT
        Subject: CN=54f2e598096f5cb8fe3a69d2d69709bc564c7904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:de:18:30:a4:58:c7:9a:d3:7c:84:61:6e:
                    56:c2:22:e0:fa:8e:08:ba:29:fe:8b:cd:6e:4e:a1:
                    35:b5:fa:21:26:56:4f:a2:4e:e2:df:07:a1:3d:dc:
                    6c:af:83:84:c8:96:56:54:25:d9:94:8e:68:0c:db:
                    8c:84:bd:46:b4:cb:ed:1a:2d:d5:c0:cd:9c:74:e1:
                    fc:75:f9:cf:20:e4:9d:4b:67:0b:12:5f:61:6b:87:
                    bb:3d:6b:88:c9:83:fc:e2:a8:88:23:2a:de:5b:4e:
                    ef:67:19:fb:c9:b5:e3:a0:de:4b:df:f1:89:6e:21:
                    4c:c2:cc:57:d0:d6:54:44:e8:f3:05:95:d8:e9:9c:
                    33:08:96:d6:ea:be:4e:13:53:15:1e:da:fb:e7:89:
                    c4:81:b5:c0:cc:23:b7:39:f8:10:a1:fc:5e:9f:cc:
                    2c:47:92:fb:78:69:e1:ca:0e:48:e0:f1:f9:4a:45:
                    b6:7e:3b:f9:40:65:71:45:5f:f0:9a:34:23:47:3d:
                    7e:bc:f9:01:8e:89:45:d3:1e:28:87:14:70:07:eb:
                    4f:3a:b7:95:6e:b1:d9:85:af:e1:d2:03:45:54:27:
                    15:f0:a5:60:36:e0:d3:55:d7:73:a7:cb:78:8e:2d:
                    74:fb:e9:1f:01:27:60:fe:96:8d:4e:4c:d9:0b:7b:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F2:E5:98:09:6F:5C:B8:FE:3A:69:D2:D6:97:09:BC:56:4C:79:04
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:b1:3c:f8:75:98:87:74:e8:74:bc:ff:10:40:0d:d2:3b:
         87:e8:72:d8:c2:e9:71:c0:39:28:25:f7:4c:5f:56:f1:ac:c9:
         3b:ca:b8:fa:d8:7a:a7:94:28:ea:46:1b:40:64:b4:04:74:6d:
         66:1d:74:d1:56:ef:2c:00:98:ca:07:db:a7:6f:e6:39:9e:3a:
         3d:60:86:91:bf:0b:6e:45:68:64:cb:cd:d0:da:d0:c2:fb:47:
         bb:85:6e:09:72:91:38:9f:35:2f:8a:a3:59:cd:c9:76:1d:a9:
         10:bf:a8:fd:4a:51:98:1d:81:3d:e1:8e:f1:bc:21:bb:18:93:
         34:47:23:65:97:50:bb:61:12:49:e5:fc:cb:bc:76:95:dc:97:
         8b:27:d9:86:5c:67:55:64:8d:82:ca:60:66:01:11:96:57:9d:
         dc:77:cc:5a:22:ed:74:c4:4a:55:57:05:bf:a0:cf:04:d1:cb:
         48:27:49:d2:c5:45:2d:d5:4f:2d:6a:7b:25:90:09:79:45:d0:
         4f:08:3e:87:39:0b:32:9b:72:91:2e:e5:89:fd:26:8b:c9:f2:
         3a:5b:a7:eb:88:9f:6b:82:90:7f:b2:d7:75:6c:a4:81:85:22:
         9c:7f:7d:3e:62:8b:6b:e1:32:a4:80:06:22:9f:61:a3:f7:ae:
         5c:7a:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:51 2026 by rpki-client