Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File:                     9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier:          WfKkWaHfzAtA2c1U7LlAgixDCQz4FuDuph4BTGheUnw=
Subject key identifier:   22:99:6E:DE:02:62:E2:AC:9B:4E:6A:DE:84:C4:07:BC:EB:49:07:C6
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer:       /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial:       019D27724925D58E41374870CF67C9D45AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number:          0F94
Signing time:             Thu 26 Mar 2026 00:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:34 +0000
Files and hashes:         1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: KhEM/HvzSxsG+BEdjMeUusrJ0FWwV8Td569hQZ4iI6Y=)
                          2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:49:25:d5:8e:41:37:48:70:cf:67:c9:d4:5a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
        Validity
            Not Before: Mar 26 00:01:34 2026 GMT
            Not After : Mar 27 00:01:34 2026 GMT
        Subject: CN=22996ede0262e2ac9b4e6ade84c407bceb4907c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:f7:a5:1c:97:db:4b:95:1f:30:1f:df:b0:
                    3a:0a:38:95:29:65:c4:87:b3:c2:3e:fb:36:77:5a:
                    dd:36:62:db:42:7e:99:25:61:1b:22:1e:19:42:b3:
                    e4:22:92:28:93:ae:ee:0e:e8:91:1b:b6:5c:23:0f:
                    57:4d:57:1e:d0:b9:2d:cb:f8:3c:64:21:1b:fd:4b:
                    e4:15:1e:3b:66:f6:ed:eb:6a:7d:08:e8:28:33:cb:
                    df:f9:f8:2b:86:e8:ba:94:96:7c:f1:2c:7e:63:92:
                    c7:23:59:45:ec:f1:24:d5:4c:c2:26:95:f2:08:02:
                    81:bd:ee:c1:05:ee:c5:60:cc:50:8b:85:70:40:9f:
                    f6:e6:d5:17:c6:cb:1b:e8:ed:2d:24:bf:48:6a:b4:
                    fd:85:58:a4:2d:e8:c3:0c:ec:1e:b0:13:54:26:8c:
                    06:59:5b:f8:db:11:f4:89:36:f4:cc:3a:0b:a9:b7:
                    f2:7b:6e:a1:e5:42:56:b4:bd:4f:e2:76:6e:06:b0:
                    7e:fc:bb:ed:be:05:6b:63:f9:0d:ab:b8:a9:71:15:
                    3c:ec:60:ab:e0:4a:d3:27:0a:97:c6:70:97:9d:3a:
                    11:1d:7a:f6:36:e2:ca:9f:72:c8:1d:ae:3f:13:72:
                    74:ba:0e:b5:ae:c4:3a:e0:bf:c6:d3:11:d5:2c:d1:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:6E:DE:02:62:E2:AC:9B:4E:6A:DE:84:C4:07:BC:EB:49:07:C6
            X509v3 Authority Key Identifier:
                keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:00:f9:5e:f5:02:02:19:a8:21:81:23:a7:27:72:1f:67:
         0e:83:ea:37:0d:50:99:ba:9b:56:44:f0:f4:80:c0:f8:f8:00:
         2e:fe:15:b7:1b:86:05:e6:00:25:14:d5:18:60:8d:a3:f7:d1:
         76:b5:d5:4c:9c:cc:0a:54:f9:e5:63:3d:7e:04:dc:6f:b5:ea:
         66:9e:a6:b6:e0:6e:8e:82:ef:73:a8:20:86:62:ff:ef:0f:5e:
         59:68:27:0e:47:e7:91:ee:96:2e:56:ac:29:56:4f:f0:4a:66:
         2e:d8:17:bd:cb:f0:d7:5d:2b:07:ba:c7:db:c1:0b:14:f8:42:
         23:cb:89:bf:4c:7f:b2:6b:ad:f1:c0:5e:25:cc:70:35:34:ed:
         0c:b5:f8:4f:0d:3b:f7:d5:bb:f2:de:16:34:9d:d4:74:dc:40:
         60:84:d6:9d:68:eb:fb:45:47:c6:da:8d:de:8e:ea:c6:9a:35:
         d9:f4:87:35:04:2b:e0:e9:64:02:48:18:59:3e:69:49:e1:f9:
         a9:67:b9:42:4a:93:b4:1a:0e:db:72:2f:9f:fd:fc:85:c9:4a:
         44:a7:eb:0d:31:fe:13:5b:c6:e7:f0:ae:83:e4:9c:07:b5:21:
         54:49:8e:c5:93:55:aa:64:4e:08:60:e7:e4:96:51:61:86:6b:
         bd:35:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:38 2026 by rpki-client