Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File:                     AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier:          NB6GqdGJESg3wH/YjXfr347suZmdmRZZr0Iuj2md5PU=
Subject key identifier:   FF:F5:16:F5:E7:71:E7:54:E2:F5:D2:30:6D:56:A4:B9:E8:B9:1F:9D
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer:       /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial:       019CAE6C34DBA961C1CB2AECAEE0E190F62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 12:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:52 +0000
Files and hashes:         1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: svOQaxLEsbfZ3WodUyMLDZQYWHyFQERqkrJrZTfNjxg=)
                          2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:34:db:a9:61:c1:cb:2a:ec:ae:e0:e1:90:f6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
        Validity
            Not Before: Mar  2 12:00:52 2026 GMT
            Not After : Mar  3 12:00:52 2026 GMT
        Subject: CN=fff516f5e771e754e2f5d2306d56a4b9e8b91f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:28:8d:a0:16:d8:51:78:af:3f:e7:a4:37:
                    ae:8e:5c:86:d6:2c:45:bd:7e:f2:ab:37:21:c5:b7:
                    34:6a:f1:2d:4f:d7:e0:9e:bf:7a:f5:df:28:9b:cb:
                    43:53:2a:21:7b:06:45:bd:44:e7:ee:b8:65:fd:27:
                    24:66:cc:e0:dc:8b:db:cb:de:70:ac:71:19:27:be:
                    e8:33:5c:95:ea:04:9f:d2:89:b8:90:c6:f6:fe:83:
                    60:29:dc:4c:61:bb:87:db:f2:e9:23:9b:62:b0:ba:
                    03:25:7a:57:f4:d7:d6:93:c9:d8:e2:43:2b:09:af:
                    bd:24:21:e3:3e:88:36:a4:27:23:98:74:53:50:7a:
                    99:61:3e:e2:ac:62:b8:79:b8:68:a7:a2:5d:3e:ba:
                    df:c3:f6:35:88:70:e1:8a:d2:86:54:f2:81:26:f5:
                    e7:78:6d:b9:0e:8a:cc:b9:e8:80:77:b6:00:76:75:
                    c3:1e:f0:90:46:2d:cc:fb:07:3c:af:5d:3b:5b:25:
                    9b:42:d4:c6:f0:16:92:b2:e9:55:39:9e:f5:6a:0e:
                    3d:fb:2a:26:8a:f8:4f:76:cd:41:47:11:17:34:82:
                    95:0f:31:c9:f1:94:09:99:e6:91:15:10:1a:81:bb:
                    4c:93:e8:79:be:34:93:f2:99:4b:72:20:b6:b4:89:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F5:16:F5:E7:71:E7:54:E2:F5:D2:30:6D:56:A4:B9:E8:B9:1F:9D
            X509v3 Authority Key Identifier:
                keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:82:3e:f2:07:46:82:b7:55:46:4d:e4:91:56:18:ef:f9:
         c5:a0:b4:67:6f:f0:83:75:29:3c:9a:6e:98:fd:f1:c5:10:37:
         5b:c9:25:aa:92:02:24:f5:26:fc:91:68:c2:48:54:94:41:5a:
         0c:70:07:30:fc:f2:fb:4b:f1:8d:85:72:e8:ab:9d:6b:18:3b:
         3c:92:01:83:58:ae:44:10:4f:73:df:9c:30:be:c1:e0:01:73:
         d9:b8:cf:df:92:44:ac:9b:8d:e0:a3:95:d7:f9:f1:7c:9b:8d:
         36:23:ed:aa:8a:3d:17:b5:09:0c:8f:13:23:28:1f:fb:a1:b0:
         35:03:35:49:e8:1d:b4:86:be:01:97:8d:4b:55:00:05:37:da:
         97:ea:df:ff:6b:5c:9d:21:65:35:7d:67:44:9b:75:21:78:a8:
         41:fd:55:38:56:46:c1:09:35:ad:19:e1:06:ae:a6:03:00:99:
         85:f4:ff:f8:55:be:83:36:60:68:a7:4d:62:5d:42:30:24:9b:
         b2:80:8a:36:ea:c8:7b:a9:c8:3e:02:f2:3c:04:1f:d8:ff:dd:
         c2:39:9c:df:e6:29:be:34:e7:69:f5:36:06:1a:ec:d8:df:d1:
         e8:ff:ff:91:40:59:d7:ff:1f:60:df:d8:54:c7:18:89:aa:90:
         3f:0e:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:05 2026 by rpki-client