Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          BVPSna7Mn1I2/WaUl/HRVzneB9f4Ak/2zNmW5aFtb90=
Subject key identifier:   CD:61:30:24:5E:EB:BD:FE:B8:F9:DB:93:C3:0E:3F:DB:26:18:FB:8F
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019CAFB6273AD71CA9EF2E651EC16D640FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          60
Signing time:             Mon 02 Mar 2026 18:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 18:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 18:01:16 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: dV6qb6mzInFqtVVV7vw6K8Nm587fM4nAbbKDkFBGpgo=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b6:27:3a:d7:1c:a9:ef:2e:65:1e:c1:6d:64:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Mar  2 18:01:16 2026 GMT
            Not After : Mar  3 18:01:16 2026 GMT
        Subject: CN=cd6130245eebbdfeb8f9db93c30e3fdb2618fb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:0e:3d:61:6b:7b:a0:05:96:bb:46:89:85:
                    61:04:3c:4e:8a:60:d5:06:71:e0:1a:aa:eb:f4:fc:
                    96:57:99:20:c4:99:db:8e:18:2e:37:21:d3:8c:5e:
                    48:4a:10:79:6a:75:d6:75:70:12:5f:47:e6:aa:01:
                    c5:a4:dc:4d:e2:4b:ed:09:d9:8b:65:27:e9:3f:aa:
                    1a:1b:47:3c:c6:73:61:47:28:2b:62:b4:60:8a:84:
                    41:dd:d7:ad:19:75:33:6d:0c:a2:b9:c2:14:5c:d7:
                    59:c7:d2:df:7d:1c:5a:99:68:f2:87:e9:8b:37:05:
                    48:2e:3e:e5:1a:25:ed:72:3f:78:dc:5c:53:0c:d2:
                    18:b6:55:26:e8:87:7d:0b:3c:cd:2b:13:56:c4:28:
                    01:97:66:34:5c:ba:1a:7f:cc:d7:71:fe:6e:9a:e4:
                    88:51:77:65:4a:ca:f6:1b:d3:31:43:a0:36:f0:b6:
                    6d:18:2c:7d:bc:ad:b7:3b:61:09:dd:35:62:1b:49:
                    b8:71:ab:8c:80:81:c2:b8:29:f2:74:5d:6a:58:2b:
                    82:a5:7f:b1:a5:97:90:10:3e:05:ac:88:24:70:00:
                    be:9e:c6:b1:63:fd:cb:bf:92:d1:0b:a7:2a:17:6e:
                    aa:c4:65:6d:55:19:12:5c:75:a5:3e:82:52:31:7a:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:61:30:24:5E:EB:BD:FE:B8:F9:DB:93:C3:0E:3F:DB:26:18:FB:8F
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:71:10:c9:3b:31:3b:a4:45:d8:c8:09:d6:a1:a0:46:41:
         fc:e0:4d:c3:b5:e4:66:fd:50:24:41:48:c4:0a:74:c2:ef:dd:
         17:1f:7a:b8:02:52:68:b5:fb:02:aa:75:a7:71:19:00:25:fe:
         47:ae:7c:ff:d9:2a:c3:1d:47:1e:c2:76:cd:54:30:bf:43:37:
         97:02:5b:8c:14:b6:a3:3b:dd:14:b2:57:3e:d2:17:65:5e:da:
         e5:17:f5:28:5f:29:fa:9e:c0:85:47:48:29:f2:43:04:6b:24:
         cf:8f:84:17:56:5a:4f:76:25:cd:65:93:d7:c6:46:37:20:03:
         42:33:ee:46:c6:4e:91:ff:ce:c1:c9:ff:ee:57:e4:ed:0c:50:
         70:3c:3c:a4:01:0d:bf:a9:25:9c:e2:1f:8d:81:f1:52:23:a8:
         9e:56:de:e7:bc:62:05:e4:b5:31:9a:4a:5d:ae:2e:de:1e:a9:
         cb:31:ea:0e:c8:98:04:13:b6:2f:99:78:06:54:97:8a:46:d7:
         2e:47:6f:ce:a8:ac:c3:7b:94:11:3b:b8:da:24:c0:3c:77:87:
         87:eb:8f:61:ca:6c:1a:84:cb:fe:18:fc:96:ad:76:34:44:47:
         98:b7:94:ae:66:7f:86:ae:12:a8:83:50:93:8e:4b:41:44:3f:
         21:f2:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:32 2026 by rpki-client