Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File:                     Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier:          ne59drylCzDZX9I1PDE8KnEFO/05iKGwer0mK9tTsT0=
Subject key identifier:   87:61:9D:A0:A9:9B:7F:B4:D6:3D:7D:D0:72:94:54:6C:05:44:F0:69
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       019CAEA31B3DBFCE776F98D3F57A5CFE9A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number:          087A
Signing time:             Mon 02 Mar 2026 13:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:50 +0000
Files and hashes:         1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: aSIIU+XSE1i72L1tIuJjW560kutOj61BD+wmPqwKOOE=)
                          2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:1b:3d:bf:ce:77:6f:98:d3:f5:7a:5c:fe:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: Mar  2 13:00:50 2026 GMT
            Not After : Mar  3 13:00:50 2026 GMT
        Subject: CN=87619da0a99b7fb4d63d7dd07294546c0544f069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:3e:dc:cd:a5:56:24:d5:8e:ae:59:37:c8:
                    3e:24:b8:b1:47:7e:f9:77:90:20:c0:af:ed:37:4c:
                    a9:16:08:3f:27:9c:ec:96:36:c8:f2:6c:1d:ed:ac:
                    6f:51:38:39:e5:53:f1:2f:83:b4:12:ae:f4:fd:77:
                    bd:f6:57:f7:71:61:d5:34:d9:98:9a:7c:e8:f1:d3:
                    14:55:63:80:d6:25:82:1e:b4:bb:50:fc:de:b7:7c:
                    f9:d8:ae:2a:a0:f6:aa:a0:5d:d4:f3:6b:67:0d:0a:
                    f7:cc:bf:c8:8c:ab:bd:f0:e3:6c:f2:fd:1b:bf:3d:
                    52:6a:58:9f:7b:a1:3f:10:2c:cb:e2:84:97:fd:de:
                    9d:77:30:d5:a8:9c:e5:3d:d9:4d:3a:96:98:cb:c4:
                    51:c4:d3:20:48:7b:e8:8b:34:ee:a3:91:33:dd:32:
                    37:d3:bd:ca:f2:cb:1b:bd:50:73:17:a2:7f:6d:36:
                    92:ba:8a:08:0f:70:2e:2d:9c:33:59:3d:b0:65:ba:
                    92:70:b1:8b:82:a5:28:ff:94:60:48:ab:c8:fb:ea:
                    77:df:29:08:2e:81:88:78:48:6f:f7:5c:be:92:20:
                    ed:fd:cc:2c:85:70:4a:42:66:29:86:55:98:ab:12:
                    50:35:be:3f:e3:61:a3:ca:f4:48:be:7f:7f:e6:a2:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:9D:A0:A9:9B:7F:B4:D6:3D:7D:D0:72:94:54:6C:05:44:F0:69
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f9:87:ca:52:60:ae:17:c5:9c:6a:9c:81:fc:6c:31:d0:d2:
         66:21:30:09:83:4d:82:9b:22:ed:3c:2b:8c:20:5a:94:97:ab:
         4a:18:f7:45:d1:f2:bb:a0:15:af:fc:35:11:ab:9a:b2:21:25:
         00:eb:af:86:2a:d7:f3:2c:40:29:e7:5f:4a:59:4a:1d:33:79:
         6f:83:22:87:ac:0e:d6:2c:78:93:11:c5:e5:44:93:a4:36:e5:
         4f:1c:97:e2:1a:51:f9:3e:5d:c8:86:d7:d8:77:f3:d9:8b:c6:
         fd:02:59:9a:08:82:c3:ca:d1:2a:9d:18:5c:31:f3:70:16:5a:
         31:6a:98:02:07:98:77:94:cb:9b:4c:80:8f:a1:91:06:f5:7e:
         56:19:23:91:7c:44:81:27:52:18:70:f3:73:d2:c2:37:2c:a3:
         97:dc:c5:e8:bb:b6:8c:50:a3:3d:6e:82:38:7c:23:a7:dc:8d:
         93:fc:b5:ae:82:98:87:ed:37:92:19:a2:ca:a2:32:32:dc:72:
         bb:4b:fd:a4:54:bd:c0:29:2d:99:89:d9:aa:f2:e1:62:a9:f7:
         71:66:25:00:b0:5b:9d:d5:75:ad:93:cb:19:26:bb:02:d9:e6:
         57:39:dc:52:e2:f7:89:00:96:db:f7:68:21:94:0b:94:81:12:
         4a:de:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:23 2026 by rpki-client