Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
File:                     V58iewJgDmAu_FEmBensZlrR-C4.mft (raw, json)
Hash identifier:          Rm1k7fv8j1uwE7WdnheNmHwQ4kI4qMI+MApw/B3EuhE=
Subject key identifier:   49:32:A8:AF:50:3C:97:77:C0:98:5E:51:54:91:68:02:CF:98:4D:92
Authority key identifier: 57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
Certificate issuer:       /CN=579f227b02600e602efc512605e9ec665ad1f82e
Certificate serial:       019CAE35F0DDDFB818F22C9F97585C2B2CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
Manifest number:          24
Signing time:             Mon 02 Mar 2026 11:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:36 +0000
Files and hashes:         1: V58iewJgDmAu_FEmBensZlrR-C4.crl (hash: a4wlqnhBuYlpdXAAHmJ7iu1C3W04wh7diyYC06a9yDY=)
                          2: _W45yWZbF0IW6tEuWrtSE9T4T4U.roa (hash: LUpLsmmYWa7Qa/cjp3HgkJS6f328ddsso8MNmbggimo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:f0:dd:df:b8:18:f2:2c:9f:97:58:5c:2b:2c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579f227b02600e602efc512605e9ec665ad1f82e
        Validity
            Not Before: Mar  2 11:01:36 2026 GMT
            Not After : Mar  3 11:01:36 2026 GMT
        Subject: CN=4932a8af503c9777c0985e5154916802cf984d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:da:cb:2f:60:40:6d:73:d4:4e:e7:3a:f2:
                    e7:dd:23:e4:f5:be:13:9c:74:00:d4:88:28:f1:b0:
                    01:cb:3d:bd:86:85:53:32:40:29:d6:b8:6a:2b:b7:
                    64:21:5e:a8:71:be:b0:c3:79:12:91:42:12:7e:5f:
                    98:cd:6d:61:10:ac:9a:f1:bf:97:35:e2:68:43:ac:
                    68:04:49:b7:95:01:8e:fd:a6:78:98:15:ef:ac:6c:
                    e5:99:4d:2b:a6:e0:89:04:53:7f:fd:2f:4a:bd:88:
                    51:b4:45:73:b0:1b:a1:ee:c9:8a:e1:8f:1b:ab:2c:
                    8e:a8:79:cc:70:7a:e7:05:e4:17:d1:80:14:25:48:
                    33:dd:f0:06:b4:ce:80:92:6c:32:6b:3b:47:76:9d:
                    b5:ad:d4:ae:78:29:3e:32:d2:01:0b:b7:18:d5:cb:
                    91:13:e7:9a:9e:ba:8a:1e:02:b0:2e:e4:dc:5f:6a:
                    eb:e1:35:a6:94:4e:af:48:56:9d:19:6e:c5:fa:52:
                    86:1f:39:2b:92:0f:b3:a8:f4:1c:9e:85:95:6d:ef:
                    6a:38:74:7c:de:9b:5a:04:d0:95:f7:53:e7:45:35:
                    35:41:0b:f2:b2:28:cd:0f:f9:9a:8e:9a:ee:58:1c:
                    df:c3:b2:72:9e:c2:08:5f:fc:26:ce:5e:eb:58:b3:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:32:A8:AF:50:3C:97:77:C0:98:5E:51:54:91:68:02:CF:98:4D:92
            X509v3 Authority Key Identifier:
                keyid:57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:82:64:49:71:6b:e2:f2:4a:2e:7f:3a:83:dc:fd:cc:46:
         45:29:04:14:e6:14:c8:18:b4:cf:0b:59:72:40:82:39:f9:3e:
         74:34:c8:29:50:35:60:90:36:89:cf:9a:4b:19:b6:d1:cf:e1:
         5b:90:6f:4d:40:e7:ea:0f:93:75:5c:b4:ce:17:d4:34:73:fe:
         28:5a:72:0d:a1:4d:f1:fc:9c:7a:5c:a0:19:3d:0a:09:13:56:
         82:3a:84:4e:11:36:f7:3d:65:f2:78:e1:0c:67:b4:6e:04:86:
         6f:9d:c7:94:33:12:c1:ff:27:11:61:69:88:99:e7:4e:f0:58:
         ba:c0:50:17:bd:f3:49:8b:2e:ab:38:b3:93:94:d0:3a:0d:dd:
         91:96:b4:f9:db:9c:b5:5b:da:74:83:e2:68:34:ce:e9:47:9b:
         84:37:00:94:1a:03:37:a4:e8:23:67:32:bd:61:ae:9c:c8:3c:
         4c:94:80:20:62:17:07:48:f1:b3:3e:55:27:af:a4:a1:34:6d:
         99:11:b6:11:ee:f6:81:46:c7:96:ed:f1:8b:76:3c:76:58:26:
         91:41:dd:08:e4:83:69:cc:bd:7e:0a:6a:b2:cf:8d:e4:4e:e4:
         d3:07:23:9f:6f:f3:a1:d5:9a:bd:f8:46:c4:94:e2:45:d5:fe:
         2d:09:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:35 2026 by rpki-client