Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File:                     41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier:          9YKGwBPnW9wn+q2yM6ZgosAJWX31h1YHThImM4/r3NU=
Subject key identifier:   F7:B1:52:1D:80:76:05:49:FC:7A:86:F6:0F:97:03:AC:86:D8:DF:F7
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer:       /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial:       019CAFEC831457E575BBEC2C239D0231D423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number:          0177
Signing time:             Mon 02 Mar 2026 19:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:38 +0000
Files and hashes:         1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: An22V34NCkMiVcGAjXY7rWFoCK2US6cNmwqkAoywL8k=)
                          2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:83:14:57:e5:75:bb:ec:2c:23:9d:02:31:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
        Validity
            Not Before: Mar  2 19:00:38 2026 GMT
            Not After : Mar  3 19:00:38 2026 GMT
        Subject: CN=f7b1521d80760549fc7a86f60f9703ac86d8dff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:d7:de:f3:59:a9:a5:2f:97:5b:07:f2:4c:
                    5d:a3:b8:39:46:3a:8e:b6:90:5e:e9:86:94:0b:f5:
                    9f:f5:60:4e:a5:27:e9:4a:f8:65:b7:96:91:c0:5b:
                    40:50:b1:55:81:03:6c:44:9c:90:c7:f5:29:d7:02:
                    16:88:dc:f2:47:12:9d:71:5e:ab:0b:ea:94:03:24:
                    78:94:a8:f0:00:b9:2b:a4:8c:9a:4f:73:bc:d4:96:
                    67:84:49:c6:74:35:88:7e:94:65:d0:43:c4:d7:05:
                    b2:20:d1:b1:d9:3f:8e:fa:9c:e7:c4:16:5c:f5:4b:
                    a7:f5:f4:65:e8:44:42:4e:6b:03:a0:d3:13:4c:d2:
                    06:93:29:4d:74:ea:62:03:82:2d:96:ea:0f:ee:9a:
                    72:75:aa:99:36:97:e4:37:6a:9c:a2:0b:af:25:5a:
                    55:3e:90:b4:8a:e0:fd:44:ec:bd:3c:51:1a:81:db:
                    8b:0b:e6:43:40:c6:d6:69:36:22:02:69:9b:85:c9:
                    03:dd:c7:97:ec:52:c3:88:77:b1:a4:51:1d:44:49:
                    30:7f:cc:fd:6e:0c:47:94:50:7b:2b:96:05:07:e6:
                    93:51:ed:bf:1f:96:d1:c1:1c:84:0b:52:86:f1:80:
                    c1:16:c8:81:5d:28:33:d8:95:66:dd:a5:c4:7d:11:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:52:1D:80:76:05:49:FC:7A:86:F6:0F:97:03:AC:86:D8:DF:F7
            X509v3 Authority Key Identifier:
                keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:e1:90:3b:a2:de:9e:46:39:0f:4d:9b:03:3d:b9:63:fe:
         19:37:df:41:cd:3d:35:66:10:c3:6f:ae:17:2c:23:ef:a2:83:
         d7:bb:cf:ae:3d:42:fd:32:6d:80:32:32:c3:82:96:17:4f:b3:
         4f:8b:57:ea:69:6c:cd:49:53:8d:25:75:61:0a:f6:80:90:dd:
         6d:12:63:f8:81:9d:a2:91:27:fa:67:dd:d6:6b:a1:00:5b:34:
         35:6f:6a:87:1d:fc:d7:d7:3f:51:9b:63:6c:67:57:35:90:b2:
         02:6c:f0:22:5c:7e:45:dd:bc:44:b0:19:43:e9:68:84:b7:2b:
         c4:ea:bd:98:4c:52:42:2b:48:24:70:a9:0a:95:45:72:bb:14:
         8a:85:61:f0:bc:6a:b9:a5:07:3e:3c:2c:96:0a:3c:65:db:8c:
         a6:1d:bb:89:4e:84:ee:c6:f4:cf:40:0f:b0:35:e6:e9:90:17:
         c5:f9:6c:84:be:f4:2f:1d:ff:c0:ea:d8:a3:55:9c:51:fe:29:
         5b:cb:67:04:3c:a1:59:15:f4:f9:a3:71:9e:6e:60:b8:0a:78:
         26:59:73:ec:4d:50:ce:fd:8b:94:72:76:2e:9b:dd:33:db:ca:
         7d:45:e1:d5:98:30:1d:22:8c:96:b4:01:94:90:57:59:3e:7a:
         85:71:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:43 2026 by rpki-client