Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          slemm3cF9QNLmz8Cky40VsR3RmC7BvGKtFoT9rE58tI=
Subject key identifier:   36:F8:53:35:65:9B:E8:ED:52:D5:81:09:F7:D9:E0:55:28:CA:3B:2D
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019D2628A2E8690EA7CD0BD60309C1F4F70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 18:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:30 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: DcCX9OqNJENFhT8t863w858EIGStDRUbnxjCIM/RpuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:a2:e8:69:0e:a7:cd:0b:d6:03:09:c1:f4:f7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Mar 25 18:01:30 2026 GMT
            Not After : Mar 26 18:01:30 2026 GMT
        Subject: CN=36f85335659be8ed52d58109f7d9e05528ca3b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:40:5c:45:b7:c0:bf:9c:cc:14:a3:68:de:
                    dd:36:a3:22:e0:82:08:30:34:3a:77:65:2e:9e:1a:
                    12:45:e2:d4:51:58:cf:0f:1e:b9:31:94:84:b0:e8:
                    2a:48:2a:a5:7a:6b:6b:7f:a5:62:f7:6f:d5:8f:15:
                    3b:20:67:8f:10:85:d6:b2:b7:49:fc:f1:88:34:00:
                    fe:86:b1:ed:ba:18:20:e8:c0:2d:83:9c:5e:81:d5:
                    5d:c9:2b:22:81:63:b3:29:8e:d7:70:c7:b7:bd:d9:
                    7b:46:62:57:c1:15:83:99:53:44:83:34:90:da:4f:
                    cf:37:0d:b3:2f:5a:14:94:f0:8b:c5:47:1d:92:d1:
                    af:6e:7e:ff:b5:46:c0:88:dd:39:c3:94:d9:03:b6:
                    23:48:4d:62:be:cc:c3:01:f6:c5:4b:7c:09:b7:0f:
                    e2:2b:ed:97:c3:86:ae:6a:c2:15:8f:3c:4c:e2:5a:
                    d4:9b:0d:cf:a1:d7:01:07:96:76:32:80:44:4e:60:
                    b0:73:30:d9:99:4f:50:4a:da:ed:2b:1a:f9:ff:78:
                    c3:e7:22:e7:81:d5:06:0b:be:d3:de:08:68:c3:fc:
                    3f:8b:77:b6:c8:fe:a1:33:14:9b:18:40:1f:7d:ca:
                    92:ec:8c:21:ef:6f:6e:6a:66:c5:73:79:51:82:ae:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F8:53:35:65:9B:E8:ED:52:D5:81:09:F7:D9:E0:55:28:CA:3B:2D
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:99:ee:70:45:d1:14:40:4b:6f:36:cc:d8:06:4d:1f:52:ab:
         ef:10:68:b8:f0:36:08:2b:db:c5:c4:4d:95:e1:e3:7b:90:e6:
         cb:ca:1a:9a:d9:97:f6:a4:a7:81:e9:fd:ce:31:96:e9:7d:22:
         ff:b2:4a:61:3c:c6:39:49:a5:40:79:b6:93:c0:d7:b0:1e:f6:
         f9:23:50:1b:8f:95:d1:71:94:30:9f:0d:c0:91:90:5d:13:20:
         45:95:3a:fb:cf:66:28:31:bd:55:c1:94:eb:1e:a0:2a:56:ed:
         cf:0e:b1:f9:7a:4a:cc:54:f3:fd:fd:9a:a8:fa:1d:4b:b4:e1:
         46:3e:97:7e:14:18:58:cd:78:0c:0f:bb:7c:88:ed:a4:3f:06:
         a8:ce:5b:7c:8c:de:21:17:9b:a7:98:8b:53:0d:14:66:d6:39:
         ce:9f:b9:b8:dc:3a:ad:56:db:f2:c7:d4:83:5d:58:78:3c:c0:
         2e:fb:bc:3f:1f:77:15:28:e8:89:f0:66:a0:c7:50:c4:f4:b2:
         d2:0d:10:17:a0:bc:ea:4d:a9:4d:bd:98:b4:a9:a1:6d:28:45:
         cd:61:8e:90:42:6b:04:d0:06:24:77:ec:e7:f8:e0:16:e9:bf:
         91:01:f4:76:9f:db:e7:63:37:e6:4c:1e:2c:fc:8e:2c:78:4c:
         a2:12:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client