Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File:                     SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier:          nGFJtbMBzWFoPekEr1n3kyjPhUso9jWIQbkKqrN7lAQ=
Subject key identifier:   83:D9:35:FF:11:67:5F:7A:C4:93:AB:FD:F4:4B:D5:AE:37:74:1E:49
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer:       /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial:       019D25BAA977AF79C70FFCA47E679437541C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 16:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:23 +0000
Files and hashes:         1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
                          2: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: yH6uHXFh5c4ZKYPHU94KWaWlcM8uWsYILukcKu2UP7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:a9:77:af:79:c7:0f:fc:a4:7e:67:94:37:54:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
        Validity
            Not Before: Mar 25 16:01:23 2026 GMT
            Not After : Mar 26 16:01:23 2026 GMT
        Subject: CN=83d935ff11675f7ac493abfdf44bd5ae37741e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:12:22:ec:4b:b8:59:3c:0a:61:35:8c:73:4d:
                    54:0f:56:06:6a:93:af:29:fe:02:bf:5d:ac:65:dd:
                    af:17:61:aa:4b:5a:15:ca:07:56:35:f7:cb:3f:a8:
                    3d:2c:b9:71:20:e8:9d:a9:df:39:a0:15:0c:da:8d:
                    54:da:5d:b8:f1:77:a1:c7:0f:73:7b:00:72:2b:3f:
                    93:06:b8:c6:f4:2a:ae:84:55:f7:9f:1e:0c:a2:eb:
                    2f:a7:a8:d6:92:77:89:a6:b4:ee:78:0c:b9:55:11:
                    d8:2c:88:9e:84:16:b9:89:68:48:68:14:49:83:eb:
                    94:60:71:2a:b5:65:37:eb:54:61:a1:7d:1b:68:da:
                    81:97:2e:94:df:7d:fe:bc:8c:db:1d:54:9a:eb:3e:
                    95:fc:6a:5c:b3:d1:55:d8:00:a1:68:f3:86:d4:3c:
                    e4:ae:10:4f:08:b7:f1:8b:c7:1a:0d:75:b2:5e:d2:
                    9c:f6:94:01:38:11:52:cf:4c:bb:8e:81:c0:e9:a2:
                    42:23:dc:d2:5e:4c:76:be:5f:d4:0f:d0:68:e9:17:
                    5a:ed:36:9d:b8:ac:34:7f:90:b3:7c:d2:2a:d9:d7:
                    91:06:24:92:22:0f:25:99:f7:cd:6f:61:a7:51:1e:
                    f1:29:dd:5e:c4:08:2b:f1:12:4a:7a:92:ab:4a:00:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:35:FF:11:67:5F:7A:C4:93:AB:FD:F4:4B:D5:AE:37:74:1E:49
            X509v3 Authority Key Identifier:
                keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2f:c6:97:b0:5c:07:6c:9e:7c:e1:c4:10:1a:bd:48:2e:66:
         69:fa:2b:7b:3e:a0:42:9e:25:38:c3:cd:f6:9b:80:a6:bb:be:
         44:c6:5e:d3:1d:d4:36:d1:aa:d9:03:47:81:fe:fb:8e:d0:d0:
         f3:d0:1f:78:72:71:57:93:03:82:87:2e:43:f7:b2:c1:9e:a3:
         9a:0c:09:30:f1:64:44:dd:c9:24:51:21:83:d5:ed:60:06:28:
         2c:18:3c:dd:52:8c:75:82:ea:cb:35:dd:0b:70:ad:a2:72:df:
         26:a4:40:d9:a4:ad:46:c2:45:06:88:b3:38:83:af:94:04:6b:
         de:ef:9c:cb:db:4b:11:fb:3e:ba:08:48:96:4e:25:08:8b:fd:
         f7:13:e4:7a:4e:cd:a9:17:7f:42:3b:c8:a0:83:3c:67:76:8d:
         7c:0b:21:20:bb:67:ef:f1:9a:12:c6:9a:7b:ca:8a:41:94:5d:
         f8:c9:bd:f1:ed:2c:4f:cc:d9:4e:63:ad:03:e8:64:95:21:7c:
         83:b9:f7:2e:af:48:ae:6e:94:e7:f4:fb:24:fa:d7:f6:84:eb:
         42:57:ec:51:c6:7d:53:6f:7d:17:98:6a:97:4d:fa:eb:88:a6:
         47:37:93:94:5f:63:ea:2c:2a:c9:17:62:d1:c9:80:fe:fb:07:
         b3:3d:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:52 2026 by rpki-client