Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          ERw4iMyrqe7rgoFAq1p5ZtZJX8fEMdQF4YVi1VhbQx0=
Subject key identifier:   A3:D5:C0:30:6B:6D:60:90:C7:1F:13:BA:6F:EC:E4:77:6B:5F:59:0B
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019D2816F5BF4C9B47D60C186EBB321A4EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          1751
Signing time:             Thu 26 Mar 2026 03:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:26 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: +pXz6pY0sHyD+ci436A8wLuvi6KiHc0qVtOomH/smdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f5:bf:4c:9b:47:d6:0c:18:6e:bb:32:1a:4e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Mar 26 03:01:26 2026 GMT
            Not After : Mar 27 03:01:26 2026 GMT
        Subject: CN=a3d5c0306b6d6090c71f13ba6fece4776b5f590b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:29:23:21:78:b5:de:2e:d6:b5:ca:05:18:
                    ce:2c:2b:a6:27:ef:e6:d0:80:05:e8:33:35:64:80:
                    09:11:0b:a7:c6:2b:d9:bc:4c:04:34:ff:d0:ba:dc:
                    0b:d4:b5:18:9f:75:da:86:82:78:d6:43:e9:57:4d:
                    0e:2f:94:4c:4f:cf:5b:a1:87:4f:56:8c:fc:68:23:
                    5a:1b:58:c1:e2:8e:a0:6d:aa:af:83:f5:b2:2d:99:
                    2f:89:ec:45:47:d1:0f:69:af:6a:47:fb:f9:7d:35:
                    0d:05:b6:cf:ce:32:fb:24:01:a0:81:9e:c2:31:a9:
                    fa:65:a1:3a:37:93:27:21:5f:db:c2:6c:67:97:2a:
                    20:ac:75:2a:ac:44:f6:2f:e5:28:16:99:04:6b:91:
                    b6:21:05:41:38:c5:cd:34:2b:a5:27:3e:c6:d5:f0:
                    c5:e7:01:44:8d:cd:7f:26:08:e2:db:9e:51:23:93:
                    e3:b1:81:4b:bc:1e:f7:f6:26:d6:b6:b0:1d:74:c5:
                    29:26:2c:40:39:d4:95:18:57:24:6b:88:e5:4e:42:
                    ef:62:1b:81:95:71:19:fd:cd:5b:eb:36:91:dd:80:
                    d9:c6:6c:ec:cc:76:47:d1:ab:2b:a9:fc:fb:9e:66:
                    07:27:e7:8a:53:73:42:d3:f9:33:19:77:6b:91:49:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D5:C0:30:6B:6D:60:90:C7:1F:13:BA:6F:EC:E4:77:6B:5F:59:0B
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:e6:9b:06:22:66:b8:42:7d:10:19:a1:f9:f9:8a:b1:64:
         38:47:5f:5e:37:9a:c7:b3:c2:26:01:4e:2e:6f:75:3b:e1:23:
         45:9c:93:23:fc:0f:a0:6e:98:f5:96:3c:0b:38:e1:2e:9c:e0:
         be:a3:47:b4:62:14:dd:e5:bb:1b:bd:4d:46:47:53:2b:0c:d2:
         80:d0:60:a1:b9:83:1d:84:11:8b:89:25:37:a7:61:b9:1b:98:
         6b:0a:71:8f:74:1d:3d:31:59:64:91:7d:96:5b:7c:d6:5b:9a:
         87:8c:e2:08:e6:ce:83:33:15:9b:79:52:07:c8:2d:7d:6c:d7:
         76:91:99:53:6a:5c:3e:2e:91:54:e6:04:f3:6a:a0:d7:29:b2:
         b3:0f:87:3a:be:96:14:bc:d6:c4:eb:f4:1a:d6:91:eb:a1:a0:
         b2:73:7d:a2:c7:df:2d:ce:12:83:23:76:c5:a4:ee:19:e8:5c:
         fe:10:9a:8f:6f:90:21:ee:3d:3c:98:93:ef:2a:78:76:59:36:
         26:24:79:bc:c5:d1:a7:15:3c:4d:19:a8:32:2b:4b:8a:53:96:
         39:b8:e3:fe:0c:bb:50:c9:55:df:ee:da:95:a7:88:72:80:3d:
         e6:c2:95:00:d0:02:56:68:b1:9d:f8:bb:18:2e:1f:fb:bd:16:
         b7:74:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:04 2026 by rpki-client