Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File:                     _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier:          JMP8URPVN6XHAcEI/pfxrIXtpeGf1Zo5FW79KayYSGY=
Subject key identifier:   F3:7C:3C:C6:AC:FF:8E:93:F6:D9:EF:02:3C:1A:83:34:46:59:F1:5C
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer:       /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial:       019D27725D26AD172046FFFF5E9BF15C6E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number:          0943
Signing time:             Thu 26 Mar 2026 00:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:39 +0000
Files and hashes:         1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
                          2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=)
                          3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
                          4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
                          5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: w8jozIgxWOhc2DYkqiOaYwzx9gT+6RD5BJAbB8JMHZ4=)
                          6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5d:26:ad:17:20:46:ff:ff:5e:9b:f1:5c:6e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
        Validity
            Not Before: Mar 26 00:01:39 2026 GMT
            Not After : Mar 27 00:01:39 2026 GMT
        Subject: CN=f37c3cc6acff8e93f6d9ef023c1a83344659f15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:70:63:68:fb:ec:cc:e1:e8:c4:cf:c0:89:
                    c9:d7:d7:4f:80:3a:81:3d:d1:4a:65:12:a2:3d:87:
                    b8:a3:86:92:be:dd:08:4d:a0:08:ce:ce:64:43:93:
                    ff:60:68:e9:47:d0:8d:60:76:ee:48:61:df:89:f9:
                    51:4c:90:4f:d2:21:43:3e:1b:51:cb:23:78:65:21:
                    21:de:55:3a:b8:fc:75:4e:b6:0a:16:26:d4:59:0c:
                    e5:cc:d6:a0:ca:d3:a2:df:61:16:81:f0:f3:19:db:
                    17:c6:fd:90:83:ec:d4:77:b9:ea:0a:f5:5f:9d:51:
                    2d:de:95:04:8e:2c:50:cb:65:10:3d:fb:7a:6a:5c:
                    b2:ff:68:ca:a0:f0:75:48:72:6a:63:fb:59:eb:aa:
                    a1:02:4a:f2:0e:15:56:73:4a:bb:a5:6b:1d:14:86:
                    7d:b1:ff:68:cd:d8:ed:5d:0e:56:9e:e4:99:45:21:
                    d0:de:6c:c9:7a:96:b2:c2:cb:7b:f5:d2:40:37:2d:
                    4b:40:af:47:d5:56:6e:45:58:aa:96:33:3a:a5:38:
                    e3:f7:7b:c1:0c:ba:11:a8:ae:98:f9:25:b6:7f:39:
                    74:ba:8b:a1:0c:31:41:50:ee:37:05:63:72:90:99:
                    83:d9:50:b0:ea:ec:8c:7e:8a:59:06:7c:98:12:0c:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:3C:C6:AC:FF:8E:93:F6:D9:EF:02:3C:1A:83:34:46:59:F1:5C
            X509v3 Authority Key Identifier:
                keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:03:c0:08:c8:69:ec:82:0f:06:6b:02:e7:b3:8a:0b:f4:e7:
         81:f6:db:2c:2c:40:01:4a:1f:6b:43:2d:06:c9:4a:53:08:6a:
         af:1a:2e:3c:f1:6c:33:24:c9:ac:46:46:e7:ee:5e:0d:b1:52:
         bb:ec:60:17:c7:62:1a:cc:41:dc:51:a3:3d:0a:ec:08:69:0c:
         a9:2a:72:ec:2c:73:4c:5c:23:20:39:47:52:9e:4c:6e:19:5b:
         80:6d:b0:2f:21:00:3a:75:59:9e:f6:8f:5a:92:21:71:29:6c:
         15:e8:c7:33:74:fc:75:6a:0a:68:c0:8c:16:f6:8d:f9:53:43:
         ae:8a:4d:20:c3:be:7c:29:c6:55:72:1c:de:63:02:14:53:61:
         d0:f6:7f:3b:41:c0:ae:50:b9:7f:0a:cf:0d:6d:74:10:f7:0f:
         9f:d5:af:07:44:7c:eb:f4:c8:91:ea:3c:2b:d6:c0:fe:fb:19:
         ae:b9:33:a3:9b:7f:d0:d2:d3:bf:58:fe:02:af:74:cf:c8:40:
         44:d9:b8:1e:71:81:d6:12:a4:4f:14:94:20:25:b0:17:cd:3d:
         1e:09:e0:24:b8:18:01:3d:f8:7d:37:da:55:3b:53:6b:00:61:
         27:86:fe:a4:1a:f7:3c:97:3e:f3:a0:ed:31:0f:05:16:b1:77:
         ff:98:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:43 2026 by rpki-client