Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          3tpfqOUSB1xgo6Rr4p1y2xONLqTaCXanIkOnvCk11DI=
Subject key identifier:   A6:92:04:A5:68:13:A9:8B:41:7A:9A:D6:3A:3F:AC:BD:C6:1D:19:8A
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019D29CDED2C3AA7E3BE613E145C9B39B431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 11:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:54 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: VKCHJ5RAQDihF+w8uECbABNZglLkjHYeKIkrkyNt51k=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:ed:2c:3a:a7:e3:be:61:3e:14:5c:9b:39:b4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Mar 26 11:00:54 2026 GMT
            Not After : Mar 27 11:00:54 2026 GMT
        Subject: CN=a69204a56813a98b417a9ad63a3facbdc61d198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:1d:1b:d4:3f:96:50:e3:44:09:72:ad:4f:
                    1f:f8:59:56:e1:51:d4:77:83:73:b0:52:a2:6f:32:
                    03:e5:44:5c:44:e3:c8:03:7a:8e:79:5a:f5:12:47:
                    ee:f5:da:f4:28:0f:2e:6c:1f:c0:16:f7:8e:66:ff:
                    49:d2:6d:c8:0c:b7:33:e1:14:4b:de:e3:cc:40:1d:
                    d8:00:4f:9b:05:12:e3:a7:c3:74:cf:8f:8f:61:aa:
                    64:2a:fc:ae:e3:a1:02:56:ef:c0:23:09:1d:e6:e8:
                    7a:a2:1c:b6:b9:35:34:ba:0f:92:56:6e:3d:f8:60:
                    2a:de:ea:c4:12:e9:79:3b:a8:99:1a:76:77:c9:c5:
                    bd:de:16:df:da:ce:7d:92:31:8e:68:30:09:37:94:
                    a5:ad:7d:cd:f4:cd:e5:24:e8:4f:68:d7:da:82:91:
                    e8:e5:ad:3a:82:a4:98:40:cd:c3:86:bf:1a:9e:b2:
                    ea:93:35:19:0b:0f:75:29:b4:b5:63:50:82:27:2a:
                    18:28:97:7f:48:56:91:27:8d:d7:3a:f2:99:be:87:
                    8b:66:88:2e:c0:42:c6:c8:6e:09:7d:ac:67:fe:b1:
                    64:46:fc:bb:3b:aa:8e:2f:96:29:ff:87:63:37:68:
                    24:4f:db:97:b3:85:0f:cd:e2:13:e2:97:9b:34:4d:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:92:04:A5:68:13:A9:8B:41:7A:9A:D6:3A:3F:AC:BD:C6:1D:19:8A
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:56:aa:0e:11:35:9c:d7:ab:71:3d:a7:50:28:d7:19:1d:26:
         00:49:2e:44:c7:20:f8:62:e1:4f:b6:0b:84:74:c6:70:75:03:
         81:5a:9a:35:6a:4b:de:e0:38:6d:43:2b:4f:e1:c9:4c:c5:67:
         76:d9:0b:47:f3:45:a6:f3:48:f0:84:c1:62:d2:e2:a7:72:0e:
         32:51:7f:60:bb:34:d1:cc:ab:66:03:90:b8:b4:d6:35:f3:ba:
         f4:0e:b9:80:fe:3f:20:84:f9:08:77:63:5e:a1:a9:7b:66:f4:
         6d:f7:10:29:79:96:b3:45:2c:56:bc:ae:8c:59:3d:58:df:6e:
         3e:3a:7d:13:03:72:56:bf:41:b9:2a:b2:9c:cf:06:c6:4c:34:
         a2:45:22:ae:ec:f0:8f:fe:91:63:61:e9:07:81:38:74:83:66:
         cf:0c:46:f8:b4:42:c1:e5:35:9e:73:6a:32:f6:fa:d3:42:87:
         46:af:06:e0:a0:21:32:1b:75:62:4e:9e:11:84:0c:7d:98:7b:
         e9:31:04:9c:bf:b3:77:54:33:94:83:bd:d2:81:fe:5b:9c:d0:
         44:99:6d:b2:a1:fb:c2:92:dc:e8:d8:02:18:de:40:7c:c5:5d:
         46:a1:f6:ea:64:cd:6e:9a:78:2d:a3:46:3a:22:49:28:75:38:
         03:de:a4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:19 2026 by rpki-client