Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File:                     tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier:          z+dPsTcQ4ztOl7LI9D6bkgaQq7/gaejGWqozmIYA/rg=
Subject key identifier:   BD:71:59:08:5F:45:E4:C0:61:A9:B0:ED:D8:D4:FC:DE:0E:C0:DE:F1
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer:       /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial:       019D25834909EBC2BEEFE4505F53E64E65EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number:          12E5
Signing time:             Wed 25 Mar 2026 15:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:54 +0000
Files and hashes:         1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
                          2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: b3g7LuPsrN7LmqJu+7grfO15Hdfh+13tSLsxCWzVMUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:49:09:eb:c2:be:ef:e4:50:5f:53:e6:4e:65:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
        Validity
            Not Before: Mar 25 15:00:54 2026 GMT
            Not After : Mar 26 15:00:54 2026 GMT
        Subject: CN=bd7159085f45e4c061a9b0edd8d4fcde0ec0def1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:69:09:58:f9:85:fe:bb:57:ef:09:4f:da:
                    df:b4:c5:83:ab:50:be:ae:c9:e4:26:23:31:c0:d9:
                    54:a1:fd:ee:c2:a9:68:6f:ec:8c:a5:4a:1f:28:51:
                    33:e7:34:12:15:74:ba:ee:91:bc:35:a6:5e:4a:14:
                    3c:32:b9:3e:25:54:91:f6:1c:04:25:87:d0:5c:c9:
                    22:f0:e7:c7:75:d1:90:8b:6a:5b:ae:22:1a:57:ba:
                    46:49:eb:6c:a1:1e:18:54:c8:52:19:7c:3a:93:90:
                    27:28:fc:ec:cd:21:d7:e7:6e:7f:b2:6b:93:aa:e7:
                    bb:d2:a9:6d:78:f8:02:3e:68:50:85:1f:e6:2c:37:
                    91:53:ce:63:57:54:67:be:c1:c8:c0:15:6c:39:2e:
                    f1:49:5f:87:50:74:60:f9:f7:48:0a:df:05:4c:f4:
                    4c:5d:90:4a:6e:9f:c6:d2:6c:20:85:97:8e:7d:1a:
                    c1:a6:37:34:c8:1d:87:ae:10:c9:8f:56:93:1b:28:
                    7e:99:e0:4c:5a:9d:a9:dc:36:38:fb:94:75:d8:f3:
                    d0:80:50:9e:88:ea:db:ef:1d:c2:3a:02:a1:48:e5:
                    da:d2:21:f5:d8:0a:07:c2:6e:25:aa:37:70:4d:9b:
                    be:df:5b:91:5e:3c:1b:2d:8b:2a:3a:6f:c1:0c:92:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:59:08:5F:45:E4:C0:61:A9:B0:ED:D8:D4:FC:DE:0E:C0:DE:F1
            X509v3 Authority Key Identifier:
                keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:20:91:f5:91:26:9c:9f:75:90:2c:5a:fa:7b:99:ef:c7:
         d6:62:67:d6:0e:7a:35:9f:f9:02:6f:16:86:08:67:ee:95:c1:
         c0:ef:1b:a9:9c:73:82:42:d4:95:07:d6:0f:0a:e0:c1:fd:d8:
         28:6b:f8:b6:15:58:59:0c:c5:92:b7:b8:53:eb:d7:47:57:41:
         af:75:5e:51:75:e1:bf:c4:e3:73:51:c3:0a:54:24:c1:f2:3a:
         2f:26:81:35:5c:71:e1:88:9b:63:1e:d6:5d:e7:ae:f8:50:6e:
         58:83:bf:85:ca:94:cf:76:6c:bc:6b:dd:5d:d7:39:2f:43:3d:
         de:41:df:67:02:dc:e1:e9:71:14:00:85:4d:9c:83:73:0a:b2:
         ac:fe:ca:ef:0d:34:f8:a3:73:7c:75:a0:89:c3:f9:02:26:9c:
         76:9e:b2:82:5e:d3:6d:50:5e:71:b2:44:a0:ac:4b:29:7b:da:
         8c:01:c8:87:74:3d:79:b0:e9:90:cf:54:c2:66:31:88:b3:ac:
         6e:fd:cb:6b:89:bb:3d:d6:bb:7e:a8:8c:f6:47:ff:96:33:30:
         68:38:a7:03:5e:94:2c:b1:24:d9:3d:76:5f:6d:02:c5:60:b7:
         03:71:90:a1:a8:12:06:45:ab:9f:cd:3d:25:32:c3:cc:20:0c:
         a2:da:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:07 2026 by rpki-client