Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File:                     sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier:          zVpMZHx3pj0Q8wEZgXAT1bj5BSK0XTunN+cc4sT0gtQ=
Subject key identifier:   30:46:90:BC:39:2C:CD:17:0B:60:36:DF:45:DB:2A:65:8C:3F:0A:E1
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer:       /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial:       019D26282296BEC81094FCD000068FF754E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number:          111E
Signing time:             Wed 25 Mar 2026 18:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:57 +0000
Files and hashes:         1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
                          2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: jx4yAi9xQc6FXWynMbuabbqZQv3mBGRna/rDU2qFaus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:22:96:be:c8:10:94:fc:d0:00:06:8f:f7:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
        Validity
            Not Before: Mar 25 18:00:57 2026 GMT
            Not After : Mar 26 18:00:57 2026 GMT
        Subject: CN=304690bc392ccd170b6036df45db2a658c3f0ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:78:2f:00:1e:df:e2:2c:60:5a:6b:f7:10:
                    4f:e4:62:1c:87:c0:e2:14:b6:4a:e0:6b:f3:cd:7b:
                    c5:fa:8f:9d:d5:73:aa:54:8a:c4:88:3e:7a:90:3c:
                    69:be:57:a3:4e:3d:51:fb:37:67:69:3d:85:b0:83:
                    ef:18:e6:5d:ae:bb:2e:b5:76:0d:1f:5e:e8:a1:f2:
                    ea:69:d9:00:4e:ca:70:0e:71:24:8a:ba:68:31:e6:
                    ab:4d:be:9b:14:42:72:4d:51:88:77:bd:f1:db:d9:
                    73:14:1f:fc:95:07:52:dc:08:1d:d8:17:b0:a9:4a:
                    ab:fd:f1:c5:49:60:b0:a7:ca:15:cc:7b:75:15:0d:
                    49:b4:04:a4:f9:24:f6:4f:05:45:74:83:fd:3d:07:
                    01:c6:f5:42:80:49:61:b4:a9:1d:7b:b1:c2:8b:e6:
                    e9:db:c9:47:9e:38:b3:8a:c8:54:da:68:1a:0e:87:
                    60:30:7e:83:c9:85:20:e7:2d:cd:a2:0e:d4:da:a9:
                    7c:43:d3:14:01:78:d1:0a:83:28:47:49:ee:3b:b2:
                    6e:6d:39:35:4e:18:ee:7a:c9:39:f8:f0:11:32:51:
                    0e:e2:e8:b6:f8:93:64:3d:19:73:64:4b:16:c0:5e:
                    3b:07:65:8b:8a:79:5c:0d:45:16:4f:49:77:1a:d5:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:90:BC:39:2C:CD:17:0B:60:36:DF:45:DB:2A:65:8C:3F:0A:E1
            X509v3 Authority Key Identifier:
                keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:7d:d9:d9:ca:64:56:ae:f8:c0:8b:57:49:f7:55:cc:be:
         53:cf:e1:25:88:23:22:7a:94:c2:d1:9e:af:7e:89:25:06:a5:
         8f:54:f9:bc:39:95:d4:9d:31:44:38:93:08:49:46:e2:9f:bf:
         f5:5e:ba:4e:1d:be:40:11:50:6c:f1:29:81:9a:98:4d:11:1f:
         09:6b:b3:88:60:eb:8d:d7:14:49:b0:66:fc:62:6d:78:e5:b2:
         c5:c5:85:76:0a:2e:25:db:66:cf:61:a5:c0:1f:d2:9d:0b:00:
         58:be:0b:56:6a:b0:99:80:f6:07:4d:49:1a:da:8d:1e:35:b5:
         5b:69:23:9b:cc:aa:55:e2:60:e6:3f:3d:f7:28:c3:b6:63:11:
         83:9b:43:a8:66:91:95:a5:05:fc:5a:5d:25:6b:30:81:33:74:
         17:6a:9c:bf:d0:44:a8:79:f4:8a:4f:62:51:83:fd:78:44:0d:
         70:51:a1:3d:b7:53:d5:26:4f:b3:bc:56:45:56:a0:f4:4c:6f:
         af:5b:2f:e1:9e:28:48:e9:98:8a:7c:8d:5c:79:a6:f6:55:0a:
         a2:b1:f1:f6:3b:fe:28:81:b3:4b:81:5a:27:b4:f3:ff:a8:1c:
         00:92:dd:6f:07:5a:1e:33:76:03:73:5b:56:a2:fc:56:a0:dc:
         9a:f7:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:02 2026 by rpki-client