Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          BVVlu29QCcACG3CDifEgZ6ctkLLfTGiCyDoeOuoSnzU=
Subject key identifier:   18:F2:A4:A0:2C:C8:BE:D5:6C:64:8B:C1:BD:B9:00:6D:D8:58:90:09
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       019D2884675B1894726B41570535A4EEAA72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          13E2
Signing time:             Thu 26 Mar 2026 05:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:58 +0000
Files and hashes:         1: X1WuKlWJ7N-82KTPxady2cIXznU.roa (hash: CxlgvTkL1NuAZ+neb0ZSrZggj/ih2/o/ym4OjDYej4w=)
                          2: Zopjwe1rzd92yl72g_6NHQcrS2g.roa (hash: nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=)
                          3: jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa (hash: FExYJd4IW0AFEGSSJ7W+rnnUSnn7gKOoCc+pFC2Nly4=)
                          4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: xulHHScpeX2VZ7HJjcongHFVB+s+2/+mqEa9wmf/Aiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:67:5b:18:94:72:6b:41:57:05:35:a4:ee:aa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Mar 26 05:00:58 2026 GMT
            Not After : Mar 27 05:00:58 2026 GMT
        Subject: CN=18f2a4a02cc8bed56c648bc1bdb9006dd8589009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:b3:2d:05:4d:62:89:15:57:8a:64:43:bc:
                    88:af:0d:aa:a4:bc:53:d0:9b:8b:d4:0b:51:b1:38:
                    cf:c1:6e:a8:7b:9f:18:a8:85:ed:a7:27:f8:ac:93:
                    1e:81:59:ad:ec:eb:ce:60:d5:18:44:97:a5:82:01:
                    67:20:27:41:f5:f9:ea:ce:c4:75:02:f6:4b:3a:74:
                    cd:13:4b:a0:f6:11:29:79:43:98:3c:ec:b4:9b:37:
                    f4:cf:fe:a0:8d:cc:44:9e:1a:4f:37:3b:b5:e0:e9:
                    4e:26:5e:e5:f4:22:f2:cc:c5:b4:46:fa:85:7b:af:
                    7c:a6:27:71:ff:83:e8:e9:0b:df:75:6f:53:95:84:
                    9b:73:4f:8b:e3:9f:51:a0:1a:b9:95:6d:7a:40:58:
                    95:57:0f:fc:12:f1:94:64:cf:03:2f:a9:66:a5:ab:
                    d3:a4:db:e1:c3:5f:14:5e:97:e9:50:3c:ef:81:f2:
                    73:13:21:6a:66:1a:d2:b3:24:4c:74:ec:02:ee:f3:
                    64:91:e9:95:6d:93:2c:70:df:1a:57:e8:83:5f:bf:
                    13:46:42:22:12:b4:ce:c0:ab:0b:f9:40:6d:91:d5:
                    f5:47:67:cd:76:bf:b3:16:4c:b7:0d:ac:3b:86:0c:
                    1b:57:f1:e0:06:ea:dc:8e:58:02:de:9c:16:2c:59:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:A4:A0:2C:C8:BE:D5:6C:64:8B:C1:BD:B9:00:6D:D8:58:90:09
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:df:0f:56:f5:08:9a:36:dd:01:de:3c:59:ff:6f:d7:fe:05:
         41:72:cb:73:62:f7:a5:32:7c:d7:f6:de:03:b2:73:8f:6b:bd:
         b2:0a:07:57:ed:b5:05:1b:6e:c2:63:78:ce:24:dd:1f:06:a5:
         6d:12:e3:ad:bc:e2:95:d7:81:c9:49:27:fe:43:e1:ba:a1:95:
         1a:e0:b7:52:fa:09:da:f0:90:91:a1:8c:d4:3d:4a:05:e9:05:
         23:1f:1d:17:26:bb:9a:15:ec:c5:9e:44:61:02:b4:5e:65:79:
         c9:bf:9a:7d:cd:18:80:73:56:de:22:9d:97:c4:cd:f1:81:cb:
         ce:9d:62:b2:52:54:98:ea:86:9f:3c:02:7b:af:9d:20:54:18:
         c4:0a:8a:e2:44:41:cb:e2:8b:0a:42:dd:32:46:d9:56:26:31:
         ae:60:5c:62:69:ea:ad:a9:b6:d1:bd:25:29:ed:fe:0e:c5:86:
         a0:9a:f6:44:6c:4e:33:28:9a:2a:ff:89:ab:bd:64:42:30:7a:
         e5:eb:0f:df:ac:6f:c1:1a:28:dc:03:e7:03:36:3a:fa:3a:ef:
         f8:c9:7e:0d:8b:bb:f7:64:a3:86:7a:e4:bf:37:7a:8b:60:6a:
         12:50:75:8e:e9:d6:6d:19:3f:d5:81:03:55:e5:25:46:74:92:
         a2:5d:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:07 2026 by rpki-client