Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          bJP2FgTSFg51hoAt5XP9Ct/5S8++JIRhv2XqR3IgmJY=
Subject key identifier:   75:18:FD:6C:6E:60:20:99:A2:E8:B5:83:22:E8:F4:E0:04:B6:75:1F
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       019D254CC5233B29EA22EE600F924C5549BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0B32
Signing time:             Wed 25 Mar 2026 14:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:21 +0000
Files and hashes:         1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
                          2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: iQH5/shpNa73/Mw4qyfewViQFE0bSw/gjk9xiMXn5fA=)
                          4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
                          5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:c5:23:3b:29:ea:22:ee:60:0f:92:4c:55:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Mar 25 14:01:21 2026 GMT
            Not After : Mar 26 14:01:21 2026 GMT
        Subject: CN=7518fd6c6e602099a2e8b58322e8f4e004b6751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:59:bf:12:67:84:a3:4e:fc:30:de:04:2f:
                    56:b5:0c:7b:76:1d:20:1a:57:a1:59:da:4e:8b:30:
                    4f:28:22:22:87:9f:c5:65:0e:cd:a5:e4:d9:c2:59:
                    94:0b:dc:f2:6a:36:37:ac:19:9e:a6:89:47:a8:d4:
                    1a:fb:c3:17:ea:11:d4:16:7d:27:1e:1a:ac:10:83:
                    27:0c:74:1e:43:db:57:71:44:a0:cf:9f:ea:17:dd:
                    99:af:6d:28:2d:fe:68:b6:36:21:64:b9:d7:4d:a8:
                    f4:61:a5:ac:d6:d7:24:00:f9:28:c1:76:05:6c:9c:
                    84:c7:4a:2f:dd:16:19:fa:a0:d0:fe:81:3a:81:ab:
                    3f:81:81:ff:c4:9a:43:3a:9f:9a:67:f6:34:27:d8:
                    f4:97:0c:3c:a8:3b:a8:06:d4:31:c8:48:fc:03:de:
                    0c:f6:53:73:e9:e0:52:85:b3:70:53:af:13:09:16:
                    8a:8a:44:60:2a:48:f3:e2:63:ca:bc:07:1f:21:a9:
                    9b:56:6c:2e:d8:f3:e2:a6:09:95:a6:18:47:36:fd:
                    06:76:a7:ab:91:ae:83:e6:03:81:33:d6:72:a9:fd:
                    b3:ef:9c:be:e2:1c:2a:8b:dd:62:d0:60:ca:ba:df:
                    dd:17:63:6d:40:ea:ed:c5:80:5e:dc:a7:81:b7:04:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:FD:6C:6E:60:20:99:A2:E8:B5:83:22:E8:F4:E0:04:B6:75:1F
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:f8:fb:78:59:bc:ce:ea:56:3c:fa:26:89:54:c9:3e:a9:
         00:e7:e6:e5:4f:51:74:64:ee:ec:05:aa:59:16:9f:81:5d:30:
         bb:d6:85:2c:a4:2d:70:d5:ab:db:4c:07:2a:f4:75:88:b6:f5:
         a5:25:a3:29:0b:1e:96:c5:c8:8b:26:f7:bc:e2:03:58:32:f8:
         2f:f5:ea:5a:5c:2e:e8:1c:3a:94:5a:e4:d2:ce:93:2d:94:b3:
         e9:ff:24:2e:cf:4a:fe:3d:78:1e:76:bb:f2:25:11:d8:dd:66:
         e3:41:5d:21:f2:4e:5d:1d:ed:05:97:af:2c:95:20:57:b9:a4:
         16:67:30:f8:21:e5:1a:2f:33:79:bc:2c:c8:8d:5c:8e:c5:83:
         06:d2:c9:9e:b9:f8:6e:25:c4:35:03:16:13:20:af:59:36:93:
         aa:07:c6:3a:67:2f:57:38:c5:63:34:e9:dd:56:1e:c3:37:ec:
         61:59:a4:ed:8d:83:5f:a5:4e:9b:78:33:7e:10:b9:dc:55:07:
         44:18:c1:fe:88:dd:87:d6:4a:85:e0:0b:25:22:06:7f:c2:9b:
         91:41:1d:b4:ce:1f:8f:dc:9a:6e:09:78:ac:b3:c1:85:33:64:
         04:97:c1:16:1b:20:61:c4:a2:f4:da:3f:f4:c2:71:97:16:76:
         c8:40:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:13 2026 by rpki-client