Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          BtLAVcnIqfzOaS9XAHT7Vv6vCH6q7lEG6uJBZTRsD3o=
Subject key identifier:   CE:29:73:FA:68:F7:44:07:7D:70:1B:ED:8D:15:49:39:FA:AE:05:F2
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       019D2704C637B379505D7E982A0AD5F96A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          1531
Signing time:             Wed 25 Mar 2026 22:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:57 +0000
Files and hashes:         1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: maLA4+/d4EM93aELqxZ88Rd5kMqz9huz1fZ+Oxtbtog=)
                          2: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (hash: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c6:37:b3:79:50:5d:7e:98:2a:0a:d5:f9:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: Mar 25 22:01:57 2026 GMT
            Not After : Mar 26 22:01:57 2026 GMT
        Subject: CN=ce2973fa68f744077d701bed8d154939faae05f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:7b:3c:88:d6:2c:fa:db:20:82:3e:c1:b0:
                    0c:79:3e:07:1b:3b:61:05:f0:fc:92:1d:22:83:19:
                    51:bf:a2:21:b7:25:4c:59:b3:e5:72:f4:36:6b:e2:
                    ba:e7:d7:f5:8b:58:1c:8a:fc:84:f2:15:0c:e7:8f:
                    3f:b6:0a:fb:45:e0:12:7a:38:1c:fb:cb:f6:d1:a2:
                    aa:3c:49:97:2c:3f:f4:de:14:ef:69:ef:08:28:7e:
                    4f:d4:91:31:9a:b9:56:c7:fa:10:6f:e2:ae:d0:dd:
                    b6:e1:bb:4d:76:27:99:db:42:1a:20:c2:a2:3e:37:
                    29:83:bf:1c:65:55:bd:9c:9f:e7:bc:73:db:f5:57:
                    f9:3f:4c:da:55:fc:fd:a0:34:70:3c:cc:95:6c:36:
                    fa:9c:f8:7a:a4:0f:9b:a5:9b:02:7f:da:c4:03:c9:
                    4f:b1:b4:80:16:95:a2:70:de:03:b4:ab:38:9e:1a:
                    57:42:c6:70:aa:52:6b:f0:a2:72:db:e3:66:48:30:
                    cd:cf:51:f0:4b:e2:dd:79:ad:65:fb:bb:9b:de:b0:
                    b5:f0:b4:3b:d7:a6:50:a0:ae:4b:5c:da:7e:83:80:
                    6a:97:ed:76:a6:dc:0a:57:a4:be:22:88:11:1c:eb:
                    fa:23:1f:f3:07:72:52:a9:42:42:7a:70:f7:78:9c:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:73:FA:68:F7:44:07:7D:70:1B:ED:8D:15:49:39:FA:AE:05:F2
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:89:02:5c:cc:68:08:46:47:f1:d8:97:fa:5b:3f:43:6b:
         92:51:3d:db:26:ba:21:1f:9d:8a:68:e9:05:70:ab:6d:24:8c:
         db:2c:82:a3:36:e8:f8:ec:e3:70:73:7f:89:6a:43:eb:68:e7:
         ca:71:b1:e5:94:c1:f2:ee:68:41:56:16:00:84:78:c0:39:2f:
         35:bd:39:67:52:5d:6f:45:39:ba:29:10:68:99:00:b5:16:75:
         b3:b8:a1:8a:d9:ce:f6:9a:f6:39:9e:6a:ef:12:64:d8:a7:15:
         0f:68:c2:cb:06:69:0d:3f:be:01:b3:35:b3:4b:e5:cf:74:86:
         26:8e:fa:ba:1b:cd:76:4e:56:f8:12:99:1a:ec:dc:09:7d:29:
         3e:86:84:36:9e:e7:48:ba:3d:54:c1:27:9d:ed:2a:77:5c:4c:
         f9:b1:84:57:2a:0d:05:fc:c4:dc:56:70:36:4b:5d:48:98:f8:
         f1:58:b8:1f:b8:70:2d:19:af:2e:26:e4:4d:2e:dc:eb:4c:eb:
         f3:18:91:17:b9:bf:6a:87:2d:27:0c:da:27:78:9a:ae:7a:2a:
         e2:03:7b:1a:d4:9b:07:0d:d6:7e:74:59:53:06:f5:7b:df:13:
         dd:7b:a9:10:6b:73:85:1e:36:ae:db:41:57:37:c8:47:fd:63:
         3a:e7:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:43 2026 by rpki-client