Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          4C9m01seTXRIxuZLr7FHm8u9q4mSJ0t2kLs21TeRKF8=
Subject key identifier:   98:62:25:FD:B7:DB:32:77:57:84:AC:C4:BA:97:DD:DB:2F:6D:39:49
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       019D299741DC6BA2D38C0DBD6F8694E57E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 10:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:11 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: Me3bmS+96+vs+9H/K7FAGS6Fs2ZWAKiGsery5EfT3zY=)
                          2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:41:dc:6b:a2:d3:8c:0d:bd:6f:86:94:e5:7e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Mar 26 10:01:11 2026 GMT
            Not After : Mar 27 10:01:11 2026 GMT
        Subject: CN=986225fdb7db32775784acc4ba97dddb2f6d3949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:28:fe:30:0e:f0:16:ca:15:1e:b6:36:e2:
                    b4:d8:72:88:80:fb:3f:03:02:aa:b4:ca:fe:aa:66:
                    74:7e:e1:5e:a2:33:ca:78:a0:28:7e:f5:e5:58:20:
                    c2:4e:18:a1:81:fa:3d:9c:98:87:ce:4c:18:45:b6:
                    05:ec:fa:d5:0d:c2:ed:3d:e0:fc:d9:d2:64:ff:9f:
                    5c:88:d7:18:c6:78:c2:f2:1a:8d:af:cd:f9:e3:5f:
                    97:fa:8d:0e:79:54:0c:7d:2d:d1:39:5b:c0:9f:75:
                    e2:1f:bd:42:0f:d5:b8:13:c3:c8:e0:05:b6:5b:14:
                    7d:f1:51:45:2a:dd:ff:86:62:00:cd:d9:7a:2e:e1:
                    50:85:6b:f3:99:20:c1:e8:37:df:53:bd:62:94:fc:
                    c0:76:8e:6e:23:a5:4e:02:ed:3e:4b:f9:cc:e4:30:
                    a5:be:56:2a:a9:99:e9:71:9c:eb:4f:4d:7e:02:7b:
                    23:f5:71:16:4d:55:a3:19:3b:57:3e:7d:81:86:bc:
                    27:49:df:c6:cc:5a:fd:5d:03:a3:2f:32:82:08:9a:
                    c8:7f:a1:95:7f:82:41:84:19:d2:a4:71:d0:de:0e:
                    c0:f6:9b:aa:6d:a0:e6:36:74:dc:f2:f9:27:fe:bb:
                    3f:e3:5b:6e:34:d9:3d:b3:8a:76:68:8c:31:86:b6:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:25:FD:B7:DB:32:77:57:84:AC:C4:BA:97:DD:DB:2F:6D:39:49
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:75:e8:93:e9:04:89:bb:fb:ec:2b:ed:14:f6:c0:cb:31:73:
         ab:ea:f0:a5:1b:e2:a6:1d:d5:d2:b6:4e:96:ba:ec:76:46:13:
         4e:d9:f3:25:06:ca:1c:98:e9:89:03:1d:7e:83:c2:68:3e:35:
         aa:6f:fe:e6:2e:6b:e3:67:2f:46:b2:fa:cd:58:0b:88:e7:81:
         1b:a1:ac:c6:e6:7d:df:f8:6c:83:97:ee:86:a7:8e:2b:0f:4c:
         97:b5:04:dc:d6:11:93:f7:03:97:ed:b2:81:be:44:13:c1:f3:
         4e:fa:8d:dc:2b:a9:50:c9:cf:75:d6:5b:36:e5:5b:41:ef:e9:
         44:98:a7:ff:53:a9:e5:4f:cc:77:b3:bf:b6:8c:fb:46:77:b8:
         3d:ea:e0:0b:82:14:3e:2d:0e:a7:f3:a3:bd:29:31:4b:77:3e:
         db:06:a6:18:e2:16:11:4e:2c:34:08:1e:61:6e:d9:3a:b7:a0:
         f3:3e:20:d0:68:bb:84:be:05:cd:ed:53:3c:e1:98:ef:d2:af:
         85:b5:2a:ef:84:3d:79:6a:bc:3e:fa:ea:71:bf:5e:74:f2:6b:
         f5:8e:b8:cb:13:f6:b5:eb:5a:cc:73:fc:46:29:95:e5:aa:2f:
         36:2b:0b:0e:24:1e:f4:db:a5:59:ba:f2:8f:cc:f6:e7:bd:c9:
         91:81:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:09 2026 by rpki-client