Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File:                     CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier:          7utQDmOLKA3qk+hyIKL06sz7yIh9GFA+ITXdMZfEUjc=
Subject key identifier:   FA:B8:D2:4C:8F:A1:B1:5B:CE:DB:B7:AC:78:91:A3:F0:55:B6:E1:27
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer:       /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial:       019D26CD4A23D70BD848794369368160D528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number:          1840
Signing time:             Wed 25 Mar 2026 21:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:21 +0000
Files and hashes:         1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
                          2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: 4LyEIyGja0+A3b93SFb652hNmAOPkk2AHyexj7qOPps=)
                          3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:4a:23:d7:0b:d8:48:79:43:69:36:81:60:d5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
        Validity
            Not Before: Mar 25 21:01:21 2026 GMT
            Not After : Mar 26 21:01:21 2026 GMT
        Subject: CN=fab8d24c8fa1b15bcedbb7ac7891a3f055b6e127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:81:a3:c9:5e:9e:b0:a8:62:97:01:93:d5:
                    bc:cb:f3:3a:f4:82:73:64:e1:45:45:ba:e1:70:0c:
                    3c:34:60:65:81:6d:98:1f:b7:30:36:8e:81:20:5a:
                    3a:2a:98:02:84:ac:15:d1:2e:bc:10:7c:f7:89:cd:
                    70:4d:85:45:d3:75:9b:37:cb:a3:b7:a7:66:d6:ba:
                    f7:d0:75:d4:86:83:12:6a:27:44:76:16:0f:e6:90:
                    3e:0a:07:fb:e4:36:6c:13:7c:1a:e2:b9:0e:26:95:
                    ef:3d:f8:b2:66:dc:be:06:4f:ac:3b:56:02:23:e8:
                    37:e9:49:e8:bd:49:6f:73:92:eb:c5:79:21:52:30:
                    a2:75:6c:33:ad:f2:ed:dd:8c:c3:0d:cd:9d:d6:a5:
                    10:22:30:a0:44:7b:0c:3e:b7:69:0d:b8:19:5f:8f:
                    74:2a:7b:5b:06:c8:e4:a5:98:14:b3:c0:fc:73:0b:
                    b6:6b:d1:8e:73:8e:81:92:74:cb:00:b4:a4:80:8c:
                    e8:1a:0a:25:ce:b5:ec:46:da:9b:91:cf:a1:76:db:
                    60:ba:dd:59:fa:af:48:88:a5:10:75:b1:b2:2c:3c:
                    f0:7a:42:69:ef:7e:9b:6b:cb:be:13:65:7a:0f:2f:
                    a5:1a:38:57:34:93:d5:f7:a2:bd:2b:66:61:8c:f3:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:D2:4C:8F:A1:B1:5B:CE:DB:B7:AC:78:91:A3:F0:55:B6:E1:27
            X509v3 Authority Key Identifier:
                keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:5a:dc:42:a9:0f:25:81:8d:42:51:d6:f0:85:d9:61:7f:
         b4:4c:db:dd:e5:f0:cb:f1:3b:ee:cc:cf:16:75:1e:00:f1:05:
         13:94:c4:5b:8a:b4:36:0f:d0:fe:2e:f6:a5:ef:96:80:17:a2:
         b0:d0:47:25:12:50:8b:d9:8f:04:87:71:3d:17:07:a0:6c:6a:
         df:c0:86:71:60:bb:d2:c8:37:40:ee:43:2c:45:2f:57:d9:a5:
         9a:2b:aa:75:be:09:fa:68:cd:cc:39:86:26:57:27:f7:86:0c:
         95:4e:f2:0a:7c:c8:a6:ec:a4:37:ff:cf:0d:a7:99:cb:f9:af:
         8a:08:bf:ca:b0:a7:73:7f:b7:f8:85:00:5e:5a:69:b7:37:ad:
         cc:ef:8c:30:f8:19:c5:3f:dc:17:18:5d:87:a1:6e:96:d9:9b:
         29:63:bd:e6:12:09:ad:f8:e7:a5:5f:e6:c1:d3:99:f4:51:36:
         63:81:5a:ab:4b:3d:e2:81:ee:f9:c3:df:ca:ed:9d:21:45:0f:
         49:9d:fc:9b:1c:b1:f1:8f:68:85:0d:33:01:40:fd:00:f6:cc:
         5d:c9:e2:12:27:9f:d7:74:ea:07:b1:14:d6:6b:b2:58:c0:28:
         5f:7c:fc:96:b0:5f:83:45:cc:11:6a:d8:bd:25:85:da:af:be:
         c6:fa:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:09 2026 by rpki-client