Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File:                     CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier:          Bafx3hueyuJSfiI0RfmwMuxOJkc0Xar/EyuV5DHAOGw=
Subject key identifier:   9C:60:14:D6:DF:38:3D:23:24:8A:E9:03:C1:0E:C5:8C:E0:00:33:1D
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer:       /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial:       019D28BB2485F37ED16A549EF486A8618F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number:          1841
Signing time:             Thu 26 Mar 2026 06:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:46 +0000
Files and hashes:         1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
                          2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: J0fMaBtr8uvOtz6TwfLMJGBbaFY/TqHg9ksccze1SiU=)
                          3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:24:85:f3:7e:d1:6a:54:9e:f4:86:a8:61:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
        Validity
            Not Before: Mar 26 06:00:46 2026 GMT
            Not After : Mar 27 06:00:46 2026 GMT
        Subject: CN=9c6014d6df383d23248ae903c10ec58ce000331d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:73:43:6b:98:00:07:87:a1:77:23:f4:f8:
                    c5:1d:ab:7d:1f:c9:57:bc:1f:01:c0:95:3d:b2:f5:
                    03:80:e7:a5:81:5a:21:fd:e0:3e:3a:d3:1a:b2:f2:
                    60:68:d9:ca:ba:a9:6c:d7:68:d7:48:ad:af:44:db:
                    65:c8:85:50:32:87:42:b2:b4:7a:cc:22:00:40:e2:
                    8d:d5:25:61:e6:e7:f7:6d:97:e2:07:be:03:86:30:
                    73:32:e3:b3:23:4e:b0:68:8a:b2:73:02:9a:ee:10:
                    0d:ed:11:d3:01:8b:be:65:cf:0d:24:05:05:a8:cb:
                    da:2a:65:71:64:6f:8c:4b:fc:95:90:88:67:a2:bd:
                    bc:5d:c4:48:01:7b:1a:58:39:7b:54:78:1b:9a:01:
                    42:06:7c:b7:27:be:2a:87:d7:07:ae:eb:ac:15:20:
                    10:74:85:3d:f9:5f:66:fd:47:6f:f3:6d:22:bc:43:
                    43:41:19:f5:c7:c4:e1:c2:28:88:af:e6:e1:a4:42:
                    96:90:fa:6c:d9:86:3d:0a:0d:cc:4f:bc:b1:10:50:
                    05:14:37:57:52:4b:53:e3:c0:32:86:0c:66:30:64:
                    2d:04:14:f5:4b:30:07:ad:09:f5:9c:a5:cc:20:4b:
                    9b:cb:d0:f5:e0:cc:44:08:66:32:82:14:73:6d:c6:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:14:D6:DF:38:3D:23:24:8A:E9:03:C1:0E:C5:8C:E0:00:33:1D
            X509v3 Authority Key Identifier:
                keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:47:e9:98:a3:9d:1a:80:4c:78:29:db:38:77:13:73:a0:a0:
         48:03:78:34:42:5c:0f:a8:cf:e4:de:98:e5:02:e4:16:36:16:
         9a:2b:1f:0e:dd:a2:98:a0:13:05:72:bf:7f:3d:a3:3f:a8:aa:
         14:dc:8a:df:1b:a1:6b:d1:71:86:96:40:55:1f:4e:33:7e:49:
         2d:f6:d1:79:db:12:68:96:0d:4d:ca:b7:a6:91:4f:d8:8f:ea:
         73:6c:af:fd:5e:dd:30:40:67:96:ab:78:24:66:db:14:1e:c4:
         be:70:90:a4:91:99:05:7f:b1:d3:aa:84:99:53:48:ce:51:7a:
         e6:87:f8:30:f8:63:8d:03:be:a7:6d:3b:d5:d2:1b:03:7b:e3:
         c6:b8:67:e7:82:17:fc:d9:cd:98:9a:6b:5a:9e:de:ff:cb:30:
         ab:eb:b2:d6:80:cb:0a:ed:e2:ee:07:60:6c:1e:eb:51:d5:f0:
         79:ab:a5:b1:df:12:61:31:26:0d:cb:69:dd:6d:70:5d:d9:81:
         51:86:37:72:b0:e8:3a:03:ab:cd:9e:4a:24:cb:b8:61:8f:58:
         a7:ad:00:70:56:f2:f6:cb:2c:7a:f4:1b:42:68:d4:e5:10:70:
         d5:ba:27:79:11:a7:71:e1:a2:cf:a4:eb:7b:60:16:4c:78:e1:
         3e:2a:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:34 2026 by rpki-client