Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          AZVjoqVkYYwAsQLoKgI9EFaQRVBy0XcePryUPDCgoMo=
Subject key identifier:   70:01:BD:22:4E:D6:CD:AC:91:77:8B:D2:12:34:E1:FF:88:6F:E9:A1
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019D2A3C182FA4120A49A4F06DFF634F296A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1899
Signing time:             Thu 26 Mar 2026 13:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:14 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: MffYvRy4Wsb59NAisK9iXfW9wGcMvmO5xPEUwexu/7s=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:18:2f:a4:12:0a:49:a4:f0:6d:ff:63:4f:29:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Mar 26 13:01:14 2026 GMT
            Not After : Mar 27 13:01:14 2026 GMT
        Subject: CN=7001bd224ed6cdac91778bd21234e1ff886fe9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:75:51:32:e3:d6:e5:f7:6a:09:c8:f0:06:
                    d6:c7:56:8b:dd:7b:f9:ea:bf:e5:2a:1d:93:fb:a8:
                    6f:d6:1f:c4:b4:47:f2:54:4a:c1:25:45:0c:67:ef:
                    f8:ab:7f:2e:ac:f8:c2:8b:e2:0d:4d:9f:cf:02:ea:
                    b9:2c:82:10:35:5e:be:64:f0:b9:44:be:12:4b:05:
                    90:99:30:8f:30:5e:f6:3a:83:dc:39:cc:53:2d:7b:
                    2b:98:6e:0d:3d:ff:b6:b9:53:51:9b:9e:a9:e4:a2:
                    3f:87:05:11:3c:33:9f:f3:2a:19:e6:82:67:6e:88:
                    eb:4a:9b:fa:02:6f:d6:7b:9a:fc:56:bd:df:76:06:
                    1d:ac:05:70:0b:6e:60:ed:3c:39:9c:61:dc:46:a8:
                    be:d2:48:53:79:06:cf:d0:ba:7e:58:b2:ff:21:c4:
                    79:ea:b0:90:6c:b4:c0:1a:24:9a:ca:f2:c8:f2:2e:
                    71:95:a7:25:48:f3:11:96:43:61:96:1f:33:7d:8c:
                    1d:f8:10:27:5a:d0:71:ef:d6:3b:6a:8e:da:18:c7:
                    b5:21:6d:d8:e2:32:00:91:43:a2:d3:b7:c9:d0:08:
                    47:b1:da:53:bb:64:e2:b9:70:5f:c4:eb:18:25:49:
                    a4:95:c1:ac:34:9f:ca:a6:f5:91:0d:1e:67:78:88:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:BD:22:4E:D6:CD:AC:91:77:8B:D2:12:34:E1:FF:88:6F:E9:A1
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:51:ba:75:05:f4:bb:69:b0:a7:cb:f4:83:41:47:94:bb:
         b5:e8:84:dd:59:0a:14:4f:de:92:fb:20:a6:12:d0:a4:91:79:
         c2:02:98:35:54:17:10:ec:4f:a8:f9:f0:db:49:f7:75:d0:1a:
         57:98:4d:6e:e2:2a:1e:64:dc:dd:4e:26:6a:3f:2c:fd:18:66:
         f5:ea:15:0d:22:52:cd:a4:72:65:dc:b1:74:fc:88:05:40:a0:
         fe:a0:1b:8c:78:20:88:83:26:05:7e:07:88:ae:06:13:95:98:
         c8:ab:a7:e0:f8:13:7c:30:94:a8:49:2f:68:49:17:61:06:84:
         6d:ec:f9:58:e3:71:51:8d:89:57:e2:8f:d8:2a:86:00:f6:e7:
         25:1e:87:62:cb:e1:11:67:0c:56:16:2f:ac:21:40:5d:78:3a:
         2e:86:78:04:38:30:b5:bd:32:71:fe:f8:10:72:02:24:a4:a7:
         86:05:f8:48:c0:7f:2b:16:50:69:e9:e5:a9:a3:f5:61:79:fe:
         00:40:f7:22:a3:8a:1e:2e:3d:8d:e6:f5:d4:cb:0f:14:92:e4:
         64:9a:6b:65:16:20:e1:84:2f:fb:93:a6:e3:da:6b:2c:b9:48:
         01:d8:0c:fb:1f:71:e8:82:78:e3:21:07:59:d7:99:09:66:52:
         8a:60:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:39 2026 by rpki-client