Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File:                     h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier:          3yygoECvHqjJK8U1d1k7cGIL3zhrZFjKdqrxUKqYnlU=
Subject key identifier:   14:DB:A5:FF:9D:B5:9E:E5:6C:35:E8:2D:66:D0:DA:79:13:D8:B4:91
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer:       /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial:       019D25BA85D69A879D0EDD2434B6A33473F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number:          15A8
Signing time:             Wed 25 Mar 2026 16:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:14 +0000
Files and hashes:         1: 74CsHa1gIlR63JIzjhQivmcI93g.roa (hash: C1WaPS/UW69Pt4QRIwyedYxNzPaQEVQGboXKkZyZxnU=)
                          2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: kNMEb13KZAxcKuy2uY3KoJRRd8ZcpQZx3t/QxS11sc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:85:d6:9a:87:9d:0e:dd:24:34:b6:a3:34:73:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
        Validity
            Not Before: Mar 25 16:01:14 2026 GMT
            Not After : Mar 26 16:01:14 2026 GMT
        Subject: CN=14dba5ff9db59ee56c35e82d66d0da7913d8b491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:a7:66:f1:0e:54:a8:c1:90:fd:b7:1a:e6:
                    58:f0:0b:48:e0:81:3a:0a:54:83:1a:46:fb:36:2b:
                    60:2a:4e:73:e0:20:0a:14:db:bb:93:81:de:d2:5a:
                    27:80:0e:9e:3b:5d:42:cb:39:d4:5a:e6:c7:68:96:
                    ec:6b:fa:54:05:b5:f4:4d:4e:82:47:0d:31:86:2b:
                    a1:01:fa:ee:8a:ae:92:fd:25:3e:eb:8c:6b:60:56:
                    6e:4f:f3:2a:c8:66:7b:62:81:dc:80:58:c0:c9:64:
                    97:dd:99:98:5b:f7:4f:77:a3:fd:0c:df:61:b3:03:
                    0c:76:6d:ac:a7:25:43:00:87:c6:8a:64:b3:d7:7d:
                    1d:4e:69:61:c5:ce:ec:db:2e:45:a5:1b:b8:71:07:
                    f2:47:6c:e1:05:32:bf:fe:c9:8d:df:59:8f:5a:3a:
                    c2:53:8e:90:04:ff:66:7a:7f:4e:36:85:66:7f:28:
                    68:4f:e5:df:51:0f:56:1c:6d:57:95:f1:3a:fb:8e:
                    d1:b5:2e:ac:50:5a:03:e1:2f:0f:2f:0b:f1:f2:e6:
                    39:eb:85:f5:2d:8c:69:48:69:9a:48:19:59:01:fa:
                    ae:bc:8c:5b:e9:e3:7c:a7:d7:b3:cc:dd:dc:c9:ce:
                    8c:ff:63:07:92:cd:58:2d:7c:1d:19:2e:23:df:d5:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:A5:FF:9D:B5:9E:E5:6C:35:E8:2D:66:D0:DA:79:13:D8:B4:91
            X509v3 Authority Key Identifier:
                keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:5f:71:2e:16:61:52:b1:19:b9:e9:6c:b6:cc:4a:37:ee:
         b7:09:50:ed:be:fc:16:91:ff:b9:1c:60:f4:5d:2e:b4:ce:0e:
         e7:96:bf:40:16:5a:30:20:49:1c:e6:86:ef:d5:6c:ca:0c:eb:
         2a:e5:f7:07:b7:0a:e9:9c:73:cc:02:09:5e:32:4b:df:fc:4e:
         e5:81:9b:fe:fc:8c:0d:ee:73:51:a6:16:8d:8f:7c:15:4d:2b:
         17:d9:e5:ed:30:ef:4c:4d:bb:67:49:03:fe:a6:10:22:55:ee:
         3a:cd:c3:11:a2:45:d6:98:4d:f0:e2:df:17:2a:47:b8:74:48:
         cc:ba:41:3b:f0:c7:3b:f8:5c:7e:d2:87:2b:7d:51:5d:9e:7e:
         f6:ec:7e:7f:c3:a1:1f:db:e4:a6:41:08:b5:cf:8d:13:1e:25:
         8a:6f:0e:f6:f6:32:c3:9c:57:bd:bb:3a:1f:c3:26:d0:65:35:
         a6:90:e8:48:10:ea:68:25:04:2b:e8:0e:cd:f3:8c:5e:8b:46:
         95:72:38:f0:bf:db:8c:7c:a5:5d:7d:b8:14:84:13:03:21:4c:
         d1:76:31:81:95:e9:fe:de:6c:a3:9e:e0:b5:61:c6:f9:19:5c:
         ca:5d:46:b1:4d:22:c9:18:a6:59:ac:bf:60:34:72:96:99:a6:
         47:30:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:03 2026 by rpki-client