Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File:                     ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier:          8BLuY4huA5/4IwaR3LKRrJS0FcLSicWPRwCvgkjgZxU=
Subject key identifier:   FF:31:8C:2D:BE:32:83:22:7C:16:3F:B7:9C:C2:9F:B1:50:7D:75:B3
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       019D273AA908343D29360E3E43E5564C9F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 23:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:48 +0000
Files and hashes:         1: EhG-iYZNFoJEhs2X2OptzmxOfqw.roa (hash: aCu6x2h9aVNHZRLsGFz7tjoYTapCoh/tz4jAafHyEh0=)
                          2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: BgNlgqyfKQp13O1gMo+lS57kkeUM+JaDL1RThRb0SAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a9:08:34:3d:29:36:0e:3e:43:e5:56:4c:9f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: Mar 25 23:00:48 2026 GMT
            Not After : Mar 26 23:00:48 2026 GMT
        Subject: CN=ff318c2dbe3283227c163fb79cc29fb1507d75b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b4:17:23:fe:75:a5:55:72:10:81:ec:92:0f:
                    c3:6e:e5:2b:a0:0a:10:a4:8a:17:55:e2:83:38:9f:
                    47:bb:25:3f:a8:7e:28:19:cb:f7:89:23:65:2b:a6:
                    5b:d1:68:ab:55:1f:b6:b4:8d:5f:e9:2c:49:ec:ef:
                    64:d3:1d:2b:92:4c:1b:79:a7:9e:be:86:ca:95:61:
                    70:b5:6e:fd:6e:84:07:d1:a8:25:53:5f:e7:f3:8b:
                    22:ce:c5:9d:87:83:bc:f5:86:d6:cc:d9:a3:73:2c:
                    96:8b:35:83:30:d2:b3:06:53:cf:2a:9e:43:68:89:
                    be:84:d2:58:82:de:27:b8:5e:76:56:92:c1:d1:be:
                    20:eb:d5:24:46:19:14:0c:e6:59:e8:42:f5:47:48:
                    bf:d0:18:62:38:3f:43:7f:27:f5:17:78:3e:5f:8d:
                    ac:5e:a7:9e:c6:1b:67:66:06:9c:a3:b9:5d:9f:52:
                    15:c9:94:29:62:1b:65:16:4d:5b:db:3a:c9:1d:73:
                    d3:82:62:65:8b:ce:e3:41:88:c3:5a:6e:c2:bf:07:
                    48:6f:cc:d5:9e:6c:be:4d:69:09:9d:11:a3:58:bc:
                    a1:29:ed:cc:36:1d:9f:37:3e:0a:2f:25:bf:d6:6f:
                    24:e3:ac:64:4b:b3:3c:b0:c9:05:9b:51:be:08:a3:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:8C:2D:BE:32:83:22:7C:16:3F:B7:9C:C2:9F:B1:50:7D:75:B3
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:4e:9a:f6:b7:93:c8:ab:b0:6b:5a:83:2c:f7:c3:64:e4:
         9b:84:50:2e:44:59:d1:4a:50:59:85:f5:0c:2f:5d:bd:2d:d4:
         84:85:d8:b4:37:8e:6e:03:ef:04:3c:bc:f0:d1:a3:2b:f9:5b:
         c3:72:c8:d9:5f:6b:ff:44:ac:b1:36:f1:88:09:24:6a:ca:80:
         c1:d7:a4:8e:4c:4c:17:6b:4b:85:0e:4a:af:d3:37:10:be:e6:
         fc:f7:04:0d:b9:d2:c8:b0:1b:ff:4d:af:33:92:89:f2:e6:64:
         a8:af:67:84:79:6b:42:7f:67:79:c1:8c:24:8f:55:25:e9:33:
         81:19:96:eb:80:a0:2b:93:25:8e:4d:ea:00:b8:36:94:48:3b:
         09:0e:89:ef:bf:7d:b9:a9:06:ca:d4:a9:83:20:88:37:f0:a3:
         7c:2a:82:51:04:9a:26:ae:08:25:12:62:45:95:eb:e4:df:cb:
         b9:15:a8:9d:28:f8:f7:db:d4:e2:c9:8d:f5:34:63:8b:39:fa:
         dc:24:da:0f:f1:eb:8c:89:c4:ba:29:ac:6b:65:cd:b8:36:d7:
         5a:ea:34:16:68:d3:e6:d0:77:a8:f3:24:e7:bb:91:4b:ba:c7:
         99:dc:ba:92:6b:f5:8e:b0:b3:a5:e9:86:cb:5c:4e:65:46:3c:
         5c:90:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:24 2026 by rpki-client