Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File:                     rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier:          ScbVoBaH7FBD5RLaUGqXgbN7Wt05Z//Yi2N2lnhlpcM=
Subject key identifier:   97:25:10:79:91:0A:3C:E0:65:DD:52:51:35:03:40:8A:21:A5:01:F0
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer:       /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial:       019D27A8C97FD4A79288D0BFADE5EB4A2ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number:          1194
Signing time:             Thu 26 Mar 2026 01:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:06 +0000
Files and hashes:         1: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (hash: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ=)
                          2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: o0W3i5yCbU8lHofJ+wCGJgFuuePM3HQzu7z1EXJs4ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:c9:7f:d4:a7:92:88:d0:bf:ad:e5:eb:4a:2a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
        Validity
            Not Before: Mar 26 01:01:06 2026 GMT
            Not After : Mar 27 01:01:06 2026 GMT
        Subject: CN=97251079910a3ce065dd52513503408a21a501f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:8b:ad:c5:d9:43:f6:5c:d6:6a:16:28:ad:
                    78:1a:1a:fb:c6:eb:a6:26:b6:87:98:ac:84:6e:06:
                    4c:bf:ae:30:39:4e:d6:6a:f5:79:de:d5:eb:8a:51:
                    1a:12:ad:84:0e:b9:31:5f:89:96:4f:ec:3f:47:97:
                    a5:44:8c:82:b5:5d:95:15:07:e3:f1:bb:72:d5:93:
                    5a:51:c3:f4:65:32:33:58:41:dc:28:97:71:08:02:
                    ae:45:6e:28:b1:3f:f2:71:6f:10:c3:f3:c4:1a:1b:
                    8f:d4:60:53:1b:bf:89:ae:7b:4d:50:a8:e5:d3:fd:
                    12:4f:15:98:5f:a3:69:79:ff:68:2f:a1:45:08:e5:
                    9c:66:cc:c9:1f:4a:4f:72:d8:26:38:3e:e6:1e:98:
                    d6:16:9e:6b:22:98:fc:71:94:9a:26:cb:b2:11:c2:
                    ab:ea:41:1f:e1:0b:42:cf:ca:4f:59:10:c1:32:13:
                    70:26:c1:6e:8f:60:0f:90:bb:42:6c:e0:32:0a:5e:
                    8a:bd:20:f8:84:f2:92:e2:59:96:aa:4a:2e:8c:de:
                    77:ef:93:72:96:c8:02:07:02:eb:19:0d:35:48:f8:
                    b4:0d:6e:03:5a:44:e0:3a:a3:e7:97:a9:55:a8:a9:
                    b0:36:c0:5e:46:41:b7:32:c1:23:79:2a:53:37:48:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:10:79:91:0A:3C:E0:65:DD:52:51:35:03:40:8A:21:A5:01:F0
            X509v3 Authority Key Identifier:
                keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:65:78:0f:b9:18:58:dd:ec:ef:a0:6b:86:34:7a:9c:5e:2e:
         74:33:fc:67:a0:80:a7:7b:95:66:99:02:7e:9b:3d:75:7c:31:
         3f:11:ac:d3:28:24:f0:45:e3:2b:24:65:e1:6b:0a:9b:49:14:
         12:e7:99:f9:53:e5:e6:f8:2e:39:09:71:e5:2b:f0:d7:9f:f1:
         49:f0:d3:4f:1e:ca:8c:71:5c:4b:f5:36:c3:ec:6c:2c:4b:98:
         45:5f:d7:eb:f5:68:c0:e3:7a:85:92:8c:6f:15:50:0f:62:e6:
         db:ad:46:ce:77:58:62:f8:fd:19:91:0d:f0:df:1e:44:8e:d8:
         4d:b0:8b:78:bb:3c:b2:7c:ea:c5:ab:f1:3e:c7:23:f2:1b:2d:
         06:24:30:6d:fb:91:f7:9d:27:fe:09:d0:ed:0a:05:d1:52:33:
         fa:37:6a:bf:72:c4:f9:23:6a:2f:41:2f:9a:b5:9b:45:1c:e0:
         76:c2:7e:21:7a:e8:74:c0:52:ed:1b:46:96:2d:1f:21:da:25:
         68:c6:af:6a:a0:31:b8:00:e7:db:8e:bf:50:8b:e3:b9:ac:c8:
         ce:97:5e:6b:84:ff:a2:0a:db:8c:45:66:4c:24:58:af:51:95:
         56:a9:5b:e3:c5:be:cf:b3:b8:42:12:97:10:3b:20:db:6e:10:
         96:e5:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:19 2026 by rpki-client