Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          UJ9I/jzPGIC1EmFPfVM1ny0Xj2SCSGC7xuWCf1t1g9E=
Subject key identifier:   CF:16:C5:23:C2:91:30:C2:85:C3:A6:26:88:38:12:D8:C8:01:46:68
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019D27A861619EA3771D3C50A3C75547BFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:39 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: g5x7DEwdTBI98++d+jAcKibgmn/c0yGTUBmqXuAb2Xw=)
                          2: Afbq1k6w-CyvtuWTM1C6rvgCNA4.roa (hash: KbZ41VBRQC5jWkzEW0pFpnJm7Ql3SPnGBB+qurCmces=)
                          3: K4YIpNVER-DFL9QSjAJbgja5kpI.roa (hash: 4LZlDHFe7a3V5tX5Of2rt5GC1LM+o4iblPpEFTc0rds=)
                          4: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
                          5: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
                          6: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:61:61:9e:a3:77:1d:3c:50:a3:c7:55:47:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Mar 26 01:00:39 2026 GMT
            Not After : Mar 27 01:00:39 2026 GMT
        Subject: CN=cf16c523c29130c285c3a626883812d8c8014668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:4e:5b:1e:b0:9c:9e:63:fe:1c:d4:16:4d:
                    99:c2:2d:e4:4f:78:ee:f8:a3:4b:19:12:8b:97:64:
                    d6:7c:e3:fb:c6:cb:e9:b6:3a:63:b7:be:57:09:d8:
                    1c:93:2b:b1:92:08:81:f4:6e:33:09:3a:7b:69:48:
                    2b:cc:b2:76:5c:78:94:75:5c:1c:d5:33:25:4a:cb:
                    d5:59:64:be:e0:45:fa:a0:46:8f:fc:1c:2e:81:13:
                    a0:ee:7a:67:f1:24:80:b7:1b:55:fe:90:89:3d:c5:
                    15:30:21:2b:32:dc:c6:6b:93:e6:ec:c6:37:a8:4b:
                    22:ca:62:0e:cd:6b:40:c1:39:04:b7:16:4e:f7:ce:
                    56:7d:52:0d:a4:fc:5a:75:4d:49:13:6e:10:08:ae:
                    7f:d0:ec:59:cb:83:db:cb:88:b3:49:fd:13:55:13:
                    95:81:17:73:f2:6f:bb:8f:af:ad:3e:f6:0f:1f:e1:
                    46:3d:99:81:4c:52:51:00:de:34:32:24:9d:43:e8:
                    cc:97:98:95:a6:fd:0f:3b:8b:3e:eb:36:cc:c7:ff:
                    5c:fb:c4:da:de:42:55:e4:a8:53:60:41:98:f9:a3:
                    05:e8:ad:3e:de:0a:f6:0a:cf:36:8f:f1:b8:a8:7d:
                    60:7e:07:0b:c8:4e:a7:7e:80:83:14:95:bd:17:0b:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:C5:23:C2:91:30:C2:85:C3:A6:26:88:38:12:D8:C8:01:46:68
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:56:0c:46:54:8e:89:5b:2b:45:ec:3b:55:5f:fb:bc:1f:d5:
         90:9d:f3:df:df:fd:4b:33:e8:a5:15:5f:f4:26:d5:49:dc:7c:
         b8:d2:50:fa:5c:c1:6c:c9:f1:ee:9d:37:c7:90:12:c8:fb:55:
         7a:f5:14:c4:02:10:5f:90:d0:51:ae:51:7b:34:0c:15:78:8e:
         4f:42:c8:7c:7c:5d:d1:25:7e:49:05:43:37:eb:69:a6:95:43:
         ac:a5:7c:3c:ac:01:df:87:93:f4:f6:06:50:82:d7:5a:55:3e:
         17:87:39:69:bc:e6:01:76:b9:1c:15:5d:94:0a:a3:5d:3f:d2:
         dc:b5:4f:fa:5a:6a:e6:7f:6b:0d:2b:9e:03:ff:2e:b4:d3:92:
         f4:36:14:df:59:72:34:79:01:32:8d:8a:e4:11:e7:d3:8a:ef:
         02:a0:25:4f:1e:b9:35:40:c1:98:21:b6:47:fa:41:e1:fb:b4:
         ac:e5:7d:82:33:a6:00:a0:ea:cc:85:fc:53:a7:68:a3:02:bf:
         67:b5:b4:e6:11:56:7f:c0:a5:85:c4:c3:3e:6e:89:34:1f:ec:
         79:bb:3f:60:05:4c:2f:2a:f1:3d:47:00:9e:e7:88:ab:20:d5:
         2c:60:b2:16:6d:54:70:6f:bb:d3:4b:a0:76:04:44:58:03:d7:
         4a:c0:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:25 2026 by rpki-client